We performed a comparison between ServiceNow Cloud Observability and Splunk Enterprise Security based on real PeerSpot user reviews.
Find out what your peers are saying about Datadog, Dynatrace, New Relic and others in Application Performance Monitoring (APM) and Observability."The solution Lightstep/ServiceNow has a couple of pretty advanced functionalities to help us investigate a deviation and help the development teams have better observability in the environment using distributed and complex services."
"The ability to create a stream based on different parameters, operation name, service name, URL, tags, and URI part, is one valuable feature."
"The UI is very intuitive."
"Compared to IBM QRadar, Splunk Enterprise Security offers faster alert resolution."
"The best part of Splunk Enterprise Security is its customizable settings."
"It is very stable. We have not had any problems."
"The initial setup isn't overly complex."
"Integration with the cloud is pretty important and good for us. We found the integration with a lot of tools, not all tools yet, valuable. It does make the transfer of data, log files, and other things easier for us."
"It provides logs in one place, so they are easy to find. It collects the logs from multiple places, then you have just one place where you see the whole flow from the front-end to the back-end."
"It has reduced the time to resolution, time to investigate, and time to troubleshoot for debugging issues."
"It has virtual visualization, and other products do not."
"The design of this solution is not very intuitive and probably could come with more friendly tips for beginners."
"The dashboard and graphics must be improved."
"The support team could be better. Because of the different versions of different tactics of integrating reactive code base, the documentation is not very clear if someone has to be onboard. I would rate the documentation of Lightstep a five out of ten. It could need improvement."
"An improved user interface along with multi-tenancy support would be beneficial."
"Queries are not always as easy or straightforward as they might be, so it can be difficult to figure out what you need to look for."
"The UI could be better. This is applicable to Splunk in general. I know that a lot of people who get their hands on Splunk are hesitant to use it just because they find it overwhelming. There are a lot of options."
"The threat management part is still lagging. There are some gaps in threat management. Other vendors have built-in threat management systems, but Splunk lacks the threat management component in its portal. The UEBA and everything else is perfect, but it lacks a unified threat intelligence and management part."
"The CIM model is the method Splunk uses to normalize data and categorize its important parts, but it is quite complex."
"Splunk Enterprise Security has not helped reduce our alert volume."
"The cluster environment should be improved. We have a cluster. In the Splunk cluster environment, in the case of heavy searches and heavy load, the Splunk cluster goes down, and we have to put it in the maintenance mode to get it back. We are not able to find the actual culprit for this issue. I know that cluster has RF and SF, but it has been down so many times. There should be something in Splunk to help users to find the reason and the solution for such issues."
"More training on PetaData using artificial intelligence techniques to identify the events which are not normal and exceptions that would help the organization identify threats and malware on the go with results."
ServiceNow Cloud Observability is ranked 46th in Application Performance Monitoring (APM) and Observability with 3 reviews while Splunk Enterprise Security is ranked 1st in Security Information and Event Management (SIEM) with 246 reviews. ServiceNow Cloud Observability is rated 7.4, while Splunk Enterprise Security is rated 8.4. The top reviewer of ServiceNow Cloud Observability writes "Provides effective observability and offers robust alerting and monitoring capabilities". On the other hand, the top reviewer of Splunk Enterprise Security writes "It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query ". ServiceNow Cloud Observability is most compared with Grafana, New Relic, Dynatrace, Datadog and Sentry, whereas Splunk Enterprise Security is most compared with Wazuh, IBM Security QRadar, Dynatrace, Elastic Security and Microsoft Sentinel.
We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
