We performed a comparison between Splunk APM and Splunk Enterprise Security based on real PeerSpot user reviews.
Find out in this report how the two Application Performance Monitoring (APM) and Observability solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The solution is stable and reliable."
"The most valuable features are troubleshooting and optimizing application performance."
"Splunk's dashboards are great."
"It is a good tool. It allows you to set alerts for application and infrastructure monitoring, and it allows you to create dashboards."
"The volume it handles is very good, including the number of metrics, the volume number of traces, and more."
"Detectors are a powerful feature."
"The most valuable feature is dashboard creation."
"The features are pretty much ready out of the box."
"Aggregation searches have reduced time and difficulty of identifying trends and conditions which need to reviewed."
"Splunk has give us the capability to easily track problems and their status."
"We can present to our management in real time the security of the batch management for the PCs, security regarding the network equipment. We're currently working in the Azure Cloud project, so we can send any logs from the cloud to Splunk. We can monitor them and we can present to the managers and customers. It's a very good solution for reporting. We use Splunk for reporting and monitoring of any solution in the company."
"The ability to manage large amounts of generated data and to protect all devices from unauthorized use are the most valuable features."
"The completeness of the solution is what we like the most."
"It gives me notifications of notable events."
"Its compatibility with other SIEMS is very useful."
"It has a big user base, so the community is useful."
"The licensing model is expensive. We need to monitor the amount of data ingested because the cost is based on the data collected."
"Primarily, the logs in Slunk APM can be challenging to navigate and comprehend, making it difficult to understand the details within each log. Compared to other tools like LogDNA, which are more intuitive in this aspect, the logs in Slunk APM can require more effort to understand."
"They can improve the flow system and the keyword language. It has predefined keywords, but they can be improved."
"The UI enhancements could be a way to improve the solution in the future."
"I've been using the Splunk query language, and it can be a bit time-consuming to set up the queries I need."
"There are some predefined metrics.......we may want to create customized metrics."
"We currently lack log analysis capabilities in Splunk APM."
"Splunk's functionality could be improved by adding database connectors for other platforms like AWS and Azure."
"It currently has limited default rules and customizations. If they can concentrate more on the compliance part and the security information part, it would be helpful. The platform part is good, but it requires many features from the security aspect."
"Its interface and usability can always be improved."
"The training was mostly sales-focused, like how to monitor your sales. It was hard to then come back from doing the training and try to switch it to a cybersecurity focus because all the training we did was sales oriented. The basic training didn't really touch on any kind of cybersecurity use cases or anything like that. That would have been great to see in the training."
"Over time I will have more requirements and I can foresee the solution could improve the search algorithm to run and output the data faster."
"The support and the pricing can be better"
"The documentation is in definite need of improvement."
"Its user interface for everything other than the charts can be improved. Some parts of it can be simplified a bit, such as when importing documents that have the network traffic. When you're going through the information about the network traffic, you have to have the expertise, but even if a program is supposed to be for IT support, it is good to make it user-friendly because it gets easier to train people. When something goes wrong, the more difficult a program is in terms of UI, the harder it is to fix the issue."
"The analytics of Splunk could be improved."
Splunk APM is ranked 13th in Application Performance Monitoring (APM) and Observability with 13 reviews while Splunk Enterprise Security is ranked 1st in Security Information and Event Management (SIEM) with 240 reviews. Splunk APM is rated 8.2, while Splunk Enterprise Security is rated 8.4. The top reviewer of Splunk APM writes "Provides great visibility, analysis, and data telemetry". On the other hand, the top reviewer of Splunk Enterprise Security writes "It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query ". Splunk APM is most compared with Splunk ITSI (IT Service Intelligence), Sentry, Elastic Observability, Monte Carlo and Observe, whereas Splunk Enterprise Security is most compared with Wazuh, Dynatrace, IBM Security QRadar, Elastic Security and Microsoft Sentinel. See our Splunk APM vs. Splunk Enterprise Security report.
We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
