We are much faster finding and addressing issues with Splunk. We reduce the MTR and get more done.
So many of Splunk's features are invaluable to us:
I would like to get visibility into the data pipelines on heavy forwarders and indexers to see exactly their source and the cause of saturation when it occurs. This would help us learn even more about our high use applications.
No stability issues.
No scalability issues.
The support team is very competent.
The initial setup is very straightforward.
We implemented in-house
Our ROI is high.
We evaluated LogRhythm.
I love this product.