ELK Logstash vs. Splunk

ELK Logstash is ranked 9th in Log Management with 2 reviews vs Splunk which is ranked 1st in Log Management with 63 reviews. The top reviewer of ELK Logstash writes "Stable, with good documentation, but needs better email notification". The top reviewer of Splunk writes "Its AMIs make it easy to spin up a Splunk cluster or add a new node to it". ELK Logstash is most compared with Graylog, IBM QRadar and AlienVault. Splunk is most compared with IBM QRadar, LogRhythm NextGen SIEM and Graylog. See our ELK Logstash vs. Splunk report.
Cancel
You must select at least 2 products to compare!
ELK Logstash Logo
9,904 views|9,314 comparisons
Splunk Logo
115,435 views|68,058 comparisons
Most Helpful Review
Find out what your peers are saying about ELK Logstash vs. Splunk and other solutions.
309,940 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
ELK documentation is very good, so never needed to contact technical support.

Read more »

It is quite extensible. It is a platform that we can build our use instead of each case instead of each case being limited or restricted to each capability. This is probably the best feature.In the past we used the different application to collect logs. We used SurfWatch and VMware to do so. But, we found that the Splunk has more capacity to do more in less time. They provide a aster speed to index all the events , and this is a huge asset.The dashboards are the most valuable feature. We like the ability to drill in and see what queries are under the dashboard, build new visualizations, edit the querying, and see the reports.We were able to create a catalog of dashboards and have a holistic view at all levels. We could understand our business much better. Real-time errors, which were buried in emails before now, surfaced up on dashboards.The technical support has been very good. They are very responsive and have been helpful.You can run reports against multiple devices at the same time. You are able to troubleshoot a single application on a thousand servers. You can do this with a single query, since it is very easy to do.It has reduced the time to resolution, time to investigate, and time to troubleshoot for debugging issues.Out-of-the-box, it seems very powerful.

Read more »

Cons
Email notification should be done the same way as Logentries does it.We set up a cron job to delete old logs so that we wouldn't hit a disk space issue. Such a feature should be available in the UI, where old logs can be deleted automatically. (Don’t know if this feature is already there).They don't provide user authentication and authorisation features (Shield) as a part of their open-source version.Authentication is not a default in Kibana. We need to have another tool to have authentication and authorization. These two should be part of Kibana.We had issues with scalability. Logstash was not scaling and aggregation was getting delayed. We moved to Fluentd making our stack from ELK to EFK.

Read more »

I would like to see future development in terms of ML (Machine Learning).I think the tech support response time could be a bit better. Sometimes I need to wait more than 24 hours for a response to my tickets.Splunk is not very user-friendly. It has a complex architecture in comparison to other solutions on the market.We do have to educate developers on how to not blow it up. It is a little to easy to write an expensive query and overly stress the system. This could be improved.I would like additional features in different programming models with the support for writing queries in SQL or other languages, such as C#, Java, or some other type of query definitions.When you get into large amounts of data, Splunk can get pretty slow. This is the same on-premise or AWS, it doesn't matter. The way that they handle large data sets could be improved.I would like to see an updated dashboard. The dashboard is a little out-of-date. It could be made prettier.My company could benefit from doing more Splunk training with Splunk consultants teaching us how to use it.

Read more »

Pricing and Cost Advice
Information Not Available
I think the price could be improved.I am not personally involved with the pricing of the solution.Some of the insights that we have obtained as a part of using Splunk have greatly helped us in increasing our revenue in terms of selling our products.The pricing seems good relative to the other vendors that we have had here. However, they need to find ways to be more flexible with the licensing and be able to deal with situations where we start generating more logs. Maybe having some controls in the Splunk interface to turn it off, so we don't have to change anything in our application.We have had a reduction in the time it takes to resolve issues and correlate what has failed.It would be nice if the pricing were cheaper. However, we did purchase it.Splunk is not free.We have seen ROI and improvements as we have continued to use the product, but they are more reactive.

Read more »

report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
309,940 professionals have used our research since 2012.
Ranking
9th
out of 40 in Log Management
Views
9,904
Comparisons
9,314
Reviews
2
Followers
137
Avg. Rating
7.5
1st
out of 40 in Log Management
Views
115,435
Comparisons
68,058
Reviews
59
Followers
2,553
Avg. Rating
8.7
Top Comparisons
Compared 40% of the time.
Compared 11% of the time.
Compared 7% of the time.
Compared 16% of the time.
Compared 9% of the time.
Compared 7% of the time.
Also Known As
Elastic Stack, ELK Stack
Learn
Elastic
Splunk
Overview

Logstash is an open source, server-side data processing pipeline that ingests data from a multitude of sources simultaneously, transforms it, and then sends it to your favorite “stash.”

Splunk software has been around since 2006 and the company has since grown to become an industry leader. Splunk's vision is to make machine data accessible, usable and valuable to everybody. The company offers a wide range of products to turn machine data into valuable information by monitoring and analyzing all activities. This is known as Operational Intelligence and is the unique value proposition of Splunk.

Splunk is well-known for its Log Management capabilities and also for its Security Information and Event Management (SIEM) solutions.

Offer
Learn more about ELK Logstash
Learn more about Splunk
Sample Customers
Sprint, Grab, Autopilot, Just Eat, Verizon Wireless, Green Man Gaming, Compare Group, Tango, Perceivant, QuizletSplunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Top Industries
No Data Available
REVIEWERS
Financial Services Firm19%
Energy/Utilities Company14%
Retailer14%
Insurance Company9%
VISITORS READING REVIEWS
Financial Services Firm17%
Comms Service Provider11%
Energy/Utilities Company7%
Manufacturing Company6%
Company Size
No Data Available
REVIEWERS
Small Business21%
Midsize Enterprise13%
Large Enterprise67%
VISITORS READING REVIEWS
Small Business14%
Midsize Enterprise19%
Large Enterprise67%
Find out what your peers are saying about ELK Logstash vs. Splunk and other solutions.
309,940 professionals have used our research since 2012.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.

Sign Up with Email