Compare Graylog vs. Splunk

Graylog is ranked 8th in Log Management with 8 reviews while Splunk is ranked 1st in Log Management with 58 reviews. Graylog is rated 8.6, while Splunk is rated 8.8. The top reviewer of Graylog writes "Provides the ability to write custom alerts, which are key to information security and compliance". On the other hand, the top reviewer of Splunk writes "Its AMIs make it easy to spin up a Splunk cluster or add a new node to it". Graylog is most compared with Splunk, ELK Logstash and LogRhythm NextGen SIEM, whereas Splunk is most compared with IBM QRadar, Dynatrace and Graylog. See our Graylog vs. Splunk report.
Cancel
You must select at least 2 products to compare!
Graylog Logo
17,529 views|14,651 comparisons
Splunk Logo
95,486 views|77,036 comparisons
Most Helpful Review
JasonCrow
Find out what your peers are saying about Graylog vs. Splunk and other solutions. Updated: September 2019.
371,639 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
I am very proud of how very stable the solution is.Real-time UDP/GELF logging and full text-based searching.UDP is a fast and lightweight protocol, perfect for sending large volumes of logs with minimal overhead.Storing logs in Elasticsearch means log retrieval is extremely fast, and full text search is available by default.We run a containerized microservices environment. Being able to set up streams and search for errors and anomalies across hundreds of containers is why a log aggregation platform like Graylog is valuable to us.Allowing us to set up alerts and integrate with platforms we already use, such as Slack and OpsGenie to alert users of these errors proactively, is also a very useful feature.It is used as a log manager/SIEM. It provides visibility into the infrastructure and security related events.The build is stable and requires little maintenance, even compared to some extremely expensive products.

Read more »

With good domain knowledge, one can build almost anything. If you throw in Alert Manager or an integration with ServiceNow. Then, you have your own SIEMOur clients are easily able to modify and evolve their implementations.The initial setup is really straightforward. It's one of the easiest installations.It helps us uncover bottlenecks in the network.it can explain to management about what kind of traffic is visiting the network. It can also explain other traffic coming in and out, along with protecting against malware.The most valuable feature of Splunk is the log monitoring.It can log more logs than other solutions. It's a good way to troubleshoot problems.We can present to our management in real time the security of the batch management for the PCs, security regarding the network equipment. We're currently working in the Azure Cloud project, so we can send any logs from the cloud to Splunk. We can monitor them and we can present to the managers and customers. It's a very good solution for reporting. We use Splunk for reporting and monitoring of any solution in the company.

Read more »

Cons
I would like to see a date and time in the Graylog Grok patterns so that I can save time when searching for a log. I like how the streams and the search query work, but adding a date and time will allow me to pull out a log in a milli-second.More complex visualizations and the ability to execute custom Elasticsearch queries would be great.With technical support, you are on your own without an enterprise license.Elasticsearch recommendations for tuning could be better. Graylog doesn't have direct support for running the system inside of Kubernetes, so it can be challenging to fill in the gaps and set up containers in a way that is both performant and stable.We ran into problems with Elasticsearch throwing a circuit-breaking exception due to field data size being too large. It turned out that the heap size directly impacted this size in a high-throughput environment, causing unexplained instability in Graylog. We were able to troubleshoot on the Elasticsearch size, but we should have been able to reference some minimum requirements for Graylog to know that our settings weren't sufficient.Since container orchestration systems are popular and Graylog fits the niche well, perhaps they could officially support running in docker containers on Kubernetes as a StatefulSet as a use case. That way, the declarative nature of Kubernetes config files would document their best case deployment scenario-Dashboards, stream alerts and parsing could be improved.Over six months, I had two similar issues where searches were performed on field "messages". It exhausted all the memory of the ES node causing an ES crash and a Graylog halt.

Read more »

It needs a better way to export dynamic views without requiring a ton of code and user/pw.It needs integration with a configuration management solution.It needs integration with a configuration management solution.They should make data onboarding easier.The product was difficult to back up the first time.Splunk needs local technical support.If possible, we would like to have not only a log monitoring system but a network monitoring feature in this solution as well.Cybersecurity and infrastructure monitoring have room for improvement.

Read more »

Pricing and Cost Advice
I use the free version of Graylog.​You get a lot out-of-the-box with the non-enterprise version, so give it a try first.Consider Enterprise support if you have atypical needs or setup requirements.​If you want something that works and do not have the money for Splunk or QRadar, take Graylog.​​I am using a community edition. I have not looked at the enterprise offering from Graylog.Having paid official support is wise for projects.

Read more »

Splunk is really expensive.Splunk should be able to integrate with other product using the free version.The pricing and licensing of the product are quite high.Splunk's cost is very high. They need to review the pricing. They have to go back and totally readdress the market.It's a little bit expensive for a small to medium enterprise.I think the price could be improved.I am not personally involved with the pricing of the solution.Some of the insights that we have obtained as a part of using Splunk have greatly helped us in increasing our revenue in terms of selling our products.

Read more »

report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
371,639 professionals have used our research since 2012.
Ranking
8th
out of 45 in Log Management
Views
17,529
Comparisons
14,651
Reviews
8
Average Words per Review
427
Avg. Rating
8.5
1st
out of 45 in Log Management
Views
95,486
Comparisons
77,036
Reviews
56
Average Words per Review
332
Avg. Rating
8.8
Top Comparisons
Compared 41% of the time.
Compared 31% of the time.
Compared 6% of the time.
Compared 11% of the time.
Compared 9% of the time.
Compared 8% of the time.
Also Known As
Graylog2
Learn
Graylog
Splunk
Overview

Graylog is purpose-built to deliver the best log collection, storage, enrichment, and analysis. Graylog is:

  • Considerably faster analysis speeds.
  • More robust and easier-to-use analysis platform.
  • Simpler administration and infrastructure management.
  • Lower cost than alternatives.
  • Full-scale customer service.
  • No expensive training or tool experts required.

Splunk software has been around since 2006 and the company has since grown to become an industry leader. Splunk's vision is to make machine data accessible, usable and valuable to everybody. The company offers a wide range of products to turn machine data into valuable information by monitoring and analyzing all activities. This is known as Operational Intelligence and is the unique value proposition of Splunk.

Splunk is well-known for its Log Management capabilities and also for its Security Information and Event Management (SIEM) solutions.

Offer
Learn more about Graylog
Learn more about Splunk
Sample Customers
Blue Cross Blue Shield, eBay, Cisco, LinkedIn, SAP, King.com, Twilio, Deutsche Presse-AgenturSplunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Top Industries
VISITORS READING REVIEWS
Software R&D Company34%
Financial Services Firm10%
Retailer8%
Government7%
REVIEWERS
Financial Services Firm20%
Energy/Utilities Company14%
Retailer12%
Insurance Company8%
VISITORS READING REVIEWS
Software R&D Company25%
Financial Services Firm13%
Comms Service Provider11%
Media Company6%
Company Size
No Data Available
REVIEWERS
Small Business29%
Midsize Enterprise13%
Large Enterprise58%
VISITORS READING REVIEWS
Small Business17%
Midsize Enterprise17%
Large Enterprise66%
Find out what your peers are saying about Graylog vs. Splunk and other solutions. Updated: September 2019.
371,639 professionals have used our research since 2012.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
Sign Up with Email