Splunk Valuable Features

The most valuable aspect of the solution is the dashboard. It's very intuitive. The reporting is excellent. The team and the SOC analyst are able to easily track the alerts and the correlation is very good compared to other SIEM tools. View full review »

The Splunk programming language allows you to pipe searches into another searches. What I really like is that even if you have already collected the data, you can extract data and add fields which improves building searches. This is not the case with Elasticsearch, where this needs to be done upfront. View full review »

The logs on the solution are excellent. Mostly I see just the reports or the outcome, however, with the log portion, where you could actually take log entries and pass them through the system in order to create events or conditions, and get reports. You can set up your conditions to the logs that you invested into Splunk, and get the reports or the output that you want. View full review »

Splunk is good at log collection and log management. View full review »

Splunk can extract all kinds of data. There's no limitation on what kind of structured and unstructured data one needs to extract — it can access any kind of data, including machine-generated data. The ease of deploying the agent is great in Splunk. One can easily deploy the Universal Forwarder which can extract any amount of information and put it into an indexer. The flexibility of ingesting any kind of data is good with Splunk. In regards to action-oriented tasks, If an alert is triggered where I have to perform a certain action in the form of executing a Python script or invigorating a PowerShell script — this is easy to do with Splunk. The Splunkbase is great. There are thousands of apps that are already available, I can install those apps with full-connectivity and use them to extract any form of data. The community in the Splunkbase is also really strong. The ease of integration with third-party tools is great. In the Splunkbase, there are so many apps that are easy to integrate with. The user interface is really good. There is a machine learning toolkit — I like it a lot. They have use cases in place so that people with little experience in machine learning can go through these examples of use cases and gain a better understanding. View full review »

* Core Splunk * Saved searches * Dashboards (SimpleXML) With good domain knowledge, one can build almost anything. If you throw in Alert Manager or an integration with ServiceNow. Then, you have your own SIEM. View full review »

Splunk has many good apps and has a contribution from all security vendors. That's where Splunk wins. View full review »

The logging features are useful as are the dashboards and alerts in addition to the organization of data. It has options for creating dashboards and alerts. You can also create queries in the SQL language. Splunk is a user-friendly solution. View full review »

It's the completeness of the solution that we like the most. It has a solution for backend log analytics, but also one for mobile applications. View full review »

The models that we use are pretty mature at this point, which means we can be assured we are given the best use cases right out of the box. We can just plug into the applications and everything is set up. There's very little configuration necessary. The integrations that are offered with different tools are all very good. They offer integrations for all levels of security and have offerings from some of the other major solutions in the space. The initial setup is pretty straightforward. View full review »

The flexibility of the solution is quite good. The product is stable. It offers good scalability if you are willing to pay. The technical support on offer is responsive. View full review »

It's very flexible. If you look from the cloud implementation it is there. Reports are made quickly. Unlike other tools, it caters to all kinds of technical information on the front very easily. There's no need to put in any technical information. You can pull up the reports very easily, take action, and notify stakeholders. View full review »

This is a straightforward solution, easy to configure and difficult to mess up. View full review »

The most valuable feature of Splunk is the log monitoring. View full review »

The completeness of the solution is what we like the most. View full review »

The correlation capabilities are the first value that our clients say they like with Splunk. Another benefit is that they can connect to any device or log from any device from anywhere. It's easy, the tool is very easy to install and set up. View full review »

The features I have found most valuable are the dashboards. I monitor the complete capacity that users are using in the company. View full review »

This is a good solution and allows you to get different products developed, it provides very good features. There is a large community so we can get different apps and different modules provided by the open source community. We work with that and have built a partnership with them. The solution provides automation and good visualization. They have developed their products in such a way that you can have that product in your set up. View full review »

The most valuable feature is the log aggregation, being able to scan through all of the logs. View full review »

The ability to analyze huge amounts of sales data and accurate prediction of sales forecasting is the most valuable feature. View full review »

All the features are valuable. It helps us uncover bottlenecks in the network. View full review »

The search function for splunk is like a google search. You just enter and it will quickly show you the results. View full review »

The most valuable feature is that it's very good for log aggregation. View full review »

Splunk is a good solution to collect more events than other solutions. It's a good solution, for me, for this reason. View full review »

* In-depth logs * Add-ons * The ability to ingest data from other tools * The detailed log view * It's easy to read View full review »

Selecting the relevant events and records. View full review »

The ability to correlate results. View full review »

Log search and alerting/reporting. View full review »