Splunk Enterprise Security ROI

Praveen-Kadali - PeerSpot reviewer
Senior Consultant at Ernst & Young

We have witnessed a 60 percent return on investment due to the security that the solution offers to our organization.

View full review »
MR
Manager, Security Engineering at a computer software company with 1,001-5,000 employees

I have witnessed ROI. However, luckily, our center does not have to pay for the license. 

View full review »
Sathish Suluguri - PeerSpot reviewer
Splunk SOAR/Phantom at PricewaterhouseCoopers

We have seen an ROI.

View full review »
Buyer's Guide
Splunk Enterprise Security
March 2024
Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
768,578 professionals have used our research since 2012.
SAURABHYADAV4 - PeerSpot reviewer
Technical Specialist at HCL Technologies Limited

I feel like Splunk is worth our investment. 

View full review »
Rishabh Gandhi - PeerSpot reviewer
Senior Security Analyst at Inspira Enterprise India Pvt. Ltd.

US customers or customers with a bigger cybersecurity budget have seen a return on investment with Splunk Enterprise Security because their internal team is using it. They have seen much more return on investment regarding how their environment is visible. However, the majority of Splunk users have faced issues because of licensing purposes.

Companies cut out budgets to include a reasonable SIEM tool rather than having the costliest solution. For certain markets, it serves a purpose and gives a great ROI. One of our customers has said that it's a good investment tool. They have been using it, and they have been getting great insight. It is certainly serving them a purpose, and that's why they are using Splunk Enterprise Security.

View full review »
TB
Sr Cybersecurity Engineer at a energy/utilities company with 10,001+ employees

Its time to value was about a year. It took us about a year because back in 2017, we were making that conversion from an on-premise ArcSight deployment to a Splunk Cloud deployment. We had to make sure that everything that was being sent to ArcSight was sent correctly to Splunk. We had to make sure that everything was in a common information model format and that we could rebuild the content.

View full review »
SC
CSO at a manufacturing company with 1,001-5,000 employees

Considering the fact that Splunk Enterprise Security aids in thwarting attackers from gaining access to our environment, I would correlate this with a return on investment.

View full review »
Maaz  Khalid - PeerSpot reviewer
Cyber Security Analyst at Rewterz

It offers a return on investment for our company.

View full review »
MANISH CHOUDHARY. - PeerSpot reviewer
SOC manager at a tech vendor with 10,001+ employees

We have seen a return on our investment in Splunk. The variety of options that Splunk provides is a great selling point for our customers.

View full review »
Jeremiah Anderson - PeerSpot reviewer
Sr. Cybersecurity Engineer Splunk Architect at Coalfire Federal

The return on investment is very good because, with ELA, we purchased the products at a reasonable price. We did not have to pay significantly more for licensing than we could possibly use. We were able to combine and get it at a much lower cost point.

In terms of the time to value, it took us a couple of months to get used to the interface and get people trained. Unfortunately, we had some turnover during that time, so we had to constantly retrain or train new people. The newer versions of Enterprise Security that came along made things a little bit easier. Luckily, we had some free training provided to us because we have an enterprise license agreement.

View full review »
DS
Security Analytics innovation lead at a pharma/biotech company with 10,001+ employees

We've seen an ROI by automating Splunk Enterprise Security, but automation requires another product and license. 

View full review »
LC
Security Engineer at a recreational facilities/services company with 10,001+ employees

The TCO and ROI are really great if you're in the private, non-public sector and you're in a more standard business sector. The return on investment in total cost of ownership on Splunk is from somebody who doesn't fit into that neat silo. Do we calculate that stuff? So our return on investment is by being able to solve problems that we never knew we could solve. My answer to it is the flexibility to be able to figure out student engagement when COVID hit. This was the only platform we could do it on.

View full review »
Balamurali Vellalath - PeerSpot reviewer
Practice Head-CyberSecurity at ALTEN calsoft Labs

In terms of ROI, for example, if you look at one of our customers today, they are managing close to 100 million events per day. If you look at a traditional SIEM with 100 million events, they need to manage this environment with at least 25 to 30 people. That's 30 security analysts that have to be there. However, when Splunk was deployed, a lot of automation was added on top of it, and today we are managing the same environment with Splunk with close to 15 people. In that sense, if you look at it that way, the ROI is between 30-40%.

View full review »
JG
IT Director at Administrative Office U.S. Courts

There are a lot of things for which you can measure a return on investment, but security is something on which it is hard to put a dollar value and measure how much return you have got. However, in terms of helping the administrator or helping the company to put security in place, Splunk does a great job. I cannot imagine a life without Splunk.

View full review »
OO
Owner at Py Concepts

I have witnessed an ROI while using Splunk. There were some incidents previously in which the company lost millions of dollars. Bringing in Splunk has curbed that. 

View full review »
KC
IS Engineer at a hospitality company with 10,001+ employees

We have definitely seen an ROI on the solution. Any security tool has a fantastic ROI. A lot of companies don't like to budget for security until there's an incident or something goes terribly, terribly wrong. Just having that SIEM and having eyes on potential security issues is an ROI.

View full review »
BC
IT Specialist at a government with 10,001+ employees

We have seen an ROI in terms of the mean time to resolution and man-hours. We are able to allocate those hours to other things. We have not got there yet in terms of the upfront costs, but we will get there over time.

When it comes to the time to value, we are getting there. We have not got there yet, but over time, we will get to the time to value.

View full review »
Sneha Golhar - PeerSpot reviewer
Senior Engineer at Wipro Limited

By automating our monitoring and alerting with Splunk Enterprise Security, we've achieved a significant return on investment. This has freed up over 190 days of manual monitoring effort by our team, resulting in overall cost savings of around 30 million dollars.

View full review »
JB
Security Engineer at State of Nevada

The company has witnessed an ROI in terms of the amount of time saved via being able to tweak our searches. The docs are great. They help tremendously in filling knowledge gaps. The ROI is solid. 

View full review »
HC
Insider Thread Consultant at a manufacturing company with 10,001+ employees

We do see a return on investment. The product saves us time by automating reports and helping us see data.

View full review »
Alex Adamovici - PeerSpot reviewer
Head of Knowledge Capture Cloud at Integritie

It's a great investment, especially if you want to strengthen your security stance.

View full review »
Yash-Gupta - PeerSpot reviewer
Analyst, TSG Information Security Cyber Operations at a consultancy with 5,001-10,000 employees

I haven't witnessed an ROI in terms of how I'm using the tool. 

View full review »
VA
Tech Director at a government with 10,001+ employees

We have seen a significant return on investment when it comes to Splunk, especially because of how it has allowed our operators to quickly respond to events on a day-to-day basis. It has allowed global observability.

There has definitely been a time to value. It comes down to having operators have access to such a unified platform.

View full review »
VN
Owner at a computer software company with 1-10 employees

The return on investment is quite favorable with Splunk, particularly for large enterprises that have made the initial purchase and possess the requisite expertise and technical support.

View full review »
RB
Engineer at a government with 10,001+ employees

We would have seen an ROI. We are using it for a lot of our operational work and other things as well that are not related to what we are doing on a daily basis. We are looking at logs and other things that our executives are looking for.

Its time to value was within a year or so. There are a lot more things that we could do with Splunk, and that is why we ended up adding some stuff to it to fit our needs.

It is hard to tell whether we had any cost efficiencies because we did not have something like this before. Of course, we have Splunk now.

View full review »
JC
Cyber Security at a financial services firm with 5,001-10,000 employees

We are in a growth state right now. We have seen an ROI, but anticipating any point in the future is a little difficult, so it is a mixed response. Our scale is not quite clearly defined to be able to put it to a metric or to tie it back to consumption use. There is a little bit of autonomy in there to over-adjust and still find that we can true-up in a better space. That has been good for us, but if you let that run away from you, then you start to get in trouble. 

We have not seen any cost-efficiency. We have seen our usage and needs grow, so we have seen Splunk go up in cost for us. We have not quite realized any efficiencies yet. It is also indicative of our maturity model.

View full review »
OF
SOAR Developer at a media company with 10,001+ employees

We have probably seen an ROI. We are in the security space, and there has definitely been improvement in uptime and the mean time to detect and respond to security alerts.

Its time to value is pretty immediate. The more logs and the more standardization that we get into Splunk, the quicker that comes.

View full review »
MM
SOC Analyst at a tech services company with 10,001+ employees

We will see cost efficiencies mainly just from saving time and the shortened time and response to those incidents that we see. The fact that everything's organized in one application, we should see a bit of an increase in efficiency.

View full review »
AS
Senior Network Engineer at a government with 5,001-10,000 employees
AB
Risk Manager at Samapartners

Splunk Enterprise Security has delivered a return on investment through its effective threat detection and vulnerability response capabilities. We have successfully demonstrated this positive impact on our customers through comprehensive reports.

View full review »
John Yuko - PeerSpot reviewer
Assistant Manager ICT - Projects at I&M Bank Ltd

It's too early to know if there will be a return on investment.

View full review »
GG
Security Engineer at By Light Professional IT Services

I have not seen an ROI because I am not at level two, but I am sure my bosses have seen an ROI.

We have definitely seen a time to value in terms of being able to take what Splunk Enterprise gives us and view it. It gives us more information in an easier way versus us doing everything ourselves. That alone saves time. If we save one second a day over a year, we are going to save minutes, so these little bits of time add up.

View full review »
KB
DevOps Engineer at Amplify Education, Inc.

It has made life easier for us through use, then by troubleshooting problems. It reduces the cost of the intangibles.

View full review »
ShilpeeSinha - PeerSpot reviewer
Senior Security Engineer at Citrix

I’ve never looked into ROI and have not been a part of conversations concerning ROI.

View full review »
it_user340983 - PeerSpot reviewer
Infrastructure Engineer at Zirous, Inc.

ROI is estimated at saving my team roughly 10 to 12 man hours per week in troubleshooting for our company as well as what our profits had been from our services of installing, configuring, and supporting other clients with the product.

View full review »
it_user126027 - PeerSpot reviewer
Owner with 1-10 employees

We purchased and paid for it as an annual subscription for three years and working on purchasing the Perpetual edition.

View full review »
KB
CTA\Owner at UCSolutions

We've seen quite extensive ROI, however, it's more of a qualitative assessment and I don't have numbers to share. It works well and customers are happy. That's what counts. 

View full review »
it_user575310 - PeerSpot reviewer
Engineer, Infrastructure Applications at a healthcare company with 1,001-5,000 employees
TF
CTO at IHS Markit

Most of our return on investments have been through faster error resolutions. Our meantime to recovery has dropped for issues. We can often fix things before the customer notices them. Whereas, when logging was done custom by each team in non-standard ways, it would take days to resolve issues that are now resolved in sometimes minutes.

View full review »
CJ
Information Security Engineer/Architect at The Church of Jesus Christ of Latter-day Saints

We are a nonprofit, so it is hard to quantify. 

View full review »
SM
Engineering Manager at a manufacturing company with 10,001+ employees

Some of the insights that we have obtained as a part of using Splunk have greatly helped us in increasing our revenue in terms of selling our products.

We have seen a decent ROI. For the month of October 2018, when we had a product launch, we were able to query and generate BI dashboards on the fly. This was huge, and not possible two and a half to three years back because it was more of a manual process. Now, with APIs being available, it is very simple to tweak or write a small piece of glue code to go ahead and create a new dashboard for a business unit to make near real-time decisions to focus more on other geographies when launching the product.

View full review »
Donald Baldwin - PeerSpot reviewer
Principal Enterprise Architect at Aurenav Sweden AB

ROI's a hard thing to pin down. We've had it for so long, it's part of our core operating infrastructure.

View full review »
JD
Enterprise Architect at a tech services company with 10,001+ employees

If you have a large number of servers, even a few hundred servers, then you need to track specific data and log information from a lot of servers. You can either go to each server individually or set up jobs to ship those logs somewhere with rsync or Syslog. The other option is use Splunk and push them all to Splunk, then from Splunk you can just create alerts and run reports against all that data in one place with a single query rather than having to do all that work repeatedly. It saves us a lot of time, just in man-hours, and being able to look at hundreds or thousands of servers simultaneously.

View full review »
RM
Splunker at freelancer

Personnel costs are saved by not having to involve domain developers from multiple teams when tracing a problem that spans multiple platforms.

View full review »
PN
Director at a tech services company with 10,001+ employees

We have seen ROI and improvements as we have continued to use the product, but they are more reactive. We want to be proactive on an enterprise-wide scale.

View full review »
GW
Consultant at Splunxter, Inc.

We usually get multi X-factor within a quarter.

View full review »
GM
Application Engineer at Expedia

We have had a reduction in the time it takes to resolve issues and correlate what has failed. This has significantly helped.

View full review »
it_user867087 - PeerSpot reviewer
Security Engineer at Information Innovators Inc. (Triple-i)

Excellent overall. 

View full review »
MA
System Administrator at Abdullah Al-Othaim Markets

It made our organization better through integration.

View full review »
it_user174663 - PeerSpot reviewer
Systems/Applications Specialist with 201-500 employees

I'm not sure about the money but in saved time and a new kind of visibility for the system/business process this product has been revolutionary in the working environment. The demand for deeper integration and more details hasn't stopped since the initial implementation and we have moved on from just technical and business reports, KPI reports from other systems and we keep building new alerts, dashboards and reports as per new requirements.

View full review »
GA
Security Architect at a comms service provider with 10,001+ employees

We have seen ROI.

View full review »
it_user313119 - PeerSpot reviewer
Integration Architect at a manufacturing company with 1,001-5,000 employees

Every stop or slowdown of the production line means lost of money, e.g. 30% reduction when compared to the current baseline.

View full review »
it_user859464 - PeerSpot reviewer
Senior Cloud Operations Analyst at a tech vendor with 1,001-5,000 employees

Our ROI is high.

View full review »
TS
Project Manager at a comms service provider with 10,001+ employees

There are lots of use cases and features that make Splunk a good choice for us.

View full review »
Buyer's Guide
Splunk Enterprise Security
March 2024
Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
768,578 professionals have used our research since 2012.