Please share with the community what you think needs improvement with Splunk Insights for Infrastructure.
What are its weaknesses? What would you like to see changed in a future version?
We haven't faced any problems yet. It's working as expected. We are using the enterprise-grade, strong products and we're just paying a lot for it right now. People intend to go for automation. We are following the works process and we are inculcating the engineers to ensure everything is automated. Whatever needs to be mitigated, has to be followed up on ticketing tools, this tool would come in. It handles the issues going on and what needs to be remediated in this single tool. We need multiple tools in order to accomplish what we need. It's kind of a medium across multiple products. It would be better if we have a dedicated tool, that takes care of the entire work process, including automation as well. They do not have all the features that I expect right now.
Splunk would be better if some tools were integrated to be able to take action on security or network concerns. People in the IT field are looking for a single tool that can do everything. Not separate tools for monitoring and fixing.
Without having used the solution too much, I don't really have any suggestions for feature improvement. It would be useful if they provided some help pages. If you don't know too much about the tool, there should be more documentation readily available. It would be useful if they had a help button embedded in the solution so you could ask questions and get answers. The solution should provide for some entry-level training.
The cost needs to be re-examined. It's extremely expensive to run. It's also expensive to expand. That's the number one complaint all of my customers have when it comes to Splunk. It's way too expensive compared to other solutions. The integration of their cloud solution, which came out a couple of years ago, and the ability to now integrate Phantom, needs to be improved. It would be ideal if there was a more automated process for finding and identifying data sources that a user wants to bring into the solution. Right now, it's all manual.
The price of this solution is very high and can be improved. This solution is difficult to configure and the instructions are complex.
I would like to see an improvement and some innovation in the customer interface, which puts something in your design. If we able to customize more parts of the user interface, it would be great. I also think the scalability should be improved.
The solution should have more sensors regarding fiber intelligence for security measures.
In the next release, I would like to see more integration with other solutions. For example, Juniper, ManageEngine, PAM (Privileged Access Monitoring), and Wallix.
What I don't like is that you are not sure all the data is recorded. Our product is better in these areas of functionality. Splunk is quite a bit different. When you transfer some logs at the end of the day you are never sure that you grab everything or not. The transport layer is not so well done and could be better. What should be better in the solution to make Splunk a ten out of ten is a question I would rather not answer. That is an area where the products delivered by our companies compete in some ways.
I'm working at a Tech Services company and I would like to understand the competitive advantages of Nagios XI vs other Network Performance Monitoring(NPM) tools.
Can you share your expertise on this topic?Thanks
Is it required for your company to conduct a security review before purchasing an infrastructure monitoring solution?
What are the common materials you use in the review?
Do you have any tips or advice for the community and any pitfalls to watch out for?