Splunk Enterprise – Bewertungsseite 3

Vorteile

Dashboards feature is amazing, I use it much. Alerts and queries are easy to set up. Mostly it works fast so it's kind of Dev friendly so it's easy to onboard the new guys

Nachteile

Alerts should have a better way to manage it. There should be a way to promote alerts to different environments - so we will be able to set the Dev/Stg/Prod
Sometimes some things that we want to do take a while searching on the internet for a solution - they might think how to do it better - maybe some examples or better documentation

Vorteile

Splunk allows us to see exactly what is going on in production! I work on commerce for a fortune 100 company, and we use Splunk to monitor our apps in real time. Splunk gives you the ability to perform queries like you would with SQL against your log statements in real time. You will learn that you can place strategic log statements in your code that allows you to identify situations in production and be proactive at solving them. For example, you can log your customer's session cookie ID, and track any given customer's activity on your website via your app logs. It gives you dials and charting capabilities to monitor even the slightest drops in customer activities due to flaws in code or slowing network calls.

Nachteile

PRICE. The software is so powerful, and they seem to leverage this in the pricing of the licenses.

Vorteile

-Easy to use tool
-Simple graphical interface which makes it easy for a new user to understand the features easily
-Real time data analysis can be carried out

Nachteile

When we try to search for data which is more than 30 days old, then sometimes we see slowness

Vorteile

The ability to set up queries and get data back quickly is invaluable

Nachteile

Learning to structure queries is a bit of a challenge in the beginning

Vorteile

Sofware is really excellent and best suited for small and large scale business who would like their systems, interfaces, server space and database health check to be performed.

Nachteile

Sometimes the Splunk alerts creates multiple tickets in ITSM tool during issue. Hence it may result in spending sometime for closure of open incidents.

Vorteile

It is an easy to use solution, the implementation is a bit more difficult.

Nachteile

So far, this is a good solution that I use every day.

Vorteile

Splunk appsStrength and capabilitiesIntegration with most solutions

Nachteile

Resource utilizationLimited local partner support

Vorteile

The ability to use this software for security operations, data analysis, creating dashboards, generating tickets and everything else

Nachteile

Splunk uses its own SPL, which is not very easy to learn. However, there are lots of documentation that Splunk provides to its customers. There is paid training available which is useful for beginners to learn.

Vorteile

I'm not sure from where to start in this case.

We use splunk for many things but mostly to analyze the traffic on the network / firewalls. It provides us with a nice overview of what's going on. It makes it very easy to spot spikes on the network and it will provide you also with deep analyzes.

For us it's an indispensable tool, probably the best tool we have.

Nachteile

To search for something is not always easy, however there are a lot of forums online, so finding help is not that difficult.

Vorteile

Splunk nos ha permitido fortalecer nuestras capacidades de visibilidad sobre una amplia variedad de eventos (de ciberseguridad y funcionales), dada su flexibilidad nativa para consumir, correlacionar y alertar a partir de distintas fuentes. Con ello, hemos podido detectar y reaccionar oportunamente ante aquellos eventos que representan posibles amenazas para nuestros objetivos.

Nachteile

Algunas funcionalidades requieren componentes adicionales.

Vorteile

Real time use. The ingestion of data and more.

Nachteile

Nothing yet.. maybe performance at times.

Vorteile

Splunk is great for monitoring, logging, and analyzing the large volume of data on the servers. Our support teams use Splunk to collect data/logs from the servers and troubleshoot product related issues. We introduced Splunk few years ago in our organization and it helped improve our defect/issue analysis and problem solving abilities

Nachteile

While Splunk is not too complex, it also requires a certain level of skillset to decipher the information. It may take a while to figure things out if you are a new user, or someone with limited technical knowledge

Vorteile

Splunk can give you extreme insights into how your systems and software are functioning. Not only is the search very flexible and powerful, the customizable dashboards give a status report at a glance into trends, problems and performance. You can also set up email alerts when errors occur limiting the need to have Splunk opened on your machine all the time.

Nachteile

Splunk has a learning curve. They have extensive documentation but it isn't intuitive and some features are buried pretty deep. We have an onsite expert who holds bimonthly meetings to answer questions in a group forum.

Vorteile

The ablitity to configure and tweak the use cases. Building Intelligence into forensics. The AI feature is gud but needs more enhancements.

Nachteile

The log management needs to be efficient , If the auditing logs is enabled then a huge influx of logs are pumed into splunk but no meaningful meaning can be derived.

In Betracht gezogene Alternativen

Gründe für den Wechsel zu Splunk Enterprise

Vorteile

Splunk Visually represents the logs mainly from production servers in the web UI .

People who Usually has no access to logs in production servers, will access the logs through splunk UI with very simplified and friendly search query.

It has lot of features like you can query for particular date and time range with specific characters. The search engine is very fast which will bring the query response effectively.

we can access all types of logs including XML and JSON.

we can create a custom dashboard with custom query for each projects and can relatively trigger the email to the support team in case of any issues.

This tool is boon for production support team in any enterprise company.

Nachteile

Licensing cost is quite higher for enterprise usage.

Query response time will be slow when you are searching for relatively longer history(Eg. 3 months old data)

Vorteile

The ease of initial setup along with the app market for add ons makes this a great product. Couple this with their support and it is so simple and great to use.

Nachteile

A little overwhelming how much is out there for this product and can get to be a large task to get implemented correctly.

Vorteile

When you need to store, correlate, and search large amounts of data, especially System Log data, there is no tool that even comes close to Splunk. It's power and flexibility is amazing.

Nachteile

Very expensive. Difficult to implement until all moving parts are understood. Steep learning curve for beginners.

Vorteile

Splunk integrates with almost all popular enterprise software products including VMware, AWS, Azure, etc. Most customers use it primarily to do log analysis but it can also perform data analytics for business reporting. The UI is very straightforward and enables you to quickly search through large datasets using SPL. We were able to quickly locate the source of the issues by using Splunk to triangulate logs from several different components. There is a Splunk Cloud version with a free trial if you are aiming to do some integration work and testing. Finally, like all monitoring tools, Splunk offers AI and machine learning for even better predictive analytics.

Nachteile

Splunk is expensive and probably not for smaller startup companies. The pricing is tiered and is subscription-based so if you start to ingest a lot of data, look out. It can eat into most of your IT budget and Splunk by itself doesn't handle all the Day 2 operations that are needed.

Vorteile

Ease of use, you can extract any kind of information using commands provided by the software vendor. The other good thing about this software is the easy implentation on the servers, and the configuration is basic.

Nachteile

For people that are not used to use command lines, it might be a liitle bit difficult on the beggining.

Vorteile

The best thing about this software is i love its UI part and its dashboard where it provides the logs of all the enterprise application every business which has large amount of the transactions being held are required to maintain this tool and its logging and search frequency are very much loved and dash board has very colourful UI and easily understandable

Nachteile

There is no least about this software but we are looking for some more enhanced featured like optimisation and all

Vorteile

Several of our applications are distributed across multiple systems. It is the same software running on each server but doing the same job for different users. Each server would generate its own log files. When things went wrong, we used Splunk to be able to see what was going on on each server. Click a few buttons and you get two logs from two different servers listed together coordinated by time. But that leads you to discover that the issue came from a separate upstream or downstream server, then bring in those logs too . . . all coordinated by time. Don't get me wrong, the IT guys love these tools for their own enterprise reasons, but as a server stack developer, this was a resource I used OFTEN.

Nachteile

I never fully grokked their SQL like language. I could do basic things daily without issue. However, I often had to hit the documentation to do anything more than a simple "find this" query.

Vorteile

We are using this tool for monitoring our services log. It is easy to monitor the data using this. For each service, you can configure which log file should be shown on the UI(web). On UI, it provides lot of features like finding pattern in logs, doing analysis and generating reports and much more.

Nachteile

Learning is slow. Initially, it takes time to understand the reports and pattern it finds out of the log. But it's worth learning it.

Vorteile

INgestion of the huge volume of the data. q

Nachteile

Reporting commands on volume data and training documentation on the reporting.

Vorteile

We use this tool primarily as a repository for syslog messages for infrastructure. It allows us to quickly analyze the logs and patterns to determine issues based on patterns. In addition it alerts very well from text based trigger alerts. These features are very easy to use and dependable.

Nachteile

I do not have any cons for this software. Mainly as a user it does exactly what I need it to do with no overhead and confusing interfaces.

Vorteile

1) Accepts multiple data formats like CSV, JSON, XML
2) Does the hard work for us i.e converting machine data to a human-readable format.
3) Can create customized alerts to serve our business purpose.
4) Searching on the based on queries is pretty simple.
5) We can create dashboards to analyze and visualize our search results.
6) Can export the log content to our Personal computers.
7) Setting up plugins and integrating with any tool that needs monitoring is pretty easy.
8) Technical support for the Splunk is very quick as they have a dedicated staff for that.

Nachteile

I did not find any flaws with this software.

Vorteile

I work at Fintech company and we use Splunk for checking error logs and tracking anything that goes wrong within the system. I like Splunk as it gives exact line number which is breaking the code which makes easier to debug.

Nachteile

The index should be accurate otherwise viewing logs is not easy.

Vorteile

log analysis, text patterns, statistics and graphing

Nachteile

Too much of programming, not easy for laymans to write queries.

Vorteile

As a software engineer, Splunk helps me debug issues in my microservice applications. The Splunk forwarders are efficient and quickly collect logging from multiple server instances. The timestamp resolution is precise making it easier to track down race conditions. The reporting and pivot tables are powerful ways to visualize frequency of api calls once you learn the syntax.

Nachteile

Splunk forwarders that collect the data from applications can sometimes hang and need to be restarted. The amount of traffic that can be collected has maximum caps based on your subscription.

Vorteile

Splunk is first of all reliable from stability and information security perspective, which is a must. Second, it has one of the most advanced feature sets in analyzing, manipulation, anomaly detecting and processing log data residing in its database. Even AI/ML options are on the table, and it's possible to start implementing AI/ML with Splunk immediately.

Nachteile

For certain types of use, licensing structure can hit you in your face relatively quickly.

Vorteile

Integrates with almost all the software seamlessly..where there is a software application that produces log, splunk can be easily integrated.
Gives very powerful insights into the logs
Alerts can be setup on the logs, and notifications sent out which is great again for managing the health of your application

Nachteile

The query language, though powerful, has a learning curve. Particularly as one goes towards complex queries. If it could be made closer to natural language, it would be so much smoother to learn. Hope that will happen sometime in future.

Vorteile

Easy to use tool with use in IT as well as security. Further business users can be trained easily as well.

Nachteile

Have not found one yet since I started using 4 years ago.

Vorteile

Makes it easy to identify trends within your environment. Once everything is aggregated it makes it easy for example, to see the knock on events of a network outage throughout the environment.

Nachteile

Web user interface is a bit clunky. Its very polished interface, but in many cases it's style over substance. When I'm debugging an issue I want to be able to drill down into the problem fast, and the shiny interface can be sluggish and slow you down.h

Vorteile

Fast consolidation of disparate logs in an easy to search way for troubleshooting. I can find problems within my organization very quickly. Sales team was very responsive in getting me a trial license to estimate my needs.

Nachteile

Set up takes some time and planning. The Licensing scheme can be pretty expensive and until you've got it up and running it can be hard to estimate how much license you need.

Vorteile

Many prebuilt log analysis modules.

Competitive advantage over DIY solutions.
Easy to setup and administer.

Nachteile

Your costs can be high in larger installs.

Vorteile

Splunk has excellent abilities to search and data-mine your logs.
In addition, you can build dashboards on top of aggregated data in order to save precious time each time you want to have a look at your system's performance without querying from scratch.

Nachteile

There are times in which the service experienced performance issues. Sometimes they were so severe which meant you're "blind" since you can't access your logs.

Vorteile

I like that it's incredibly easy to create reports and dashboards. You don't have to even know the schema of the database it's hooked up to because splunk will guide you through the creation. I've used lots of report building software and Splunk blew me out of the water.

Nachteile

I wished it would take SQL queries when I first started using it but I got used to their query structure quickly.

Vorteile

We have been using splunk for over 5 years now. nothing beats splunk in the market place. The only concern we have the pricing and the resource to support it. it's just too expensive

Nachteile

Too expensive and it's too hard to manage. You have to find a very qualified and very expensive resource to support it.

Vorteile

Splunk is more than a tool or a product, it is a big data platform. Splunk can be used as a simple log aggregator all the way to a Big Data engine to find efficiency in operations of the Internet of Things. Splunk is less about its abilities, and more about your imagination about what you can do with Splunk. That is the beauty of the platform. Splunk shines in providing operational intelligence about systems and processes. Finding out how your systems are operating, how your processes are functioning leads to quick resolution of problems and points to where budgets are best spent.

Nachteile

Splunk is deceptively easy to set up and use. But like learning to play chess, you can learn the moves in half an hour, but take a lifetime to master. Splunk quickly provides value, but requires imagination and creativity as well as wide ranging knowledge of systems and processes to move to the next level. Not every organization needs that kind of talent to get a great return from Splunk, but the companies who compete and win will.

Vorteile

Ease of querying logs, user friendly front end, user can create automated alerts for receiving information on current state of the data

Nachteile

Sometimes, becomes slow when trying to query historical data

Vorteile

We use splunk to monitor the health of applications in the test and production environments. It allows to create queries to see the specific event.

Nachteile

Pricing of the license is high especially when the number of users is more and also support from splunk is inadequate when there is a issue

Vorteile

Advanced security analytics to quickly detect malicious threats within our networks and devices with rapid response and effective alert prioritization to accelerate investigation.

Nachteile

Great integration to collect multiple data easily and in built-threat intelligence that helps to accelerate our investigations. Full of incredible features, there is nothing to dislike.

Vorteile

Main purpose of this tool for us is to monitor the logs of our application. And I can say, it is very good at this. Finding the stats, pattern out of log is very easy. You can run multiple queries job on a single application log. You can monitor job running on your logs like you can kill them, can stop particular job. It's support of sql like queries on logs is just amazing.

Nachteile

This is a great tool, there is no disadvantage of this product but just mention you need a bit of learning to use it's all the functionality.

Vorteile

Integrating spunk with other tools it is one of the best feature which splunk has. we can pull logs by integrating with other tools.

Nachteile

Writing a query in splunk is difficult. it should customize the query for users.

Vorteile

The amount of information and data that you can organize with splunk is it's best feature.

Nachteile

It will take some time getting used to how create dashboards and reports so that can pull the relevant data out of splunk.

Vorteile

We first started using Splunk as a log analysis tool like many companies do but we're not getting into a number of other use cases based on how powerful and robust the tool can be for our business. They have a lot of good apps on their marketplace and the visualizations make information for less tech savvy users readily available.

Nachteile

Starting this tool up and really getting it working takes some time, research and resources just based on the vast number of solutions it can provide. Like other tools that we use, it requires us to have good focus during planning to make sure we're not trying to do too much and instead focus on a few use cases to start.

Vorteile

Great threat analysis combined wit log analysis and deep search pattern

Nachteile

Hard to configure. You need to be an expert.

Vorteile

While Microsoft didnt provide a centralized log monitoring for enterprise machines, Splunk filled the gap. It is good one stop console to monitor logs on your every server.

Nachteile

Reports can be more user friendly and descriptive.

Vorteile

What I most like about Splunk is that it assists me in creating dashboards for my teams and other teams to verify the validity of our incoming and outbound network traffic.

Nachteile

Learning the syntax searches about it seems to very difficult and there aren't really any training guides or help on their website that I've found that assist very well with it.

Vorteile

The server logs are all stored in the same location and you can easy subdivide them by application. So different servers or processes or whatever can be in different buckets. This makes troubleshooting easier.

Nachteile

Sometimes depending on far back you are trying to go the product can be a little sluggish. Beyond that nothing.

Vorteile

Splunk integrates with many different solutions. They also have pre written apps that contain pre written dashboards and other features. It can inherit logs from many products with just several clicks.

Nachteile

Pricing model is outdated and can get really pricey really fast. It's very simple to over your daily license.