Opiniones de Splunk Enterprise

Opinión Splunk Enterprise

Comentarios: Splunk se ha alineado con nuestras expectativas. Recomendado.

Puntos a favor:

Splunk nos ha permitido fortalecer nuestras capacidades de visibilidad sobre una amplia variedad de eventos (de ciberseguridad y funcionales), dada su flexibilidad nativa para consumir, correlacionar y alertar a partir de distintas fuentes. Con ello, hemos podido detectar y reaccionar oportunamente ante aquellos eventos que representan posibles amenazas para nuestros objetivos.

Puntos en contra:

Algunas funcionalidades requieren componentes adicionales.

Básica para el Big Data

Comentarios: Muy buena, lo recomendamos aunque es conveniente analizar bien el mercado y los productos parecidos que hay.

Puntos a favor:

Capas de procesar gran volumen de datos a partir de múltiples fuentes, rápido y eficaz en el análisis . Nos ha permitido mejorar y fortalecer todos nuestros procesos internos de la empresa y optimizar nuestros objetivos

Puntos en contra:

Es un software bastante caro y no para pequeñas empresas, a no ser que te dediques a ello. Puede requetir implementar algunos complementos adicionales.

Splunk: A Monitoring Tool for all your needs

Comentarios: If i have put a word it would say "Fantastic". The functionalities Splunk provides eases team to manage/monitor their IT infrastructure and internal application you will be well aware about the performance of your applications. Setup alerting and take necessary actions in stipulated time to overcome all the issues which may affect your application performance.

Puntos a favor:

Splunk offers various features whether you need to setup monitoring on your server, application logs based on logs ingestion set alerts so that teams got notified on real time and take actions accordingly. In this way, it helps to monitor application which are mission critical. You can make dashboards in Splunk where you can configure various components such indexes, data inputs and schedule reports as well. To achieve additional functionalities we can install third party apps as well such as AWS Add on for cloud watch log ingestion.

Puntos en contra:

From Admin perspective, I found user access management a little difficult. The roles of access management becomes complicated because some time the config files for that didn't came very handy. Other then that I think all in all Splunk provides fulfill all of the requirements.

Splunk Enterprise, not just a SIEM

Comentarios: We have been using Splunk Enterprise, ES, ITSI, and other Splunk parts for 6+ years in production. This has helped us reduce staff in some cases, increase response time in most cases, and allow non-IT teams to get data and metrics in a fast efficient way.

Puntos a favor:

The versatility is amazing. The same data in logs, such as IIS, can be used for Security, Application performance, and even error handling. This allows us to use one log to help multiple teams. This is just one example.

Puntos en contra:

Start up takes someone who has had some training. While searching and output is easy, its the onboarding of custom apps that takes the know how.

Best SIEM

Comentarios: Great SIEM that beats the competition, we utilized it for various functions

Puntos a favor:

Splunk appsStrength and capabilitiesIntegration with most solutions

Puntos en contra:

Resource utilizationLimited local partner support

Spunk Review

Puntos a favor:

It allows me to bring a lot of information into one friendly view. It's a great security audit tool.

Puntos en contra:

It has limited functionality. It is a very memory intensive system. It does not integrate with Lennox.

The most expensive tool, requiring highly-skilled employees, capable of limitless value

Comentarios: Splunk's SPL is a flexible, straight forward query-language with aspects of SQL, R, Python, and Bash. The fact that an analyst can learn to be an engineer through using the platform provides ease of growth. It is unmatched in its automation to make data actionable, while providing reporting and visualization capabilities.

Puntos a favor:

Splunk is provides a single tool for log aggregation, log analysis, and visualizations. Threat hunting, applying threat intelligence, and incident response are easily repeatable; pushing organizations to proactive security processes.

Puntos en contra:

Splunk is expensive, especially when an organizations is exploring and building new security or data use cases. It also requires a lot of engineering maintenance, making the quality of the data highly-dependent on the skill(s) of those supporting it. Many organizations do not maximize its benefit because it is poorly managed or supported by low-skilled employees.

Aneeded for the industry on the basic to the best role.

Comentarios: It's a great tool and used for many years to come.

Puntos a favor:

Real time use. The ingestion of data and more.

Puntos en contra:

Nothing yet.. maybe performance at times.

One of the best monitoring solutions for different platform.

Puntos a favor:

Best tracking and data analysis tool which help to monitor and manage the server and system component in very effective way. Real time Visualization helps to take the quick decision so that desired action can be taken to avoid failure.Best data collection in the forms of log and which helps to define the best set of automation jobs to fix the issue.

Puntos en contra:

There are few components or observation like,1. most of the time observes the slowness in the performance.2. Sometime observe the delay in the issue or updated log reflection on the portal. 3. Need more storage to manage and maintain the lo g which impact organizational costing and budget.

Helpful tool for troubleshooting and analyzing data/logs

Comentarios: The overall experience has been good. Splunk definitely helped improve our troubleshooting capabilities.

Puntos a favor:

Splunk is great for monitoring, logging, and analyzing the large volume of data on the servers. Our support teams use Splunk to collect data/logs from the servers and troubleshoot product related issues. We introduced Splunk few years ago in our organization and it helped improve our defect/issue analysis and problem solving abilities

Puntos en contra:

While Splunk is not too complex, it also requires a certain level of skillset to decipher the information. It may take a while to figure things out if you are a new user, or someone with limited technical knowledge

Splunk

Puntos a favor:

The ease of initial setup along with the app market for add ons makes this a great product. Couple this with their support and it is so simple and great to use.

Puntos en contra:

A little overwhelming how much is out there for this product and can get to be a large task to get implemented correctly.

Great tool for log collection

Puntos a favor:

Consolidation! All logs are consolidated in one place, which makes searching and analytics better.

Puntos en contra:

The search features are complicated. I end up needing help every time I have to search through the logs. You need a dedicated support team.

Splunk an Enterprise Business intelligent user tool

Comentarios: Is a robust and intelligent management tool that enables everyone with user computer knowledge to navigate in real-time, consolidate vast data into a visualized report of dashboard features , reliable and web based, no major equipment required for setup, user need a smartphone or compute to access the platform through the web, you can navigate the system as long as you have computer knowledge without any training required(user friendly) .

Puntos a favor:

It an intelligent business tool that provided me an opportunity to customize and build report from large volume of data from different departments within the 13 Africa countries in telecommunication sectors. The platform allows data to be consolidated accordingly to the organization need and produces visualized reports of dashboard features. I also noted that the system can analyst unstructured large volume of data speedily and is reliable and web based allowing for user flexible accessible from any part of the world if you have internet. The systems have been reliable and secured from the time (2 years) I started using it without any system intermittent, system errors and cyber-attack.

Puntos en contra:

The system is built and use-able with structured and unstructured organization though the price in foreign currency could hamper small and medium organization to use it especially in most Africa country where the local currency has depreciated against the major trading foreign currency.so the Forex pricing is a challenge. The navigation of the platform will require minor training though if the user is computer proficient, they would management with minor challenge and interpretation of the data. So, first time user it can be difficult to use it It will depend on internet for access and internet tend to be pricey in most African country and therefore could increase the business cost for small and medium enterprise. It can increase business cost if not fully used

Great, wholistic centralized monitoring solution

Comentarios: I've been using Splunk for over 8 years. I've seen it constantly improve and change a lot. I do enjoy it. Cloud is getting better and much better parity with on-prem

Puntos a favor:

We use this as our SIEM. The ability to have the data ingest, visualization, alerting and correlation all in one product is very important to me from a security standpoint. We're cloud-first so having that ability with large cloud providers is important to me (AWS, Okta, GCP, etc)

Puntos en contra:

The cost can be a little concerning and htere is a bit of a learning curve when you first get into Splunk. User groups, their forum and pro serv all help with that.

Finding Splunk Before Splunk Finds You

Puntos a favor:

Splunk is more than a tool or a product, it is a big data platform. Splunk can be used as a simple log aggregator all the way to a Big Data engine to find efficiency in operations of the Internet of Things. Splunk is less about its abilities, and more about your imagination about what you can do with Splunk. That is the beauty of the platform. Splunk shines in providing operational intelligence about systems and processes. Finding out how your systems are operating, how your processes are functioning leads to quick resolution of problems and points to where budgets are best spent.

Puntos en contra:

Splunk is deceptively easy to set up and use. But like learning to play chess, you can learn the moves in half an hour, but take a lifetime to master. Splunk quickly provides value, but requires imagination and creativity as well as wide ranging knowledge of systems and processes to move to the next level. Not every organization needs that kind of talent to get a great return from Splunk, but the companies who compete and win will.

Best Tool for Monitoring Purposes.

Comentarios: As a user of Splunk, we generally used to monitor the log provided by the server clusters belonging to a tool called API Connect. As the logs are stored in Splunk, we tally the transaction count from API Connect tool and filter the log search in Splunk with a particular search query. We can download the logs of particular time and date of API Connect servers in case of transaction count issues. We create a dashboard for all the individual API's transaction count in terms of total transaction count of all API's. In this way, it makes our work easier to find out which API has the highest transaction count. We even use Splunk to know the state of the machine. Reports generated by the Splunk helps us to find out the API with the highest response time. In this way, Splunk makes our work a lot easier as it is very fast and highly secure.

Puntos a favor:

1) Accepts multiple data formats like CSV, JSON, XML 2) Does the hard work for us i.e converting machine data to a human-readable format. 3) Can create customized alerts to serve our business purpose. 4) Searching on the based on queries is pretty simple. 5) We can create dashboards to analyze and visualize our search results. 6) Can export the log content to our Personal computers. 7) Setting up plugins and integrating with any tool that needs monitoring is pretty easy. 8) Technical support for the Splunk is very quick as they have a dedicated staff for that.

Puntos en contra:

I did not find any flaws with this software.

Great log analysis software

Puntos a favor:

Integrates with almost all the software seamlessly..where there is a software application that produces log, splunk can be easily integrated. Gives very powerful insights into the logs Alerts can be setup on the logs, and notifications sent out which is great again for managing the health of your application

Puntos en contra:

The query language, though powerful, has a learning curve. Particularly as one goes towards complex queries. If it could be made closer to natural language, it would be so much smoother to learn. Hope that will happen sometime in future.

Splunk vs Humio and Devo

Comentarios: The APIs and plugin are great. the parsers are just fantastic. It can log anything and everything.

Puntos a favor:

We have been using splunk for over 5 years now. nothing beats splunk in the market place. The only concern we have the pricing and the resource to support it. it's just too expensive

Puntos en contra:

Too expensive and it's too hard to manage. You have to find a very qualified and very expensive resource to support it.

This is the tool every devops should have expertise on!

Comentarios: Made life easier for all SRE/DevOps oncall.

Puntos a favor:

First of all you don't need to login to your servers. Just configure splunk forwarder on all of your server and have peace of mind. During outages you dont have to panic and just rely on Splunk and be sure that you will have your root cause visible in splunk.

Puntos en contra:

Kernel huge page issues, Search head clustering, Index clusetering. These features are as good as costly too. For SHC and IC it does need all same config hosts.

Premium but pricey log management and analytics tool

Comentarios: Having a enterprise-ready centralized logging tool is critical for production success.

Puntos a favor:

Splunk integrates with almost all popular enterprise software products including VMware, AWS, Azure, etc. Most customers use it primarily to do log analysis but it can also perform data analytics for business reporting. The UI is very straightforward and enables you to quickly search through large datasets using SPL. We were able to quickly locate the source of the issues by using Splunk to triangulate logs from several different components. There is a Splunk Cloud version with a free trial if you are aiming to do some integration work and testing. Finally, like all monitoring tools, Splunk offers AI and machine learning for even better predictive analytics.

Puntos en contra:

Splunk is expensive and probably not for smaller startup companies. The pricing is tiered and is subscription-based so if you start to ingest a lot of data, look out. It can eat into most of your IT budget and Splunk by itself doesn't handle all the Day 2 operations that are needed.

One of the best place to check large amount of the logs information.Every companies best tool.

Comentarios: make our business life easy

Puntos a favor:

The best thing about this software is i love its UI part and its dashboard where it provides the logs of all the enterprise application every business which has large amount of the transactions being held are required to maintain this tool and its logging and search frequency are very much loved and dash board has very colourful UI and easily understandable

Puntos en contra:

There is no least about this software but we are looking for some more enhanced featured like optimisation and all

Best thing for monitoring application

Comentarios: good log monitoring tool

Puntos a favor:

We are using this tool for monitoring our services log. It is easy to monitor the data using this. For each service, you can configure which log file should be shown on the UI(web). On UI, it provides lot of features like finding pattern in logs, doing analysis and generating reports and much more.

Puntos en contra:

Learning is slow. Initially, it takes time to understand the reports and pattern it finds out of the log. But it's worth learning it.

Great Log Manager To Have Fireproof Applications!

Comentarios: With Splunk your platform should be safe and easy to maintain, specially if your are constantly adding features into it thanks to its error alerts.

Puntos a favor:

User friendly and an awesome dashboard to manage your logs and analyze your apps.

Puntos en contra:

It can be a little expensive but it's worth.

Splunk review

Comentarios: Mainly checking code for Fatal errors and application error which does not break in development environment.

Puntos a favor:

I work at Fintech company and we use Splunk for checking error logs and tracking anything that goes wrong within the system. I like Splunk as it gives exact line number which is breaking the code which makes easier to debug.

Puntos en contra:

The index should be accurate otherwise viewing logs is not easy.

Very Powerful and easy to administer

Puntos a favor:

It very easy to jump in and learn. Installation, configuration, and administration is very easy. Use of the product such as Search/Dashboard can seem daunting at first but is actually very simple. Splunk has very good documentation and community support. I am always able to find answers to my questions by using Splunk Answers and/or the IRC channel.

Puntos en contra:

Licensing and pricing in general. Managing the license usage can be annoying and paying for more can be costly. There have been quite a few times where small issues with our log intensive systems have caused license violations. Scenarios like this are usually avoidable with small changes to the Splunk configuration but it can be tedious.