Avis clients sur Splunk Enterprise

La référence tout simplement

Commentaires : Un des meilleurs outils de journalisations

Avantages :

Nous a permis de faire des dashboards sur le suivi des patching de nos VM sur le Cloud et de l'installation de Crowdstrike. Mais aussi de traquer l'utilisation du NTLM V1 pour le désactiver sur nos serveurs

Inconvénients :

Les query sont un peu long et prennent un peu de temps à etre apprise

Splunk: A Monitoring Tool for all your needs

Commentaires : If i have put a word it would say "Fantastic". The functionalities Splunk provides eases team to manage/monitor their IT infrastructure and internal application you will be well aware about the performance of your applications. Setup alerting and take necessary actions in stipulated time to overcome all the issues which may affect your application performance.

Avantages :

Splunk offers various features whether you need to setup monitoring on your server, application logs based on logs ingestion set alerts so that teams got notified on real time and take actions accordingly. In this way, it helps to monitor application which are mission critical. You can make dashboards in Splunk where you can configure various components such indexes, data inputs and schedule reports as well. To achieve additional functionalities we can install third party apps as well such as AWS Add on for cloud watch log ingestion.

Inconvénients :

From Admin perspective, I found user access management a little difficult. The roles of access management becomes complicated because some time the config files for that didn't came very handy. Other then that I think all in all Splunk provides fulfill all of the requirements.

Splunk Enterprise, not just a SIEM

Commentaires : We have been using Splunk Enterprise, ES, ITSI, and other Splunk parts for 6+ years in production. This has helped us reduce staff in some cases, increase response time in most cases, and allow non-IT teams to get data and metrics in a fast efficient way.

Avantages :

The versatility is amazing. The same data in logs, such as IIS, can be used for Security, Application performance, and even error handling. This allows us to use one log to help multiple teams. This is just one example.

Inconvénients :

Start up takes someone who has had some training. While searching and output is easy, its the onboarding of custom apps that takes the know how.

Alternatives envisagées : LogRhythm Log Management et Sumo Logic

Pourquoi passer à Splunk Enterprise : Versatility with custom applications we create in house.

Best SIEM

Commentaires : Great SIEM that beats the competition, we utilized it for various functions

Avantages :

Splunk appsStrength and capabilitiesIntegration with most solutions

Inconvénients :

Resource utilizationLimited local partner support

Alternatives envisagées : LogRhythm Log Management, AlienVault OSSIM, IBM Security QRadar, ArcSight et FortiSIEM

Pourquoi passer à Splunk Enterprise : Overall functionalities

Spunk Review

Avantages :

It allows me to bring a lot of information into one friendly view. It's a great security audit tool.

Inconvénients :

It has limited functionality. It is a very memory intensive system. It does not integrate with Lennox.

The most expensive tool, requiring highly-skilled employees, capable of limitless value

Commentaires : Splunk's SPL is a flexible, straight forward query-language with aspects of SQL, R, Python, and Bash. The fact that an analyst can learn to be an engineer through using the platform provides ease of growth. It is unmatched in its automation to make data actionable, while providing reporting and visualization capabilities.

Avantages :

Splunk is provides a single tool for log aggregation, log analysis, and visualizations. Threat hunting, applying threat intelligence, and incident response are easily repeatable; pushing organizations to proactive security processes.

Inconvénients :

Splunk is expensive, especially when an organizations is exploring and building new security or data use cases. It also requires a lot of engineering maintenance, making the quality of the data highly-dependent on the skill(s) of those supporting it. Many organizations do not maximize its benefit because it is poorly managed or supported by low-skilled employees.

Alternatives envisagées : Elastic Stack

Pourquoi passer à Splunk Enterprise : Splunk scales in all aspects except price. Organizations that are serious about security and SIEM tools will see the value in their investment almost immediately. The insights from the analytics and development capabilities are not available in other tools with this level of ease.

Aneeded for the industry on the basic to the best role.

Commentaires : It's a great tool and used for many years to come.

Avantages :

Real time use. The ingestion of data and more.

Inconvénients :

Nothing yet.. maybe performance at times.

Alternatives envisagées : IBM Security QRadar

Pourquoi passer à Splunk Enterprise : Better for the industry and real time use. More expensive.

One of the best monitoring solutions for different platform.

Avantages :

Best tracking and data analysis tool which help to monitor and manage the server and system component in very effective way. Real time Visualization helps to take the quick decision so that desired action can be taken to avoid failure.Best data collection in the forms of log and which helps to define the best set of automation jobs to fix the issue.

Inconvénients :

There are few components or observation like,1. most of the time observes the slowness in the performance.2. Sometime observe the delay in the issue or updated log reflection on the portal. 3. Need more storage to manage and maintain the lo g which impact organizational costing and budget.

Helpful tool for troubleshooting and analyzing data/logs

Commentaires : The overall experience has been good. Splunk definitely helped improve our troubleshooting capabilities.

Avantages :

Splunk is great for monitoring, logging, and analyzing the large volume of data on the servers. Our support teams use Splunk to collect data/logs from the servers and troubleshoot product related issues. We introduced Splunk few years ago in our organization and it helped improve our defect/issue analysis and problem solving abilities

Inconvénients :

While Splunk is not too complex, it also requires a certain level of skillset to decipher the information. It may take a while to figure things out if you are a new user, or someone with limited technical knowledge

Splunk

Avantages :

The ease of initial setup along with the app market for add ons makes this a great product. Couple this with their support and it is so simple and great to use.

Inconvénients :

A little overwhelming how much is out there for this product and can get to be a large task to get implemented correctly.

Great tool for log collection

Avantages :

Consolidation! All logs are consolidated in one place, which makes searching and analytics better.

Inconvénients :

The search features are complicated. I end up needing help every time I have to search through the logs. You need a dedicated support team.

Splunk an Enterprise Business intelligent user tool

Commentaires : Is a robust and intelligent management tool that enables everyone with user computer knowledge to navigate in real-time, consolidate vast data into a visualized report of dashboard features , reliable and web based, no major equipment required for setup, user need a smartphone or compute to access the platform through the web, you can navigate the system as long as you have computer knowledge without any training required(user friendly) .

Avantages :

It an intelligent business tool that provided me an opportunity to customize and build report from large volume of data from different departments within the 13 Africa countries in telecommunication sectors. The platform allows data to be consolidated accordingly to the organization need and produces visualized reports of dashboard features. I also noted that the system can analyst unstructured large volume of data speedily and is reliable and web based allowing for user flexible accessible from any part of the world if you have internet. The systems have been reliable and secured from the time (2 years) I started using it without any system intermittent, system errors and cyber-attack.

Inconvénients :

The system is built and use-able with structured and unstructured organization though the price in foreign currency could hamper small and medium organization to use it especially in most Africa country where the local currency has depreciated against the major trading foreign currency.so the Forex pricing is a challenge. The navigation of the platform will require minor training though if the user is computer proficient, they would management with minor challenge and interpretation of the data. So, first time user it can be difficult to use it It will depend on internet for access and internet tend to be pricey in most African country and therefore could increase the business cost for small and medium enterprise. It can increase business cost if not fully used

Great, wholistic centralized monitoring solution

Commentaires : I've been using Splunk for over 8 years. I've seen it constantly improve and change a lot. I do enjoy it. Cloud is getting better and much better parity with on-prem

Avantages :

We use this as our SIEM. The ability to have the data ingest, visualization, alerting and correlation all in one product is very important to me from a security standpoint. We're cloud-first so having that ability with large cloud providers is important to me (AWS, Okta, GCP, etc)

Inconvénients :

The cost can be a little concerning and htere is a bit of a learning curve when you first get into Splunk. User groups, their forum and pro serv all help with that.

Alternatives envisagées : Datadog et Elastic Stack

Pourquoi passer à Splunk Enterprise : Better product.

Finding Splunk Before Splunk Finds You

Avantages :

Splunk is more than a tool or a product, it is a big data platform. Splunk can be used as a simple log aggregator all the way to a Big Data engine to find efficiency in operations of the Internet of Things. Splunk is less about its abilities, and more about your imagination about what you can do with Splunk. That is the beauty of the platform. Splunk shines in providing operational intelligence about systems and processes. Finding out how your systems are operating, how your processes are functioning leads to quick resolution of problems and points to where budgets are best spent.

Inconvénients :

Splunk is deceptively easy to set up and use. But like learning to play chess, you can learn the moves in half an hour, but take a lifetime to master. Splunk quickly provides value, but requires imagination and creativity as well as wide ranging knowledge of systems and processes to move to the next level. Not every organization needs that kind of talent to get a great return from Splunk, but the companies who compete and win will.

Best Tool for Monitoring Purposes.

Commentaires : As a user of Splunk, we generally used to monitor the log provided by the server clusters belonging to a tool called API Connect. As the logs are stored in Splunk, we tally the transaction count from API Connect tool and filter the log search in Splunk with a particular search query. We can download the logs of particular time and date of API Connect servers in case of transaction count issues. We create a dashboard for all the individual API's transaction count in terms of total transaction count of all API's. In this way, it makes our work easier to find out which API has the highest transaction count. We even use Splunk to know the state of the machine. Reports generated by the Splunk helps us to find out the API with the highest response time. In this way, Splunk makes our work a lot easier as it is very fast and highly secure.

Avantages :

1) Accepts multiple data formats like CSV, JSON, XML 2) Does the hard work for us i.e converting machine data to a human-readable format. 3) Can create customized alerts to serve our business purpose. 4) Searching on the based on queries is pretty simple. 5) We can create dashboards to analyze and visualize our search results. 6) Can export the log content to our Personal computers. 7) Setting up plugins and integrating with any tool that needs monitoring is pretty easy. 8) Technical support for the Splunk is very quick as they have a dedicated staff for that.

Inconvénients :

I did not find any flaws with this software.

Great log analysis software

Avantages :

Integrates with almost all the software seamlessly..where there is a software application that produces log, splunk can be easily integrated. Gives very powerful insights into the logs Alerts can be setup on the logs, and notifications sent out which is great again for managing the health of your application

Inconvénients :

The query language, though powerful, has a learning curve. Particularly as one goes towards complex queries. If it could be made closer to natural language, it would be so much smoother to learn. Hope that will happen sometime in future.

Splunk vs Humio and Devo

Commentaires : The APIs and plugin are great. the parsers are just fantastic. It can log anything and everything.

Avantages :

We have been using splunk for over 5 years now. nothing beats splunk in the market place. The only concern we have the pricing and the resource to support it. it's just too expensive

Inconvénients :

Too expensive and it's too hard to manage. You have to find a very qualified and very expensive resource to support it.

This is the tool every devops should have expertise on!

Commentaires : Made life easier for all SRE/DevOps oncall.

Avantages :

First of all you don't need to login to your servers. Just configure splunk forwarder on all of your server and have peace of mind. During outages you dont have to panic and just rely on Splunk and be sure that you will have your root cause visible in splunk.

Inconvénients :

Kernel huge page issues, Search head clustering, Index clusetering. These features are as good as costly too. For SHC and IC it does need all same config hosts.

Premium but pricey log management and analytics tool

Commentaires : Having a enterprise-ready centralized logging tool is critical for production success.

Avantages :

Splunk integrates with almost all popular enterprise software products including VMware, AWS, Azure, etc. Most customers use it primarily to do log analysis but it can also perform data analytics for business reporting. The UI is very straightforward and enables you to quickly search through large datasets using SPL. We were able to quickly locate the source of the issues by using Splunk to triangulate logs from several different components. There is a Splunk Cloud version with a free trial if you are aiming to do some integration work and testing. Finally, like all monitoring tools, Splunk offers AI and machine learning for even better predictive analytics.

Inconvénients :

Splunk is expensive and probably not for smaller startup companies. The pricing is tiered and is subscription-based so if you start to ingest a lot of data, look out. It can eat into most of your IT budget and Splunk by itself doesn't handle all the Day 2 operations that are needed.

One of the best place to check large amount of the logs information.Every companies best tool.

Commentaires : make our business life easy

Avantages :

The best thing about this software is i love its UI part and its dashboard where it provides the logs of all the enterprise application every business which has large amount of the transactions being held are required to maintain this tool and its logging and search frequency are very much loved and dash board has very colourful UI and easily understandable

Inconvénients :

There is no least about this software but we are looking for some more enhanced featured like optimisation and all

Best thing for monitoring application

Commentaires : good log monitoring tool

Avantages :

We are using this tool for monitoring our services log. It is easy to monitor the data using this. For each service, you can configure which log file should be shown on the UI(web). On UI, it provides lot of features like finding pattern in logs, doing analysis and generating reports and much more.

Inconvénients :

Learning is slow. Initially, it takes time to understand the reports and pattern it finds out of the log. But it's worth learning it.

Great Log Manager To Have Fireproof Applications!

Commentaires : With Splunk your platform should be safe and easy to maintain, specially if your are constantly adding features into it thanks to its error alerts.

Avantages :

User friendly and an awesome dashboard to manage your logs and analyze your apps.

Inconvénients :

It can be a little expensive but it's worth.

Splunk review

Commentaires : Mainly checking code for Fatal errors and application error which does not break in development environment.

Avantages :

I work at Fintech company and we use Splunk for checking error logs and tracking anything that goes wrong within the system. I like Splunk as it gives exact line number which is breaking the code which makes easier to debug.

Inconvénients :

The index should be accurate otherwise viewing logs is not easy.

Very Powerful and easy to administer

Avantages :

It very easy to jump in and learn. Installation, configuration, and administration is very easy. Use of the product such as Search/Dashboard can seem daunting at first but is actually very simple. Splunk has very good documentation and community support. I am always able to find answers to my questions by using Splunk Answers and/or the IRC channel.

Inconvénients :

Licensing and pricing in general. Managing the license usage can be annoying and paying for more can be costly. There have been quite a few times where small issues with our log intensive systems have caused license violations. Scenarios like this are usually avoidable with small changes to the Splunk configuration but it can be tedious.

Very advanced log storage and analyzer

Commentaires : For the log retention and analyzing purpose, it's the tool #1 in the market right now.

Avantages :

Splunk is first of all reliable from stability and information security perspective, which is a must. Second, it has one of the most advanced feature sets in analyzing, manipulation, anomaly detecting and processing log data residing in its database. Even AI/ML options are on the table, and it's possible to start implementing AI/ML with Splunk immediately.

Inconvénients :

For certain types of use, licensing structure can hit you in your face relatively quickly.