Opiniones de Splunk Enterprise

Opinión Splunk Enterprise

Comentarios: Splunk se ha alineado con nuestras expectativas. Recomendado.

Puntos a favor:

Splunk nos ha permitido fortalecer nuestras capacidades de visibilidad sobre una amplia variedad de eventos (de ciberseguridad y funcionales), dada su flexibilidad nativa para consumir, correlacionar y alertar a partir de distintas fuentes. Con ello, hemos podido detectar y reaccionar oportunamente ante aquellos eventos que representan posibles amenazas para nuestros objetivos.

Puntos en contra:

Algunas funcionalidades requieren componentes adicionales.

Básica para el Big Data

Comentarios: Muy buena, lo recomendamos aunque es conveniente analizar bien el mercado y los productos parecidos que hay.

Puntos a favor:

Capas de procesar gran volumen de datos a partir de múltiples fuentes, rápido y eficaz en el análisis . Nos ha permitido mejorar y fortalecer todos nuestros procesos internos de la empresa y optimizar nuestros objetivos

Puntos en contra:

Es un software bastante caro y no para pequeñas empresas, a no ser que te dediques a ello. Puede requetir implementar algunos complementos adicionales.

Big data is no problem for Splunk Enterprise

Comentarios: Splunk is a powerful and useful monitoring tool. Splunk's efficiency is enhanced by the ability to integrate third-party apps developed in-house. It's also interesting that we can incorporate a customs alert and dashboard. In most situations, it resolves the need to normalize data, allowing for the use of any and all data in business forecasting. It is analyzed for data that can be utilized to optimize spending plans and asset tracking.

Puntos a favor:

Without worrying too much about data type or normalization, Splunk Enterprise can efficiently manage massive amounts of data from numerous sources. Data may be accessed in a flash, and there are a number of options for tailoring and integrating data analysis workflows to create bespoke dashboards or utilizing apps from our other product partners.

Puntos en contra:

There isn't much I dislike about splunk, however if we have to be picky, it would be that it's more difficult to maintain as an administrator when splunk is installed on outdated architecture.

Best Siem solution in market.

Comentarios: Overall experience is amazing, we are happy with this software as it can ingest any form of data and generate alerts quite swiftly.

Puntos a favor:

Easy to install agents on servers, it can parse any form of data easily, Splunk can detect anomalies quite easily and the UBEA feature is amazing.

Puntos en contra:

The cost of this solution is high, and customer service is bad. Apart from that Splunk SPL language is difficult to learn.

Spunk Review

Puntos a favor:

It allows me to bring a lot of information into one friendly view. It's a great security audit tool.

Puntos en contra:

It has limited functionality. It is a very memory intensive system. It does not integrate with Lennox.

Powerful SIEM system that meets our expectations.

Comentarios: We are using Splunk Enterprise for log correlation, the analytics are accurate and it catches errors right away which improves our internal capabilities, it is a special service that collects data from different data sources very accurately to catch future issues, the reports are detailed and understandable. It has features that streamline manual work, improve our security and our protection in our IT infrastructure.

Puntos a favor:

I really like the platform, the data collection is ideal and the reports are detailed, it is the most appropriate SIEM service to monitor our IT infrastructure, it is an ideal software to take preventive measures, it is easy to customize the dashboards, the monitoring is constant and it gives us security in real time, the alerts are accurate and it helps us understand what is happening and fix it before it becomes serious.

Puntos en contra:

It is a somewhat expensive service but with more powerful features than other free SIEM systems, and it is a bit complex to set up and use for inexperienced users, so a lot of help should be sought from experienced staff and support team at first.

A better business companion when integrated with RPA

Comentarios: Overall, the experience was positive; even with a free trial license, it was much easier, and on the course and certification side, Splunk has a very good collection of videos and materials that help even a novice quickly setup the integration and indexing.

Puntos a favor:

The most useful thing about Splunk is the ease of integration with application. With uipath on-premises it was very much helpful as the business users can monitor the actions of robots through spluink without entering into uipath orchestrator

Puntos en contra:

Expression creation for indexing was bit hard as it is not user-friendly to business users if they wanted to create any new fields, also the forwarder was not able to directly connect with uipath cloud so that the logs has to be shifted to intermediate file before uploading into splunk, but that seems not an issue with splunk but more related to uipath cloud

Aneeded for the industry on the basic to the best role.

Comentarios: It's a great tool and used for many years to come.

Puntos a favor:

Real time use. The ingestion of data and more.

Puntos en contra:

Nothing yet.. maybe performance at times.

Splunk will help get your data seen.

Comentarios: Overall, Splunk is a powerful and flexible data analytics platform that offers users a range of tools and features for collecting, analyzing, and visualizing data. While it may be expensive and require additional resources to run effectively, the platform's search and reporting capabilities make it an excellent choice for organizations that need to process and analyze large volumes of data quickly.

Puntos a favor:

One of the biggest advantages of Splunk is its ability to handle large amounts of data. The platform is designed to handle massive volumes of data, making it an excellent choice for organizations that need to process and analyze large datasets quickly. Splunk's search and reporting capabilities are also incredibly powerful, allowing users to search and analyze data in real-time and visualize results using a range of charts and graphs.

Puntos en contra:

One of the potential downsides of Splunk is its cost. The platform can be expensive, particularly for smaller organizations or those with limited budgets. Additionally, the learning curve for Splunk can be steep, particularly for users who are not familiar with data analytics tools. This may require additional training or support to get the most out of the platform.

Splunk Enterprise software review

Comentarios: It is great at working with big data coming from different data sets and sources

Puntos a favor:

I am able to quickly act on pending issues as and when they arise and data is well protected because of their authorization features

Puntos en contra:

We had to purchase additional computers with higher specs than what we previously had to be able to use Splunk effectively

log Master

Comentarios: Overall i'm happy to use for any malicious activity is happened in the forwarder system its giving immediate alert system

Puntos a favor:

It's giving live alert, triggers, dashboard system based on rules we already set. the dashboard helps to see and virtualize the data.

Puntos en contra:

The only concern I feel it consumes the system space due to this my system running slow. without knowledge of Splunk query language, it is difficult to handle.

Ideal for root cause analysis

Puntos a favor:

The simplified user interface which presents logs in a readable format. Also it's ability to quickly identify integration issues

Puntos en contra:

A mechanism to hide system generated logs that are unimportant would be great

A powerful log aggregation solution with immensely useful tools built-in for popular applications.

Puntos a favor:

- Free to use for small 500MB or less daily ingress, quite nice for small use cases and learning - No development work required to deploy and provide value. - Deployment flexibility: client agents are available to use, or clientless configurations for multiple OS platforms. It's also very easy to deploy, not just flexible. its a very simple affair. - Segmentation of logs: You can create separate instances of of logs to aggregate, based on organization needs. And those instances can have their own individual storage policies to optimize consumption of storage resources. - Configuration design: Thoughtful and mature documentation and design of the application regarding enterprise-class scaling on network storage. -POWERFUL tools: The user interface lends itself to learning more about your organization from the logs you collect, through metrics of trends of the logs being gathered. There are also specific modules/add-ons for popular applications to provide more value and event-based monitoring, all without having to develop in-house dashboards and intelligence of those logs. - Customization: You can create your own queries of logs, and event-based alerts. - Web-based GUI that clean is powerful - Sales/Technical Reps are top notch in fielding questions and evaluating environment for deployment. They were extremely helpful in helping our organization develop procedures and scaling our environment for expansion with our existing infrastructure.

Puntos en contra:

- Price: This product is not free for more than the minimal use. Pricing can be very expensive, relative to open source offerings. That is the trade-off you pay for not having in-house development of open source offerings. As this product is priced based on gigabytes of indexed logs, it is important to understand the scope of licensing necessary for your environment to determine if it is a good fit for your organization. - Watch your saved queries and hardware resources: Users have the ability to create and save queries. Like in database queries, some are more efficient than others. Large inefficient queries can be very resource-intensive. If you notice slowness in day-to-day queries, or navigation in the UI, or resource use in contention, keep an eye on saved queries and user practices.

Great, wholistic centralized monitoring solution

Comentarios: I've been using Splunk for over 8 years. I've seen it constantly improve and change a lot. I do enjoy it. Cloud is getting better and much better parity with on-prem

Puntos a favor:

We use this as our SIEM. The ability to have the data ingest, visualization, alerting and correlation all in one product is very important to me from a security standpoint. We're cloud-first so having that ability with large cloud providers is important to me (AWS, Okta, GCP, etc)

Puntos en contra:

The cost can be a little concerning and htere is a bit of a learning curve when you first get into Splunk. User groups, their forum and pro serv all help with that.

Manipulate You Data

Comentarios: Splunk is widely used for manipulation of data and we encounter the use of this tool almostl twice a week. Even though it costs much more but still we have not found any alternative that is able to offer all these functionalities.

Puntos a favor:

Splunk is very easy to use due to high community support and many video tutorials available online for new users to learn. Functionalities are robust and simple to use. Data retrieval and visualisation is nice and easy if you know the right querying process. Machine Learning supports enhances performance for the cloud, especially. It collect wide variety of data and still it amaze you the way it retrievs it.

Puntos en contra:

There are many tools available in market which are potential competitors of this tool and that too at reasonable pricing. Splunk offers more functionalities but costs you too much if you look at the work it does. Complex queries may require large CPU usage and may even freeze or atleast slow down the system for a while. Need to be specific while querying the data.

Doing setup redundant servers without Splunk

Comentarios: Saved my a$$ many times. In a multi-server environment, if you don't have Splunk or something like it, it will be a nightmare to try and coordinate the various log files involved.

Puntos a favor:

Several of our applications are distributed across multiple systems. It is the same software running on each server but doing the same job for different users. Each server would generate its own log files. When things went wrong, we used Splunk to be able to see what was going on on each server. Click a few buttons and you get two logs from two different servers listed together coordinated by time. But that leads you to discover that the issue came from a separate upstream or downstream server, then bring in those logs too . . . all coordinated by time. Don't get me wrong, the IT guys love these tools for their own enterprise reasons, but as a server stack developer, this was a resource I used OFTEN.

Puntos en contra:

I never fully grokked their SQL like language. I could do basic things daily without issue. However, I often had to hit the documentation to do anything more than a simple "find this" query.

Splunk helps us to walk in the darkness, for sure in the Prod arena

Comentarios: We are in Autodesk, use it much, as part of the monitoring tool. We like it and would like it to be improved and even more useful

Puntos a favor:

Dashboards feature is amazing, I use it much. Alerts and queries are easy to set up. Mostly it works fast so it's kind of Dev friendly so it's easy to onboard the new guys

Puntos en contra:

Alerts should have a better way to manage it. There should be a way to promote alerts to different environments - so we will be able to set the Dev/Stg/Prod Sometimes some things that we want to do take a while searching on the internet for a solution - they might think how to do it better - maybe some examples or better documentation

Great for log analysis

Comentarios: Splunk has been key in sever major issue root causes by analyzing logs and from that being able to build reports and determine causes of issues. In addition being able to trend and look for the data in the many logs is very helpful.

Puntos a favor:

We use this tool primarily as a repository for syslog messages for infrastructure. It allows us to quickly analyze the logs and patterns to determine issues based on patterns. In addition it alerts very well from text based trigger alerts. These features are very easy to use and dependable.

Puntos en contra:

I do not have any cons for this software. Mainly as a user it does exactly what I need it to do with no overhead and confusing interfaces.

One of the best monitoring solutions for different platform.

Puntos a favor:

Best tracking and data analysis tool which help to monitor and manage the server and system component in very effective way. Real time Visualization helps to take the quick decision so that desired action can be taken to avoid failure.Best data collection in the forms of log and which helps to define the best set of automation jobs to fix the issue.

Puntos en contra:

There are few components or observation like,1. most of the time observes the slowness in the performance.2. Sometime observe the delay in the issue or updated log reflection on the portal. 3. Need more storage to manage and maintain the lo g which impact organizational costing and budget.

A tool that every sys admin needs to have

Puntos a favor:

I'm not sure from where to start in this case. We use splunk for many things but mostly to analyze the traffic on the network / firewalls. It provides us with a nice overview of what's going on. It makes it very easy to spot spikes on the network and it will provide you also with deep analyzes. For us it's an indispensable tool, probably the best tool we have.

Puntos en contra:

To search for something is not always easy, however there are a lot of forums online, so finding help is not that difficult.

Excellent logging and troubleshooting tool

Comentarios: As a software quality assurance engineer, I love that I can setup a single dashboard where I can then view the same data from any lane I select from a dropdown. If I see a problem in the Test lane, I can quickly check all of the other lanes for the same issue by simply changing the dropdown value.

Puntos a favor:

Splunk can give you extreme insights into how your systems and software are functioning. Not only is the search very flexible and powerful, the customizable dashboards give a status report at a glance into trends, problems and performance. You can also set up email alerts when errors occur limiting the need to have Splunk opened on your machine all the time.

Puntos en contra:

Splunk has a learning curve. They have extensive documentation but it isn't intuitive and some features are buried pretty deep. We have an onsite expert who holds bimonthly meetings to answer questions in a group forum.

Excellent product

Comentarios: I have worked with dozens of companies to implement Splunk. My experiences have bee overwhelming positive.

Puntos a favor:

When you need to store, correlate, and search large amounts of data, especially System Log data, there is no tool that even comes close to Splunk. It's power and flexibility is amazing.

Puntos en contra:

Very expensive. Difficult to implement until all moving parts are understood. Steep learning curve for beginners.

Premium but pricey log management and analytics tool

Comentarios: Having a enterprise-ready centralized logging tool is critical for production success.

Puntos a favor:

Splunk integrates with almost all popular enterprise software products including VMware, AWS, Azure, etc. Most customers use it primarily to do log analysis but it can also perform data analytics for business reporting. The UI is very straightforward and enables you to quickly search through large datasets using SPL. We were able to quickly locate the source of the issues by using Splunk to triangulate logs from several different components. There is a Splunk Cloud version with a free trial if you are aiming to do some integration work and testing. Finally, like all monitoring tools, Splunk offers AI and machine learning for even better predictive analytics.

Puntos en contra:

Splunk is expensive and probably not for smaller startup companies. The pricing is tiered and is subscription-based so if you start to ingest a lot of data, look out. It can eat into most of your IT budget and Splunk by itself doesn't handle all the Day 2 operations that are needed.

Helpful tool for troubleshooting and analyzing data/logs

Comentarios: The overall experience has been good. Splunk definitely helped improve our troubleshooting capabilities.

Puntos a favor:

Splunk is great for monitoring, logging, and analyzing the large volume of data on the servers. Our support teams use Splunk to collect data/logs from the servers and troubleshoot product related issues. We introduced Splunk few years ago in our organization and it helped improve our defect/issue analysis and problem solving abilities

Puntos en contra:

While Splunk is not too complex, it also requires a certain level of skillset to decipher the information. It may take a while to figure things out if you are a new user, or someone with limited technical knowledge

Splunk Enterprise Review

Comentarios: Good overall experience. It’s an expensive product and there is a learning curve, but it’s an amazing ing product once you are accustomed to using it

Puntos a favor:

The ability to set up queries and get data back quickly is invaluable

Puntos en contra:

Learning to structure queries is a bit of a challenge in the beginning