Opiniones de Splunk Enterprise

es buena herramienta

Puntos a favor:

es una herramienta de facin configuracion e implementacion, aparte de ser intuitiva.

Contras:

hay veces que se traba la interfas cuando se sastura el equipo.

Opinión Splunk Enterprise

Comentarios: Splunk se ha alineado con nuestras expectativas. Recomendado.

Puntos a favor:

Splunk nos ha permitido fortalecer nuestras capacidades de visibilidad sobre una amplia variedad de eventos (de ciberseguridad y funcionales), dada su flexibilidad nativa para consumir, correlacionar y alertar a partir de distintas fuentes. Con ello, hemos podido detectar y reaccionar oportunamente ante aquellos eventos que representan posibles amenazas para nuestros objetivos.

Contras:

Algunas funcionalidades requieren componentes adicionales.

Básica para el Big Data

Comentarios: Muy buena, lo recomendamos aunque es conveniente analizar bien el mercado y los productos parecidos que hay.

Puntos a favor:

Capas de procesar gran volumen de datos a partir de múltiples fuentes, rápido y eficaz en el análisis . Nos ha permitido mejorar y fortalecer todos nuestros procesos internos de la empresa y optimizar nuestros objetivos

Contras:

Es un software bastante caro y no para pequeñas empresas, a no ser que te dediques a ello. Puede requetir implementar algunos complementos adicionales.

Perfect solution to handle big data

Puntos a favor:

I love its versatility to handle different kinds of data. While monitoring our internal data, Splunk Enterprise saved a lot of code with its real-time data monitoring and logs analysis feature.

Contras:

With the growth of the data, costs grew intensively which was out of the budget for our startup company. Initially setting up Splunk was complex as we were new to this.

Great SIEM

Puntos a favor:

Incredibly powerful tool for log collection. It is very scalable and can be integrated with a wide variety of other tools and platforms. It is well-documented and supported by a large user community, making it easier to find solutions to common challenges.

Contras:

It feels somewhat dated compared to newer solutions on the market. Its interface and some functionalities haven't evolved as much as other modern tools. It can also be quite expensive.

Powerful tool to perform db queries

Comentarios: I used Splunk to surface and review platform logs

Puntos a favor:

Possibility to export query results in a variety of formats.

Contras:

User interface is not intuitive and it requires a steep learning curve

nice tool with functionality for everyone

Comentarios: very good tool to see your logging and get alerts when something is wrong.

Puntos a favor:

Splunk is easy to use, also non technical persons can also use and create their dashboards. Easy to implement and very easy to use the query language, the documentation is also sufficient

Contras:

We cannot setup the alerts for realtime. we only us it for logging and not for metrics. the maintenance of the dashboards are very time offering.

Splunk is a great data management tool

Comentarios: I use it daily to locate information on users and devices.

Puntos a favor:

The ability to parse data and locate critical information is unparalleled

Contras:

Search tools could be a little more user friendly.

Splunk, a must try for all data management persons

Puntos a favor:

1. Excellent ML background 2. Dashboard looks classy 3. Multiple external entries possible unlike a lot other tools

Contras:

1. Very limited variations in reporting 2. Real-time model is not great 3. Not mobile friendly

Platform that generates very good reports and data extraction

Puntos a favor:

Produces analytical information with highly interactive tables, charts and graphics. Highly customizable to obtain specific data.

Contras:

It can be complex at first to customize search queries since Slpunk handles its own terms and typing methods.

Bettering Cybersecurity With Splunk Enterprise

Puntos a favor:

It has amazing firewall protection features It makes handling security monitoring and improving networks security easy log monitoring is easy

Contras:

No regrets as Splunk Enterprise meets needs.

Splunk is a solution

Puntos a favor:

It so easy to use and it is very smart and fast.

Contras:

They want to take it to the cloud, maybe is good maybe not

I use Splunk Enterprise to analyze and visualize data for better decision-making.

Puntos a favor:

Splunk Enterprise has powerful search capabilities and customizable dashboards.

Contras:

The learning curve for setting up queries can be steep, and the pricing can be high for smaller teams.

Best Siem solution in market.

Comentarios: Overall experience is amazing, we are happy with this software as it can ingest any form of data and generate alerts quite swiftly.

Puntos a favor:

Easy to install agents on servers, it can parse any form of data easily, Splunk can detect anomalies quite easily and the UBEA feature is amazing.

Contras:

The cost of this solution is high, and customer service is bad. Apart from that Splunk SPL language is difficult to learn.

A better business companion when integrated with RPA

Comentarios: Overall, the experience was positive; even with a free trial license, it was much easier, and on the course and certification side, Splunk has a very good collection of videos and materials that help even a novice quickly setup the integration and indexing.

Puntos a favor:

The most useful thing about Splunk is the ease of integration with application. With uipath on-premises it was very much helpful as the business users can monitor the actions of robots through spluink without entering into uipath orchestrator

Contras:

Expression creation for indexing was bit hard as it is not user-friendly to business users if they wanted to create any new fields, also the forwarder was not able to directly connect with uipath cloud so that the logs has to be shifted to intermediate file before uploading into splunk, but that seems not an issue with splunk but more related to uipath cloud

Splunk Enterprise, not just a SIEM

Comentarios: We have been using Splunk Enterprise, ES, ITSI, and other Splunk parts for 6+ years in production. This has helped us reduce staff in some cases, increase response time in most cases, and allow non-IT teams to get data and metrics in a fast efficient way.

Puntos a favor:

The versatility is amazing. The same data in logs, such as IIS, can be used for Security, Application performance, and even error handling. This allows us to use one log to help multiple teams. This is just one example.

Contras:

Start up takes someone who has had some training. While searching and output is easy, its the onboarding of custom apps that takes the know how.

Great Choice for an SIEM

Puntos a favor:

Provides a single location for collecting and analyzing logs. Provides ease of use for non-technical users, but powerful features for security and IT. There is an add-on/app for anything you could imagine.

Contras:

Some documentation is vague, and when certain things don't work, it can be difficult to find out a solution to the problem.

Splunk is a great solution for SIEM and also for monitoring your infrastructure

Comentarios: We needed a way to monitor our internal environment and start to be more proactive with issues, so we started sending all of our logs to Splunk and we we able to get insights we did not know we needed. It is a great solution and they are constantly innovating.

Puntos a favor:

Splunk makes it easy to search through various data including logs. In the past I have had to pour through logs in order to find the one lines among the 100 of thousands of lines. Splunk allows me to search through those logs in a matter of seconds vs the hours it used to take.

Contras:

Most of enterprise setup is done through the command line. It would be nice to have cluster configuration (index creation) as part of the UI.

Swiss Knife for everything about logs

Puntos a favor:

The product has a ton of Features. Everything what you Need when working with logs is already implemented

Contras:

Due to the rich set of capabilities regarding, searching, transforming and vizualzing data it‘s sometimes quite tricky to find all necessary query commands

Splunk Enterprise is a powerful data analytics software

Comentarios: I believe getting important data analysis in real-time saves us from threats

Puntos a favor:

Splunk Enterprise offers real-time data analysis tools makes it possible for my institution to see and take immediate action against security risks, performance difficulties, and other operational concerns.

Contras:

Splunk Enterprise is really expensive and it is a huge part in our annual budget because we require add-ons.

Powerhouse in data management and analysis

Comentarios: A complex but rewarding journey of data exploration and anomaly detection.

Puntos a favor:

Powerful and versatile data mining tool with excellent integration capabilities.

Contras:

Challenging initial setup and learning curve, particularly with query language and high cost.

Splunk Enterprise software review

Comentarios: It is great at working with big data coming from different data sets and sources

Puntos a favor:

I am able to quickly act on pending issues as and when they arise and data is well protected because of their authorization features

Contras:

We had to purchase additional computers with higher specs than what we previously had to be able to use Splunk effectively

Best log monitoring

Puntos a favor:

While Microsoft didnt provide a centralized log monitoring for enterprise machines, Splunk filled the gap. It is good one stop console to monitor logs on your every server.

Contras:

Reports can be more user friendly and descriptive.

Splunk the best analytic tool

Comentarios: It gives best Return on Investment as analyzing the data and giving proper insights in form of Dashboards and notifying with help of Alerts if any kind of threat running in infrastructure and apart from that Deployment and use is very easy.

Puntos a favor:

There are lot of features which Splunk offers - 1) We can onboard data from any server, device or system using Universal Forwarder 2) Onboarded data are later stored in Indexers and searched further in Search Head for analyzing the internal logs 3) Using the data we can create customizable Dashboards and get proper insights of data and create Alerts to identify any kind of Threat or anomalies running in environment 4) Deployment is very easy on-prem servers 5) We can also use Hybrid Deployment on Cloud as well.

Contras:

1) As it give large amount of features but licensing is too high 2) There are lot of other Open Source software which can be used as alternative of Splunk as Analytic tool because Splunk is paid one.

Splunk an Enterprise Business intelligent user tool

Comentarios: Is a robust and intelligent management tool that enables everyone with user computer knowledge to navigate in real-time, consolidate vast data into a visualized report of dashboard features , reliable and web based, no major equipment required for setup, user need a smartphone or compute to access the platform through the web, you can navigate the system as long as you have computer knowledge without any training required(user friendly) .

Puntos a favor:

It an intelligent business tool that provided me an opportunity to customize and build report from large volume of data from different departments within the 13 Africa countries in telecommunication sectors. The platform allows data to be consolidated accordingly to the organization need and produces visualized reports of dashboard features. I also noted that the system can analyst unstructured large volume of data speedily and is reliable and web based allowing for user flexible accessible from any part of the world if you have internet. The systems have been reliable and secured from the time (2 years) I started using it without any system intermittent, system errors and cyber-attack.

Contras:

The system is built and use-able with structured and unstructured organization though the price in foreign currency could hamper small and medium organization to use it especially in most Africa country where the local currency has depreciated against the major trading foreign currency.so the Forex pricing is a challenge. The navigation of the platform will require minor training though if the user is computer proficient, they would management with minor challenge and interpretation of the data. So, first time user it can be difficult to use it It will depend on internet for access and internet tend to be pricey in most African country and therefore could increase the business cost for small and medium enterprise. It can increase business cost if not fully used