Opiniones de Splunk Enterprise

es una herramienta de facin configuracion e implementacion, aparte de ser intuitiva.

hay veces que se traba la interfas cuando se sastura el equipo.

Splunk nos ha permitido fortalecer nuestras capacidades de visibilidad sobre una amplia variedad de eventos (de ciberseguridad y funcionales), dada su flexibilidad nativa para consumir, correlacionar y alertar a partir de distintas fuentes. Con ello, hemos podido detectar y reaccionar oportunamente ante aquellos eventos que representan posibles amenazas para nuestros objetivos.

Algunas funcionalidades requieren componentes adicionales.

Capas de procesar gran volumen de datos a partir de múltiples fuentes, rápido y eficaz en el análisis . Nos ha permitido mejorar y fortalecer todos nuestros procesos internos de la empresa y optimizar nuestros objetivos

Es un software bastante caro y no para pequeñas empresas, a no ser que te dediques a ello. Puede requetir implementar algunos complementos adicionales.

Splunk is easy to use, also non technical persons can also use and create their dashboards. Easy to implement and very easy to use the query language, the documentation is also sufficient

We cannot setup the alerts for realtime. we only us it for logging and not for metrics. the maintenance of the dashboards are very time offering.

Splunk Enterprise has powerful search capabilities and customizable dashboards.

The learning curve for setting up queries can be steep, and the pricing can be high for smaller teams.

Splunk is a great tool for cyber security professionals wanting to build out their security infrastructure.

There are other options out there that doesn't require as much configuration.

It helped me enormously in my job as IT INC Management including detailed reports and alerting any necessary information.

It has a somewhat complex paring curve and there are no simple tutorials or parallel design of tutorials for new managers

The saying "you only get out what you put in" is rather apt when utilising Splunk as a SIEM tool - i.e. the more logs / data you can feed into the solution the better the results. Ingesting multiple log files from numerous systems / applications is essential when reviewing security incidents and ensures everything is in one place.

For all that is good with Splunk, the costs are rather high and could force Customers to other solutions unless they make themselves more competitive in the pricing market

The product has a ton of Features. Everything what you Need when working with logs is already implemented

Due to the rich set of capabilities regarding, searching, transforming and vizualzing data it‘s sometimes quite tricky to find all necessary query commands

Data visualization is very clear and easy to use.

The possible to share with many people data and dashboards.

Splunk Enterprise is a great tool for security analytics, IT operations, and business intelligence. I especially like the way it can help me identify potential threats and improve our IT infrastructure.

The pricing for Splunk Enterprise may be out of reach for some small businesses.

Easy to install agents on servers, it can parse any form of data easily, Splunk can detect anomalies quite easily and the UBEA feature is amazing.

The cost of this solution is high, and customer service is bad. Apart from that Splunk SPL language is difficult to learn.

Provides a single location for collecting and analyzing logs. Provides ease of use for non-technical users, but powerful features for security and IT. There is an add-on/app for anything you could imagine.

Some documentation is vague, and when certain things don't work, it can be difficult to find out a solution to the problem.

I love its versatility to handle different kinds of data. While monitoring our internal data, Splunk Enterprise saved a lot of code with its real-time data monitoring and logs analysis feature.

With the growth of the data, costs grew intensively which was out of the budget for our startup company. Initially setting up Splunk was complex as we were new to this.

The easy of setup and integration makes this one of my favorites As well as the real time dashboard

Not much i don't like yet, but maybe the interface can do with an update

Powerful and versatile data mining tool with excellent integration capabilities.

Challenging initial setup and learning curve, particularly with query language and high cost.

With Splunk Enterprise, it is easy to investigate, detect and remediate threats on devices and endpoints on our network.

It was full of technical overheads when we were customizing Splunk Enterprise features.