Opiniones de Splunk Enterprise

es buena herramienta

Puntos a favor:

es una herramienta de facin configuracion e implementacion, aparte de ser intuitiva.

Contras:

hay veces que se traba la interfas cuando se sastura el equipo.

Opinión Splunk Enterprise

Comentarios: Splunk se ha alineado con nuestras expectativas. Recomendado.

Puntos a favor:

Splunk nos ha permitido fortalecer nuestras capacidades de visibilidad sobre una amplia variedad de eventos (de ciberseguridad y funcionales), dada su flexibilidad nativa para consumir, correlacionar y alertar a partir de distintas fuentes. Con ello, hemos podido detectar y reaccionar oportunamente ante aquellos eventos que representan posibles amenazas para nuestros objetivos.

Contras:

Algunas funcionalidades requieren componentes adicionales.

Básica para el Big Data

Comentarios: Muy buena, lo recomendamos aunque es conveniente analizar bien el mercado y los productos parecidos que hay.

Puntos a favor:

Capas de procesar gran volumen de datos a partir de múltiples fuentes, rápido y eficaz en el análisis . Nos ha permitido mejorar y fortalecer todos nuestros procesos internos de la empresa y optimizar nuestros objetivos

Contras:

Es un software bastante caro y no para pequeñas empresas, a no ser que te dediques a ello. Puede requetir implementar algunos complementos adicionales.

Big data is no problem for Splunk Enterprise

Comentarios: Splunk is a powerful and useful monitoring tool. Splunk's efficiency is enhanced by the ability to integrate third-party apps developed in-house. It's also interesting that we can incorporate a customs alert and dashboard. In most situations, it resolves the need to normalize data, allowing for the use of any and all data in business forecasting. It is analyzed for data that can be utilized to optimize spending plans and asset tracking.

Puntos a favor:

Without worrying too much about data type or normalization, Splunk Enterprise can efficiently manage massive amounts of data from numerous sources. Data may be accessed in a flash, and there are a number of options for tailoring and integrating data analysis workflows to create bespoke dashboards or utilizing apps from our other product partners.

Contras:

There isn't much I dislike about splunk, however if we have to be picky, it would be that it's more difficult to maintain as an administrator when splunk is installed on outdated architecture.

Splunk Enterprise is not just a tracing tool

Comentarios: My overall experience with Splunk Enterprise is really good. It is a powerfull tool to help you to tracing calls, using filters and customizable indexes.

Puntos a favor:

Intuitive, customizable and really usefull in everyday work. The different section "smart, quick and detailed" gives you the freedom to choice how to interact with the tool.

Contras:

Some bugs on the Alerts section to edit makes the experience worse than I expect.

Powerful tool to perform db queries

Comentarios: I used Splunk to surface and review platform logs

Puntos a favor:

Possibility to export query results in a variety of formats.

Contras:

User interface is not intuitive and it requires a steep learning curve

Splunk-review

Comentarios: Excellent product, easy to integrate and use together with other products.

Puntos a favor:

The way it can be integrated to collate all required information at one place

Contras:

I have not see any least things so far in the usecases

Great SIEM

Puntos a favor:

Incredibly powerful tool for log collection. It is very scalable and can be integrated with a wide variety of other tools and platforms. It is well-documented and supported by a large user community, making it easier to find solutions to common challenges.

Contras:

It feels somewhat dated compared to newer solutions on the market. Its interface and some functionalities haven't evolved as much as other modern tools. It can also be quite expensive.

Splunk review

Comentarios: I am using this tools since long time and overall it’s good tool.

Puntos a favor:

Capabilities and features of the tools provided are useful

Contras:

This is one of the costly tools Available in the market

Splunk is a great data management tool

Comentarios: I use it daily to locate information on users and devices.

Puntos a favor:

The ability to parse data and locate critical information is unparalleled

Contras:

Search tools could be a little more user friendly.

Splunk, a must try for all data management persons

Puntos a favor:

1. Excellent ML background 2. Dashboard looks classy 3. Multiple external entries possible unlike a lot other tools

Contras:

1. Very limited variations in reporting 2. Real-time model is not great 3. Not mobile friendly

Splumk review

Puntos a favor:

Ease of use, really convenient, specially for logs reporting and search with the indexer

Contras:

Can be tricky to use sometimes without the proper training

Bettering Cybersecurity With Splunk Enterprise

Puntos a favor:

It has amazing firewall protection features It makes handling security monitoring and improving networks security easy log monitoring is easy

Contras:

No regrets as Splunk Enterprise meets needs.

Splunk for Enterprise

Comentarios: A very helpful product that can improve your way to do business intelligence and forecasting.

Puntos a favor:

Data visualization is very clear and easy to use.

Contras:

The possible to share with many people data and dashboards.

Splunk is a solution

Puntos a favor:

It so easy to use and it is very smart and fast.

Contras:

They want to take it to the cloud, maybe is good maybe not

Helps you predict IT problems

Comentarios: Splunk Enterprise's real-time monitoring keeps us ahead of potential problems. A must-have tool!

Puntos a favor:

Splunk Enterprise is a great tool for security analytics, IT operations, and business intelligence. I especially like the way it can help me identify potential threats and improve our IT infrastructure.

Contras:

The pricing for Splunk Enterprise may be out of reach for some small businesses.

best security tool for Enterprise Network

Puntos a favor:

splunk is the best tool for real time analysis and monitoring tool and also it is providing the powerful threat incident response.

Contras:

from my perspective, these no downside of the splunk . but about costing is too much for single user

Splunk Enterprise is a powerful data analytics software

Comentarios: I believe getting important data analysis in real-time saves us from threats

Puntos a favor:

Splunk Enterprise offers real-time data analysis tools makes it possible for my institution to see and take immediate action against security risks, performance difficulties, and other operational concerns.

Contras:

Splunk Enterprise is really expensive and it is a huge part in our annual budget because we require add-ons.

Splunk Enterprise software review

Comentarios: It is great at working with big data coming from different data sets and sources

Puntos a favor:

I am able to quickly act on pending issues as and when they arise and data is well protected because of their authorization features

Contras:

We had to purchase additional computers with higher specs than what we previously had to be able to use Splunk effectively

A powerful log aggregation solution with immensely useful tools built-in for popular applications.

Puntos a favor:

- Free to use for small 500MB or less daily ingress, quite nice for small use cases and learning - No development work required to deploy and provide value. - Deployment flexibility: client agents are available to use, or clientless configurations for multiple OS platforms. It's also very easy to deploy, not just flexible. its a very simple affair. - Segmentation of logs: You can create separate instances of of logs to aggregate, based on organization needs. And those instances can have their own individual storage policies to optimize consumption of storage resources. - Configuration design: Thoughtful and mature documentation and design of the application regarding enterprise-class scaling on network storage. -POWERFUL tools: The user interface lends itself to learning more about your organization from the logs you collect, through metrics of trends of the logs being gathered. There are also specific modules/add-ons for popular applications to provide more value and event-based monitoring, all without having to develop in-house dashboards and intelligence of those logs. - Customization: You can create your own queries of logs, and event-based alerts. - Web-based GUI that clean is powerful - Sales/Technical Reps are top notch in fielding questions and evaluating environment for deployment. They were extremely helpful in helping our organization develop procedures and scaling our environment for expansion with our existing infrastructure.

Contras:

- Price: This product is not free for more than the minimal use. Pricing can be very expensive, relative to open source offerings. That is the trade-off you pay for not having in-house development of open source offerings. As this product is priced based on gigabytes of indexed logs, it is important to understand the scope of licensing necessary for your environment to determine if it is a good fit for your organization. - Watch your saved queries and hardware resources: Users have the ability to create and save queries. Like in database queries, some are more efficient than others. Large inefficient queries can be very resource-intensive. If you notice slowness in day-to-day queries, or navigation in the UI, or resource use in contention, keep an eye on saved queries and user practices.

Best friend for debugging

Comentarios: Splunk basically makes debugging and monitoring easier and touch less. I can easily debug by starring the rolling logs from different instances in single screen.
I can monitor multiple components and multiple metrics, without running commands manually with custom plugins.

Puntos a favor:

Splunk comes with lot of in-built templates for each and every feature like log visualisation, dashboarding, traces,etc This makes the developers life lot easier. I can't think of any other logging tool that is snappy as well as accurate. I love the fact how easily I can plug it in my docker-compose to push container logs.

Contras:

Even though, it offers numerous features for different needs, each feature has its own learning curve. For instance log visualisation needs querying skills, which may be in natural language but it takes bit of time to get familiar.

Ideal for root cause analysis

Puntos a favor:

The simplified user interface which presents logs in a readable format. Also it's ability to quickly identify integration issues

Contras:

A mechanism to hide system generated logs that are unimportant would be great

Splunk: A Monitoring Tool for all your needs

Comentarios: If i have put a word it would say "Fantastic". The functionalities Splunk provides eases team to manage/monitor their IT infrastructure and internal application you will be well aware about the performance of your applications. Setup alerting and take necessary actions in stipulated time to overcome all the issues which may affect your application performance.

Puntos a favor:

Splunk offers various features whether you need to setup monitoring on your server, application logs based on logs ingestion set alerts so that teams got notified on real time and take actions accordingly. In this way, it helps to monitor application which are mission critical. You can make dashboards in Splunk where you can configure various components such indexes, data inputs and schedule reports as well. To achieve additional functionalities we can install third party apps as well such as AWS Add on for cloud watch log ingestion.

Contras:

From Admin perspective, I found user access management a little difficult. The roles of access management becomes complicated because some time the config files for that didn't came very handy. Other then that I think all in all Splunk provides fulfill all of the requirements.

Splunk is a lifesaver!

Comentarios: It’s been wonderful. I was able to take most of my forwarded lambdas and charts them to watch duration and throughput. Notifications and alerts let me know if things are out of whack. Such a relief to know Splunk is watching my back!

Puntos a favor:

If you need real-time grokking into your infrastructure, look no further than Splunk. I love love love the dashboards. It’s easy to tell a story with your data, and the live search is so FAST!

Contras:

SPL is a little hard to get used to, but once you get the hang of it, it’s not so bad. I recommend downloading their community edition for some great examples of queries and dashboards.

One of the best monitoring solutions for different platform.

Puntos a favor:

Best tracking and data analysis tool which help to monitor and manage the server and system component in very effective way. Real time Visualization helps to take the quick decision so that desired action can be taken to avoid failure.Best data collection in the forms of log and which helps to define the best set of automation jobs to fix the issue.

Contras:

There are few components or observation like,1. most of the time observes the slowness in the performance.2. Sometime observe the delay in the issue or updated log reflection on the portal. 3. Need more storage to manage and maintain the lo g which impact organizational costing and budget.