Prometheus vs Splunk Enterprise Security comparison

Cancel
You must select at least 2 products to compare!
Prometheus Logo
6,474 views|5,765 comparisons
100% willing to recommend
Splunk Logo
24,689 views|20,244 comparisons
92% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Prometheus and Splunk Enterprise Security based on real PeerSpot user reviews.

Find out in this report how the two Application Performance Monitoring (APM) and Observability solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Prometheus vs. Splunk Enterprise Security Report (Updated: May 2023).
771,170 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The most valuable feature of Prometheus is its ability to collect metrics.""The solution is useful to collect huge metrics.""The product is easy to maintain.""The feature I found most valuable is the number of integrations. It is the industry standard for metrics.""The scalability of Prometheus is very good.""The most valuable features of the solution are metrics scraping capabilities and the open source community and support.""The solution can be deployed in thirty minutes.""It is highly valuable as it serves as the foundation for our infrastructure monitoring tools."

More Prometheus Pros →

"Out-of-the-box, it seems very powerful.""It has the ability to correlate data, analyze and review it.""We can do things in minutes instead of days.""The visibility is amazing with easy dashboard creation.""The most valuable features are the logs, which allow us to identify what happened and who interacted with the web repository.""The most valuable feature of Splunk Enterprise Security is website activity monitoring.""With good domain knowledge, one can build almost anything. If you throw in Alert Manager or an integration with ServiceNow. Then, you have your own SIEM""Splunk would be my choice for the presentation layer because it comes with inbuilt reports and a dashboard that you can customize."

More Splunk Enterprise Security Pros →

Cons
"Prometheus can be initially difficult for users since it has its query language, PromQL. The minimalistic interface is complicated to understand. They need to improve their interface so that users who don't know PromQL can also use it. You can only leverage the tool when you know PromQL.""The setup process could be more straightforward.""The setup could be made easier for new users because it requires a bit of advance knowledge or experience.""Prometheus has a learning curve when setting it up. It definitely requires a little bit more hands-on than other solutions. It is an open source solution which means you do need to go through and read the literature that they have online for setting it up. The setup could be made easier.""They could provide efficient logs in terms of clarity and ease of access similar to Datadog’s paid version.""There isn’t much clarity regarding the issues that happen at the server end. It is a push model and from the client’s point of view, it needs to look better and solve remote issues.""The alert functionality is kind of lackluster.""One potential area for improvement would be fixing the occasional glitches and bugs."

More Prometheus Cons →

"The price of the solution could be cheaper.""The only thing which can be improved is that they are too subjective on whom their Splunk4Good initiative can be applied. They market it as you only need to be a nonprofit, but there is more to it.""This solution could be improved by better pricing in general and by easier installation.""It is a good product, but the Achilles heel for a lot of organizations is the cost model for it because it gets expensive. That's because the model is based on how much data it processes a day, which can be prohibitive, especially if you have a lot of data. A lot of customers may not be ready for the sticker shock on how to fully leverage the product. I realized that the reason for that is that when it was originally designed, it was kind of like a big data modeling application. If they want to have a bigger customer base, they can come out with subsets of their product that are focused on specific things and have different pricing models. It may help with the cost.""Given the ever-increasing number of threats, I would like Splunk to update its threat signatures more frequently.""Splunk Enterprise Security could improve in automation, flexibility, and providing more content out of the box.""This is not really a monitoring solution.""We find that the maintenance process could be a lot better."

More Splunk Enterprise Security Cons →

Pricing and Cost Advice
  • "The price of Prometheus is good, it is affordable because it is open source and there is no cost to it. You put it on your own server and the costs incurred completely depend on how you set it up."
  • "This is an open-source solution."
  • "The solution is not expensive."
  • "The solution is open source."
  • "The solution is free of cost."
  • "We use the solution's open-source version."
  • "The tool is open-sourced."
  • "We have the open-source version, so we don't pay for it."
  • More Prometheus Pricing and Cost Advice →

  • "Pricing and licensing is quite expensive. But for the value the product provides, it seems at par in the market."
  • "Although Splunk is an expensive product, it is designed to be utilized across your organization in order to maximize your ROI and lower your TCO."
  • "It is not cheap."
  • "Splunk Enterprise becomes extremely expensive after the 20GB/month license."
  • "You will eat up whatever you purchase quickly. The level of insights that Splunk empowers is addictive."
  • "Splunk licensing model might seem expensive but with all the gain in functionalities you will have compared to traditional SIEM solutions I think it’s worth the price."
  • "Pricing is pretty fair."
  • "While licensing can be a concern, there are ways to reduce the licensing costs including filtering some events."
  • More Splunk Enterprise Security Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.
    771,170 professionals have used our research since 2012.
    Comparison Review
    Vinod Shankar
    Questions from the Community
    Top Answer:The most valuable feature of Prometheus is its ability to collect metrics.
    Top Answer:For a project I am currently working on in my company, I use Grafana, but for the data source part, I use Prometheus. I use Prometheus in a Kubernetes cluster. I use Prometheus for the processes… more »
    Top Answer:For tools I’d recommend:  -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also,… more »
    Top Answer:It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log… more »
    Top Answer:Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we… more »
    Ranking
    Views
    6,474
    Comparisons
    5,765
    Reviews
    32
    Average Words per Review
    387
    Rating
    8.3
    Views
    24,689
    Comparisons
    20,244
    Reviews
    69
    Average Words per Review
    930
    Rating
    8.4
    Comparisons
    Learn More
    Overview

    Prometheus is a powerful open-source monitoring and alerting toolkit designed for cloud-native environments. 

    It collects metrics from various sources, including applications, services, and infrastructure components, providing real-time insights into system performance. 

    With its flexible data model and query language, Prometheus enables users to analyze and visualize metrics, facilitating troubleshooting and capacity planning. Its robust alerting system allows for proactive monitoring, notifying users of any anomalies or issues. 

    Prometheus also offers seamless integration with popular tools and frameworks, making it a versatile solution for monitoring and observability.

    Splunk Enterprise Security is a SIEM, log management, and IT operations analytics tool. The solution provides users with the ability to secure their information and manage their data in the cloud, data centers, or other applications. Splunk Enterprise Security also offers visibility from different areas, levels, and devices, rather than from a single system, thus, providing its users with flexibility. Splunk Enterprise Security can monitor data and analyze, detect, and prevent intrusions. This benefits users as it provides alerts to possible intrusions, helps users to be proactive, and reduces risk factors. 

    Full visibility across your environment

    Break down data silos and gain actionable intelligence by ingesting data from multicloud and on-premises deployments. Get full visibility to quickly detect malicious threats in your environment.

    Fast threat detection

    Defend against threats with advanced security analytics, machine learning and threat intelligence that focus detection and provide high-fidelity alerts to shorten triage times and raise true positive rates.

    Efficient investigations

    Gather all the context you need and initiate flexible investigations with security analytics at your fingertips. The built-in open and extensible data platform boosts productivity and drives down fatigue.

    Open and scalable

    Built on an open and scalable data platform, you can stay agile in the face of evolving threats and business needs. Splunk meets you where you are on your cloud journey, and integrates across your data, tools and content.

    Sample Customers
    Information Not Available
    Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
    Top Industries
    REVIEWERS
    Financial Services Firm20%
    Retailer13%
    Computer Software Company13%
    Educational Organization7%
    VISITORS READING REVIEWS
    Financial Services Firm27%
    Computer Software Company16%
    Manufacturing Company7%
    Government6%
    REVIEWERS
    Computer Software Company20%
    Financial Services Firm15%
    Government9%
    Energy/Utilities Company8%
    VISITORS READING REVIEWS
    Financial Services Firm15%
    Computer Software Company14%
    Government9%
    Manufacturing Company7%
    Company Size
    REVIEWERS
    Small Business41%
    Midsize Enterprise28%
    Large Enterprise31%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise12%
    Large Enterprise68%
    REVIEWERS
    Small Business31%
    Midsize Enterprise11%
    Large Enterprise57%
    VISITORS READING REVIEWS
    Small Business19%
    Midsize Enterprise13%
    Large Enterprise68%
    Buyer's Guide
    Prometheus vs. Splunk Enterprise Security
    May 2023
    Find out what your peers are saying about Prometheus vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
    771,170 professionals have used our research since 2012.

    Prometheus is ranked 9th in Application Performance Monitoring (APM) and Observability with 32 reviews while Splunk Enterprise Security is ranked 1st in Security Information and Event Management (SIEM) with 240 reviews. Prometheus is rated 8.4, while Splunk Enterprise Security is rated 8.4. The top reviewer of Prometheus writes "A very flexible open box that can be used vastly to do anything you need". On the other hand, the top reviewer of Splunk Enterprise Security writes "It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query ". Prometheus is most compared with Azure Monitor, New Relic, Dynatrace, Sentry and Honeycomb.io, whereas Splunk Enterprise Security is most compared with Wazuh, Dynatrace, IBM Security QRadar, Elastic Security and Microsoft Sentinel. See our Prometheus vs. Splunk Enterprise Security report.

    We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.