Splunk Cloud Platform Reviews

Name: Splunk Cloud Platform
Brand: Splunk
Rating: 4.1 (56 reviews)

4.1 out of 5

56 reviews
96% willing to recommend

101 followers

What is Splunk Cloud Platform?

Splunk Cloud Platform is widely used for log management, security monitoring, application performance monitoring, troubleshooting, data aggregation, and IT operations. It centralizes logs from numerous sources, enabling detailed analysis, incident detection, and effective dashboard creation.

Get the Splunk Cloud Platform Buyer's Guide and find out what your peers are saying about Splunk Cloud Platform, Wazuh, Splunk Enterprise Security and more!

Splunk Cloud Platform is the #3 ranked solution in top Data Visualization solutions and top IT Alerting and Incident Management solutions. PeerSpot users give Splunk Cloud Platform an average rating of 8.2 out of 10. Splunk Cloud Platform is most commonly compared to Wazuh: Splunk Cloud Platform vs Wazuh. Splunk Cloud Platform is popular among the large enterprise segment, accounting for 67% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 26% of all views.

Buyer's Guide

Splunk Cloud Platform

October 2024

Get the report

Helped 815,854 peers since 2012

Featured reviews

Mark Furman

Security Engineer at White Lodging

The Splunk Cloud Platform has improved our observability. We can see a lot more information both good and bad, but at least we have the information. It is important that Splunk Cloud Platform has visibility into our cloud-native environments. It comes to observability. And with the visibility, we're able to link, especially with our cloud environment, with Azure the correlations for threat reporting, correlations for account breaches, and correlations for compromised data ex-filtration that's going in and out. Splunk Cloud Platform has improved our mean time to resolution. It stepped down our investigation times. An investigation that used to take ten minutes is now down to five or six minutes per incident. It offers real-time threat detection by continuously analyzing incoming logs and correlations. These trigger pre-defined alerts, and any suspicious activity will be reported within five or six minutes. Splunk Cloud has saved costs through time savings. I can focus that time on other tasks improving productivity. We saw time to value within the first month of implementing the Splunk Cloud Platform. Splunk Unified Platform helps consolidate networking, security, and IT observability tools. We're primarily focusing on the security area and building out the correlations. We haven't moved to the infrastructure side yet. That is something we have on our company roadmap.

Read full review

Ian Gatundu

System engineer at Agile Cloud Ltd

The Cloud Platform interface is cleaner than Splunk Enterprise's monitoring console. You can easily understand what's happening with your indexes. It's more refined than Splunk Enterprise's console, but they have the same feel and function. It's easy to monitor multiple cloud environments because you can create custom dashboards for any use case you may have. It offers good visibility because it integrates with the ITSI app, providing a clear overview of your environment. Integrating Splunk with other components on the cloud and network resources is effortless because it can collect data from various sources, including stored data from long-term storage. Splunk's reporting offers a good visualization of your data. You can visualize the statistics based on your searches. It produces some helpful graphs that enable you to easily compare what's happening in your search. It's very comprehensive.

Read full review

Ankit_Mittal

Data Engineering Senior Analyst at Accenture

We can onboard multiple data types for monitoring from various ports and use Splunk to monitor laptops or other devices directly. If everything is stored in our database, we can also monitor that and see who is logging in and when. You can monitor which files are being used most and which ones aren't. We can also check for any fraudulent activity in the system. The reporting is highly detailed. Splunk is best when used for real-time monitoring. We can use AI and machine learning, too. Splunk plans to launch new observability features soon. The federated search feature has helped us eliminate redundancy in data servers and discontinue servers that aren't being used much. We can remove those servers from the environment to cut costs. We can use Splunk to monitor multiple environments. The ease of monitoring depends on the source, application, or cloud environment size.

Read full review

Splunk Cloud Platform mindshare

As of November 2024, the mindshare of Splunk Cloud Platform in the Data Visualization category stands at 0.4%, up from 0.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Data Visualization

Key learnings from peers

Last updated Sep 30, 2024

Valuable Features

Reporting, dashboards, quick setup, log event capabilities, search options, user-friendly interface, flexibility, integration with products and devices, business resilience, alerting, cloud infrastructure management, diverse cloud compatibility, federated search, multiple cloud environment monitoring, customizable queries, indexing, correlation of data, and visualization via dashboarding are the most valuable features of Splunk Cloud Platform. Users appreciate reduced maintenance, quick support, and the ability to aggregate and analyze data from various sources.

"It is a stable product."
"In an enterprise, you need a universal or heavy forwarder. If you don't have that, you need an HSE token or API request call and all the different components. In Splunk Cloud, you just have one instance to search all the data in your index. You don't need to manage it because Splunk handles that."
"The most valuable features are reliability and logging. It's in the cloud so it has more stability and easy maintenance."

Room for Improvement

Splunk Cloud Platform faces concerns regarding high costs, limited customization, challenges with integrations, complexity in configurations, slow performance, and documentation gaps. Issues with support response times and accessibility to backend processes are also highlighted. Enhancements in AI features, template availability, and search efficiency are needed. Users find the UI less user-friendly and express the need for better training resources. Stability issues and the absence of certain functionalities on cloud-hosted platforms are noted, alongside the desire for seamless integrations and more frequent feature updates.

"First-time users may struggle with the user interface. When I first used Splunk, I entered my username and password. After that, we get a dashboard on the left side with apps. At the top, you can click the gear icon to view the settings. Within those settings, there's a distributed console option with several settings. It's a bit overwhelming for a beginner. The user knows what they want and can search for it in the search bar. If I see several apps, my first instinct is to scroll down to find the app, or perhaps you will find that search and report. That bugged me when I was learning."
"The support from the Splunk team is generally good, but sometimes, there's a lack of coordination between our account reps and the hands-on technical people. This misalignment can lead to issues with getting what we need done and what is happening."
"Since I work on data collection from external sources and send them into Splunk, I miss its ability to collect that data through REST API applications."

ROI

Splunk Cloud Platform users noticed significant benefits, including infrastructure management savings and improved security monitoring. They reported faster issue resolution and increased visibility. Time to value ranged from a few months to over a year. Some mentioned it reduced stress levels and boosted adoption with hundreds of alerts and dashboards. Others experienced cost efficiencies and estimated a 30-40% return. Several highlighted that it eliminated maintenance headaches, and facilitated faster onboarding of new data sources.

Pricing

Splunk Cloud Platform is known for being expensive compared to other solutions, with licensing costs based on data ingestion volume or Splunk Virtual Compute (SVC). Licensing involves annual payments, and additional features require extra costs. While the pricing is high, especially for small organizations, many users find the benefits worth the investment. Some organizations have switched to an SVC model, which has allowed them to ingest more data and save money.

"We were involved in the renewal process, and our organization does reviews of all our partnerships that we have every two to three years to ensure they are meeting our needs, there isn't a better solution out there, and we won't save money by going somewhere else."
"Splunk Cloud Platform is an expensive solution."
"I know that Splunk Cloud Platform is an expensive product."

Popular Use Cases

Organizations primarily use Splunk Cloud Platform for security monitoring, log management, IT operations, and troubleshooting. They utilize it to aggregate logs from various sources, monitor application performance, analyze security incidents, create dashboards, and generate alerts. Splunk Cloud Platform aids in centralizing and analyzing data from cloud and on-premises environments, ensuring seamless monitoring, and improving security compliance and operational efficiency.

Service and Support

Splunk Cloud Platform's customer service and support receive mixed feedback. Many find the support to be knowledgeable and responsive, especially for premium customers and high-priority issues. Others experience slow response times, a lack of proactivity, and frequent support staff changes. Some praise the expertise and helpfulness of technical support, while others find it inconvenient and frustrating. Escalations are common for unresolved or complex issues. Many users rely on internal teams, forums, or escalate for effective resolutions.

Deployment

Users found Splunk Cloud Platform's initial setup varied in complexity. Many found it straightforward, with deployment taking minutes to hours. However, some faced complications due to extensive log sources and required expertise from teams or third-party consultants. Organizations transitioning from on-premises to cloud experienced smoother setups with professional support. Users highlighted that while initial steps are manageable, the duration and complexity depend on factors such as data volume, infrastructure, and customization needs. Continuous fine-tuning post-deployment is often necessary to ensure optimal performance.

Scalability

Users find Splunk Cloud Platform highly scalable, with adaptability for various company sizes. It easily handles large data volumes, and users appreciate plug-and-play capabilities in a cloud environment. However, cost concerns are prevalent. Scalability may depend on licensing, but generally, the platform meets expansion needs. Users rate its scalability positively, often scoring it between eight and ten out of ten. Some note issues with resource constraints, but many highlight the platform's overall flexibility in scaling.

Stability

Splunk Cloud Platform is frequently described as stable. Users rarely encounter bugs or downtime, with some mentioning minor issues that are quickly fixed. Stability is enhanced by proper maintenance and community support, resulting in high availability and reliability. Some users noted occasional slowdowns linked to external factors like virtual machines or firewalls. Splunk's recent updates have addressed many concerns, maintaining consistent performance. Many rate its stability between 7 and 10 out of 10.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Splunk Cloud Platform Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

26%

Financial Services Firm

13%

Educational Organization

University

Comms Service Provider

Manufacturing Company

Retailer

Government

Media Company

Pharma/Biotech Company

Insurance Company

Hospitality Company

Healthcare Company

Real Estate/Law Firm

Non Profit

Logistics Company

Legal Firm

Construction Company

Energy/Utilities Company

Transportation Company

Recreational Facilities/Services Company

Performing Arts

Wholesaler/Distributor

Outsourcing Company

Paper And Forest Products

Consumer Goods Company

Compare Splunk Cloud Platform with alternative products

Learn more about Splunk Cloud Platform

Companies across various industries leverage Splunk Cloud Platform for cybersecurity, compliance, user activity monitoring, and alerts. It helps in managing cloud environments, optimizing data storage costs, and enhancing customer insights with effective data visualization. The platform's robust capabilities include customizable reporting, flexible log sending, powerful search features, and seamless integration with other systems. Users monitor multiple environments and platforms effortlessly with the cloud infrastructure maintained by Splunk. Despite its advantages, users find the pricing steep, support ineffective, and encounter performance issues with large data volumes. Integration challenges, limited training resources, and insufficient documentation also pose concerns.

What are the most important features of Splunk Cloud Platform?

Customizable Reporting and Dashboards: Design personalized reports and visual dashboards.
Quick Setup: Rapid deployment and setup process.
Flexible Log Sending: Send logs seamlessly from multiple sources.
Powerful Search Capabilities: Conduct detailed log event searches efficiently.
Easy Integration: Integrates easily with other systems.
End-to-End Visibility: Complete monitoring of the IT infrastructure.
Automated Monitoring: Real-time automated oversight.
Federated Search: Search across multiple data sources.
User-Friendly Interface: Intuitive and accessible design.

What benefits can users expect from Splunk Cloud Platform?

Business Resilience: Improved continuity and reduced downtime.
Enhanced Cybersecurity: Advanced security features and compliance.
Performance Improvement: Better system performance and faster issue resolution.
Cost Optimization: Efficient data storage and cost management.
Customer Insights: Enhanced analytics for better understanding of customer behavior.

Splunk Cloud Platform is implemented across industries including finance, healthcare, retail, and technology. Organizations use it to enhance cybersecurity measures, meet compliance requirements, monitor user activities, and issue automated alerts. In finance, it assists in fraud detection and compliance. In healthcare, it ensures data security and regulatory adherence. Retailers use it for customer behavior analysis and performance monitoring, while technology companies benefit from its troubleshooting and log management capabilities. Despite its powerful features, companies face challenges with pricing, support, and integration that require consideration during implementation.