Splunk ITSI (IT Service Intelligence) Reviews

Splunk ITSI provides valuable visibility into a company's environment, allowing users to significantly reduce costs and improve efficiency. By implementing Splunk and utilizing DB Connect, users were able to eliminate the need for expensive reports and instead gather data through simple SQL queries. This resulted in a cost reduction in some cases. Additionally, Splunk enables users to create alerts and dashboards for monitoring and reviewing historical information, further enhancing overall ROI.

The pricing for Splunk ITSI is based on the amount of data used and is considered fair. The service also offers good support, including 24/7 customer support through a portal. However, some reviewers find the pricing to be a bit high, while others mention that the licensing fee can vary depending on data ingestion. 

• "It depends on how big an organization is. If we have a lot of resources, the licensing needs to be upgraded. If we have a small environment, the licensing cost is definitely going to be less."
• "I know that it is expensive, but I do not think there is another solution that can do similar things for that price."
• "Splunk is pretty expensive, but it gives you a decent insight into the data. It is easy to learn, and ITSI has a great interface. You can run those queries and pass the data. I"

Splunk ITSI is used to analyze data and create alerts, helping to maintain security best practices. 

It has multiple use cases such as heat maps, glass tables, and predictive analysis. Heat maps allow for monitoring the health of servers and automatically change color to indicate issues. Glass tables provide a visual representation of the system architecture and allow for setting threshold values. Predictive analysis analyzes data patterns to predict failures or issues. Integration with ticketing tools automates the creation of tickets in ServiceNow. The episode review feature groups alerts to prevent ticket spam. 

It is used to find out about system outages and generate fast insights. It is also used to monitor critical services like payment gateways. It is used both on the cloud and on-premises. Splunk ITSI is primarily used for monitoring infrastructure and applications based on data source ingestion. It can be used for SIEM purposes.

The customer service and support for Splunk ITSI varies depending on the individual use case and configuration. It is not always completely satisfactory. There have been incidents where requested upgrades resulted in issues due to removed concepts. 

The setup process for Splunk ITSI was initially complex, requiring knowledge in various areas such as network and firewall rules, routing methodologies, and cluster concepts. However, with continuous learning and collaboration with teammates, it has become much better. Despite this, other reviewers found the initial setup to be straightforward and simple. The deployment process can be done remotely or manually, and the time it takes depends on the operating system used. Connecting APIs and logging in are the primary steps for setting up Splunk ITSI. 

Splunk ITSI is highly regarded for its scalability. Users highlight its effectiveness in accommodating growth. However, the scalability of Splunk ITSI may be limited if budget constraints hinder the acquisition of additional licenses or seats. Nonetheless, the solution is easy to scale by simply procuring more licenses from Splunk and adding new users. 

The stability of Splunk ITSI is highly regarded by users. Users have noted the absence of bugs, glitches, crashes, or freezes.