Try our new research platform with insights from 80,000+ expert users

Dynatrace vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 29, 2024
 

Categories and Ranking

Dynatrace
Ranking in Log Management
4th
Average Rating
8.8
Reviews Sentiment
7.4
Number of Reviews
344
Ranking in other categories
Application Performance Monitoring (APM) and Observability (2nd), Mobile APM (1st), Container Monitoring (2nd), AIOps (2nd)
Splunk Enterprise Security
Ranking in Log Management
1st
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
301
Ranking in other categories
Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

As of December 2024, in the Log Management category, the mindshare of Dynatrace is 5.6%, down from 7.5% compared to the previous year. The mindshare of Splunk Enterprise Security is 9.0%, down from 13.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Q&A Highlights

Miriam Tover - PeerSpot reviewer
Mar 18, 2020
 

Featured Reviews

Sathis-Kumar - PeerSpot reviewer
The single-agent format is easy to use and accurately captures issues
We are currently migrating from AppDynamics to the solution. AppDynamics is moving toward a fast model and has a few issues with vendor support. It also requires multiple agents for each function. For example, a Java-related APM requires the installation of another agent. The solution is a bit higher priced than AppDynamics but is more user friendly and only requires one agent, so our application teams prefer it.
Avinash Gopu. - PeerSpot reviewer
Offers good visibility into multiple environments, significantly reduces our alert volume, and speeds up our security investigations
There are limitations with Splunk not detecting all user activity, especially on mainframes and network devices. This is because Splunk relies on agents, which cannot access certain workstations. In these cases, we have to rely on application data. For example, with mainframes, manual reports are generated and sent to Splunk, limiting visibility to what's manually reported. This lack of automation for specific platforms needs improvement from Splunk. Additionally, API access is limited for other applications that rely on API calls and requests. This requires heavy customization on Splunk's end. These are the main challenges we've encountered. Monitoring multiple cloud platforms, like Azure, GCP, and AWS, with Splunk Enterprise Security presents some challenges. While Splunk provides different connectors for each provider, consolidating data from two domains across distinct cloud environments can be complex. However, leveraging pre-built templates and Splunk's data collation capabilities can help overcome these hurdles. Despite initial difficulties, I believe Splunk can effectively address this task, earning it an eight out of ten rating for its multi-cloud monitoring capabilities. While Splunk Enterprise Security offers insider threat detection capabilities, its effectiveness could be enhanced by integrating with additional tools, such as endpoint security solutions. This integrated approach is particularly crucial for financial institutions, which often require dedicated endpoint security teams. While using multiple tools is valuable, further improvements within Splunk itself are also necessary. Considering both external integration and internal development, I would rate its current insider threat detection capabilities as three out of ten. Threat detection is where Splunk falls behind. While it offers tools, other use cases require additional work. PAM is an enterprise tool that centralizes information about users, servers, and everything else. It needs real-time monitoring, which I haven't seen in any of the companies I've worked for. They only rely on Splunk for alerting, but real-time monitoring should be handled by the endpoint security team's tools. This means there's no detection or analysis at the machine or endpoint level. Additionally, threat analysis reporting is also absent.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The alerting mechanism where you get millions of dependencies analyzed, in one alert or "problem" as Dynatrace calls it."
"Dynatrace is a powerful tool for full stack monitoring with APM capabilities and AI root cause problem analysis. This helps our customers with their digital transformation and gaining insight into their infrastructure."
"No other provider gives us log ingestion, Kubernetes/Docker monitoring, and application monitoring for NodeJS."
"Metrics for CPU, memory, network, and disk. It provides extensive end-user, application, and infrastructure platform and technology support, including mobile, web browser, Java, .NET, PHP, servers, networks, and mainframe."
"End-to-end visibility of the applications, since we have them instrumented. Understanding where the hotspots are in the applications."
"​We have drastically reduced the delay taken by the diagnostic phase. As we identify the root cause very rapidly, we can now focus on the solution and communication."
"Some of the troubleshooting features for development, the PurePath technology in AppMon, are valuable. The dashboarding gives us some good insight into some fluctuations in some of the application areas."
"We were able to decrease the number of production defects ever since we started using Dynatrace in our test environment."
"The ability to ingest different log types from many different products in our environment is most valuable."
"Splunk gives my clients the ability to bring multiple, disparate types of data together, then correlate and report on them."
"The integration is seamless with many devices and operating systems."
"The correlation searches are most valuable just because we are able to do things like RBA."
"It gives us good visibility into multiple environments, including cloud, on-premises, and hybrid; irrespective of platform."
"I like the ease with which dashboards can be created."
"The completeness of the solution is what we like the most."
"It helps streamline troubleshooting and log analysis."
 

Cons

"It needs container log monitoring."
"They're doing vulnerability assessments of the application stack by using OneAgent. It's a never-ending story if you are trying to be sure your application is also secure."
"Provide much better alignment between AppMon and Dynatrace."
"Ease of use could be improved because it can be hard to determine how you made it to the screen you are on and how to get back to it later."
"Setting up the thresholds and alerting, it is complicated to understand their use cases."
"There were a number of marketing promises that were made, which we do not see it in the tool yet. ​"
"Every time I want to see the PurePath, I have to launch the client. It would be helpful if they introduced this in the browser application."
"Pretty much every month there are new features. However, its information on those new features is scarce."
"The integration with all our tool sets felt like we were reinventing the wheel, which was a pain point for us."
"It requires a significant amount of relatively complex architecture once you push past the single server instance."
"Adding custom visualization in Splunk has been improved over the years but can still be made better by integrating more and more JavaScript visualization sources."
"Splunk's reporting functionality would benefit from enhanced customization capabilities, allowing users to tailor reports to their specific needs for better data visualization and analysis."
"Cybersecurity and infrastructure monitoring have room for improvement."
"I find the graphical options really limited and you don't have enough control over how to display the data that you want to see."
"The threat management part is still lagging. There are some gaps in threat management. Other vendors have built-in threat management systems, but Splunk lacks the threat management component in its portal. The UEBA and everything else is perfect, but it lacks a unified threat intelligence and management part."
"I find that the learning curve for Splunk is relatively lengthy."
 

Pricing and Cost Advice

"Dynatrace is very good and it's provided a lot of information, it plays a positive role in making your application up to date in the market. If you want to monitor some applications only, it would be cheaper if you did cloud monitoring, but the price benefit depends on the use case."
"Licensing is a bit complicated for Dynatrace, and pricing is dependent on how much your organization invests."
"The product is pricey, but it is feature-rich, which is why we probably haven't looked away from it."
"Look at the product and the product features, not the price. Too often people look at the price and turn away. Dynatrace costs a little bit more than the other products I researched, but it can do far more.​"
"The pricing is not bad, but it could be better."
"We found an issue within the first week of ownership that has been costing us more than the entire license cost."
"As compared to New Relic and other providers, it is more expensive, which is its biggest disadvantage. Its biggest advantage is its capability. It is more feature-rich."
"Getting the first agents installed, getting information, and coverage in a initial set of systems can be done in hours and with a low cost entry point."
"The pricing and licensing of the product are quite high."
"Be upfront about your needs and expectations. Splunk is great to work with."
"The tool's licensing is good and we haven't received any complaints from the team handling it."
"Splunk licensing model might seem expensive but with all the gain in functionalities you will have compared to traditional SIEM solutions I think it’s worth the price."
"I work on the technical side, so I don't know precise figures. However, I know that Splunk is a premium product, so it's somewhat costly. Still, you get a lot of unique features for the money."
"Splunk is costly but it’s worth it due to the high-end features."
"The pricing model is expensive and a nightmare based on the amount of data."
"The subscription is monthly."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
823,795 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Answers from the Community

Miriam Tover - PeerSpot reviewer
Mar 18, 2020
Mar 18, 2020
The two things are entirely different. Splunk is primarily a log collection, analysis, and visualization solution. It can collect metrics now as well. Its purpose is after the fact forensics (what happened) as a part of a problem resolution process. That problem can span the entire gamut from security, to infrastructure operations to application operations. The primary competitors to Splunk ar...
2 out of 7 answers
BH
Jun 25, 2019
The two things are entirely different. Splunk is primarily a log collection, analysis, and visualization solution. It can collect metrics now as well. Its purpose is after the fact forensics (what happened) as a part of a problem resolution process. That problem can span the entire gamut from security, to infrastructure operations to application operations. The primary competitors to Splunk are Elastic and Sumologic. Dynatrace is an Application Performance Management solution designed to automatically measure the performance of an application (or a micro-service), discover the topology and dependencies that the application relies upon, and determine if a problem is in the code or in the software and hardware infrastructure that supports the application. The key to Dynatrace's ability to do this is its real-time topology and dependency mapping engine called SmartScape. There is no similar capability in Splunk. The principal competitors to Dynatrace are AppDynamics, New Relic, and Instana. Rather than viewing these things as competitors, many companies use them together. In fact, Dynatrace has integration with Splunk, and Splunk has a Splunk App for Dynatrace up in Splunkbase. The most common use case for using them together is that Dynatrace finds the problem, determines if it is the code or not and if not determines where in the software and hardware infrastructure the problem resides. Splunk is then used to drill down into the part of the identified infrastructure to determine the exact nature of the problem (for example a security breach).
informat792312 - PeerSpot reviewer
Jun 25, 2019
Splunk and Dynatrace are two different solutions. Most organizations use both of them. Splunk can aggregate logs from Dynatrace. It also depends on what is the purpose of the usage. If you intend to measure end to end application performance and the application logs are instrumenting the metrics, then Splunk alone can do the job. It also allows you to correlate other events like firewall, network and other dependent applications/services.
 

Top Industries

By visitors reading reviews
Educational Organization
34%
Financial Services Firm
17%
Computer Software Company
8%
Manufacturing Company
6%
Financial Services Firm
16%
Computer Software Company
14%
Government
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Any advice about APM solutions?
The key is to have a holistic view over the complete infrastructure, the ones you have listed are great for APM if you need to monitor applications end to end. I have tested them all and have not f...
What cloud monitoring software did you choose and why?
While the environment does matter in the selection of an APM tool, I prefer to use Dynatrace to manage the entire stack. Both production and Dev/Test. I find it to be quite superior to anything els...
Any advice about APM solutions?
There are many factors and we know little about your requirements (size of org, technology stack, management systems, the scope of implementation). Our goal was to consolidate APM and infra monitor...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Learn More

 

Overview

 

Sample Customers

Audi, Best Buy, LinkedIn, CISCO, Intuit, KRONOS, Scottrade, Wells Fargo, ULTA Beauty, Lenovo, Swarovsk, Nike, Whirlpool, American Express
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Dynatrace vs. Splunk Enterprise Security and other solutions. Updated: December 2024.
823,795 professionals have used our research since 2012.