Try our new research platform with insights from 80,000+ expert users

Elastic Observability vs Splunk ITSI (IT Service Intelligence) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 24, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.1
Elastic Observability enhances cost-effectiveness, reduces incidents, and improves efficiency, yielding significant time savings and operational benefits.
Sentiment score
8.0
Splunk ITSI quickly delivers ROI by enhancing visibility, reducing costs, and improving performance with centralized data and efficient analytics.
 

Customer Service

Sentiment score
7.7
Elastic Observability's support is praised for prompt, efficient service and effective community-driven insights, enhancing overall user experience.
Sentiment score
6.5
Splunk ITSI support is generally good, but experiences vary by company size and issue, with occasional delays reported.
The technical support is excellent, and I would rate it at ten.
 

Scalability Issues

Sentiment score
7.1
Elastic Observability is efficiently scalable, with performance stability across varying team sizes, influenced by subscription level and infrastructure.
Sentiment score
7.9
Splunk ITSI efficiently scales with clustering and machine learning, handling large data volumes and scoring high in scalability ratings.
Elastic Observability seems to have a good scale-out capability.
What is not scalable for us is not on Elastic's side.
Splunk is highly scalable, with the ability to expand efficiently.
 

Stability Issues

Sentiment score
8.2
Elastic Observability is praised for its robust and stable performance, efficiently handling large data volumes across industries.
Sentiment score
7.9
Splunk ITSI offers high reliability and stability, especially in cloud deployments, with minor issues related to infrastructure and data consistency.
It is very stable, and I would rate it ten out of ten based on my interaction with it.
Elastic Observability is really stable.
The setup, however, must be done correctly as incorrect deployment can lead to issues.
 

Room For Improvement

Elastic Observability needs better licensing, visualization, automation, integration, pricing, AI features, customization, and support for observability and cost transparency.
Splunk ITSI needs better integration, user interface, predictive analytics, machine learning, real-time alerting, automated response, and user support.
It lacked some capabilities when handling on-prem devices, like network observability, package flow analysis, and device performance data on the infrastructure side.
One example is the inability to monitor very old databases with the newest version.
Elastic Observability could improve asset discovery as the current requirement to push the agent is not ideal.
Splunk ITSI could benefit from including more features that other solutions support, such as vulnerability management modules.
 

Setup Cost

Elastic Observability offers competitive pricing with variable costs, favoring enterprises over startups, requiring premiums for advanced features.
Splunk ITSI is a costly but comprehensive tool, valued for its observability despite complex licensing and high pricing.
The license is reasonably priced, however, the VMs where we host the solution are extremely expensive, making the overall cost in the public cloud high.
Elastic Observability is cost-efficient and provides all features in the enterprise license without asset-based licensing.
Splunk ITSI tends to be more expensive compared to some open-source solutions.
 

Valuable Features

Elastic Observability offers scalable logging, seamless integrations, real-time visualization, and enhances system performance with a user-friendly, open-source model.
Splunk IT Service Intelligence enhances incident management with agile data handling, advanced analytics, and effective troubleshooting features for quick issue resolution.
The most valuable feature is the integrated platform that allows customers to start from observability and expand into other areas like security, EDR solutions, etc.
the most valued feature of Elastic is its log analytics capabilities.
All the features that we use, such as monitoring, dashboarding, reporting, the possibility of alerting, and the way we index the data, are important.
Splunk ITSI allows for integration with threat intelligence, enabling my organization to correlate more than two events for generating alerts.
 

Categories and Ranking

Elastic Observability
Ranking in Application Performance Monitoring (APM) and Observability
7th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
26
Ranking in other categories
IT Infrastructure Monitoring (7th), Log Management (15th), Container Monitoring (4th), Cloud Monitoring Software (7th)
Splunk ITSI (IT Service Int...
Ranking in Application Performance Monitoring (APM) and Observability
10th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
50
Ranking in other categories
IT Alerting and Incident Management (4th)
 

Mindshare comparison

As of April 2025, in the Application Performance Monitoring (APM) and Observability category, the mindshare of Elastic Observability is 5.4%, down from 5.7% compared to the previous year. The mindshare of Splunk ITSI (IT Service Intelligence) is 0.7%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Performance Monitoring (APM) and Observability
 

Featured Reviews

Adelina Craciun - PeerSpot reviewer
Customization enables tailored monitoring and alerting across departments
The possibility to customize it has been quite useful. Whatever the other departments want to dream up, we implement. Whatever they want to monitor, the granularity of it, the changes in the threshold, and the anomalies that they want reported all require some development. So far, every single request has been fulfilled.
Sunil K R - PeerSpot reviewer
Helps improve our incident response time, and our mean time to resolve, but visibility is limited
In my previous project, I successfully led the end-to-end deployment of a Splunk migration. The process went smoothly thanks in part to Splunk's professional services team. They conducted a thorough assessment, identified all our potential pain points, and developed a tailored solution and migration plan. This comprehensive approach ensured a seamless transition. Our core deployment team consisted of 5 internal members and two specialists from Splunk. Additionally, the project included a project manager and a product owner. We also benefited from the expertise of two professional service consultants and two representatives from the customer's side. An on-site admin architect further provided valuable technical support. Throughout the deployment process, we leveraged support from various resources whenever necessary. This included assistance with configuration changes, deployments, and other related tasks. We also collaborated effectively with our teammates to ensure a smooth and successful implementation.
report
Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.
844,944 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
20%
Computer Software Company
15%
Manufacturing Company
9%
Government
6%
Financial Services Firm
21%
Computer Software Company
13%
Government
12%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Elastic Observability?
Elastic Observability significantly improves incident response time by providing quick access to logs and data across various sources. For instance, searching for specific keywords in logs spanning...
What is your experience regarding pricing and costs for Elastic Observability?
Elastic Observability is cost-efficient and provides all features in the enterprise license without asset-based licensing. However, sizing and licensing information could be clearer.
What needs improvement with Elastic Observability?
Of course, maintenance is necessary, as with any software, requiring updates with the latest features and security enhancements. It lacked some capabilities when handling on-prem devices, like netw...
What needs improvement with Splunk ITSI (IT Service Intelligence)?
Currently, Glass tables in ITSI only display metrics related to KPIs. I proposed adding an option to show metrics related to entities. This would eliminate the need for custom SPL to achieve this f...
 

Overview

 

Sample Customers

PSCU, Entel, VITAS, Mimecast, Barrett Steel, Butterfield Bank
TransUnion, Cox Automotive, Carnival Cruises, Leidos, Econocom, National Ignition Factory, Entrust Datacard, Molina Healthcare, United States Census Bureau
Find out what your peers are saying about Elastic Observability vs. Splunk ITSI (IT Service Intelligence) and other solutions. Updated: March 2025.
844,944 professionals have used our research since 2012.