Try our new research platform with insights from 80,000+ expert users

Elastic Observability vs Splunk ITSI (IT Service Intelligence) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 24, 2024
 

Categories and Ranking

Elastic Observability
Ranking in Application Performance Monitoring (APM) and Observability
7th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
26
Ranking in other categories
IT Infrastructure Monitoring (7th), Log Management (11th), Container Monitoring (4th), Cloud Monitoring Software (7th)
Splunk ITSI (IT Service Int...
Ranking in Application Performance Monitoring (APM) and Observability
10th
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
49
Ranking in other categories
IT Alerting and Incident Management (4th)
 

Mindshare comparison

As of December 2024, in the Application Performance Monitoring (APM) and Observability category, the mindshare of Elastic Observability is 6.4%, up from 5.3% compared to the previous year. The mindshare of Splunk ITSI (IT Service Intelligence) is 0.8%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Performance Monitoring (APM) and Observability
 

Featured Reviews

Adelina Craciun - PeerSpot reviewer
Customization enables tailored monitoring and alerting across departments
The possibility to customize it has been quite useful. Whatever the other departments want to dream up, we implement. Whatever they want to monitor, the granularity of it, the changes in the threshold, and the anomalies that they want reported all require some development. So far, every single request has been fulfilled.
Sunil K R - PeerSpot reviewer
Helps improve our incident response time, and our mean time to resolve, but visibility is limited
In my previous project, I successfully led the end-to-end deployment of a Splunk migration. The process went smoothly thanks in part to Splunk's professional services team. They conducted a thorough assessment, identified all our potential pain points, and developed a tailored solution and migration plan. This comprehensive approach ensured a seamless transition. Our core deployment team consisted of 5 internal members and two specialists from Splunk. Additionally, the project included a project manager and a product owner. We also benefited from the expertise of two professional service consultants and two representatives from the customer's side. An on-site admin architect further provided valuable technical support. Throughout the deployment process, we leveraged support from various resources whenever necessary. This included assistance with configuration changes, deployments, and other related tasks. We also collaborated effectively with our teammates to ensure a smooth and successful implementation.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"For full stack observability, Elastic is the best tool compared with any other tool ."
"Elastic APM has plenty of features, such as the Elastic server for Kibana and many additional plugins. It's a comprehensive tool when used as a logging platform."
"It has always been a stable solution."
"It is very stable, and I would rate it ten out of ten based on my interaction with it."
"The solution is open-source and helps with back-end logging. It is also easy to handle."
"Elastic provides built-in features for queries and report generation. It's a very good tool for monitoring integration capabilities."
"All the features that we use, such as monitoring, dashboarding, reporting, the possibility of alerting, and the way we index the data, are important."
"It is a powerful tool that allows users to collect and transform logs as needed, enabling flexible visualization and analysis."
"I particularly appreciate two features of Splunk ITSI: data forwarding and the marketplace."
"The search function is the most valuable. It includes regular expressions and wild card searches. We'll write searches using field and case-sensitive services and use all of these search types to write an alert condition. Splunk ITSI has another feature called Glass Table that offers a visual representation."
"The root cause analysis is very helpful for us."
"What I like the most is the event correlations. It's a file structure, and ITSI has a correlation layer where you can normalize the events from different sources. Once these events are normalized, you set up rules to aggregate them into different or the same attributes. After the rules are defined, you can automate the process to solve the issue automatically."
"Splunk Episodes are valuable because it correlates and aggregates all the information, and you do not have one million events to look at and triage, so it is quite convenient."
"The glass tables are very helpful."
"In my opinion, Splunk IT Service Intelligence (ITSI) is better than QRadar. With the help of Splunk, we can get results."
"I particularly like the preview feature because it provides a prompt experience for impact analysis."
 

Cons

"We did have some issues at the beginning."
"One example is the inability to monitor very old databases with the newest version."
"The auto-discovery isn't nearly as good. That's a big portion of it. When you drop the agent onto the JVM and you're trying to figure things out, having to go through and manually do all that is cumbersome."
"When opening tickets, we cannot use our team mailbox."
"The cost must be made more transparent."
"Improving code insight related to infrastructure and network, particularly focusing on aspects such as firewalls, switches, routers, and testing would be beneficial."
"Elastic Observability needs to have better standardization, logging, and schema."
"If we had some pre-defined templates for observability that we could start using right away after deploying it – instead of having to build or to change some of the dashboards – that would be helpful."
"Integration is the most critical area to improve in Splunk IT Service Intelligence (ITSI). It wasn't a great experience because you had to do a little back and forth to integrate the solution."
"The user interface visualization could be improved."
"After upgrading Splunk ITSI from version 4.11 to 4.13, the analyzer stopped finding values for KPS and services."
"We're getting alerts with delays of maybe five minutes, however, we'd like to see real-time alerting in the future."
"We had issues with support that took a long time to resolve."
"ITSI currently lacks the capability for automated response, mitigation, and remediation."
"The cost of the license could be lower."
"The data recovery has room for improvement."
 

Pricing and Cost Advice

"So far, there are just the standard licensing fees. Several of the components are embedded in the license or are even open source. They're even free depending on what you use, which makes it even more appealing to someone that is discussing pricing of the solution."
"We will buy a premium license after POC."
"There are two types: cloud and SaaS. They charge based on data ingestion, ingest rate, hard retention, and warm retention. I believe it costs around $25,000 annually to ingest 30GB of data daily. That is the SaaS version. There is also a self-managed license where the customer manages their own infrastructure on-prem. In such cases, there are three license tiers that respectively cost $5,000 annually per node, $7,000 per node, and $12,500 per node."
"We have been using the open-source version."
"It is expensive. It is not cheap."
"Pricing is one of those situations where the more you use it, the more you pay."
"Elastic Observability is cheaper than other similar solutions, such as Dynatrace. Its license calculation is based on various factors like data volume and physical infrastructure, particularly related to RAM capacity."
"One needs to pay for the licenses, and it is an annual subscription model right now."
"Pricing has some room for improvement."
"Splunk is pretty expensive, but it gives you a decent insight into the data. It is easy to learn, and ITSI has a great interface. You can run those queries and pass the data. I"
"Splunk ITSI is expensive compared to other tools."
"The licensing is based on data usage."
"Splunk ITSI is expensive."
"It would have been good if the product cost was much lower."
"The cost of the modules is a bit high for non-global companies, making it difficult for them to afford Splunk ITSI."
"The pricing of Splunk is a bit high."
report
Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
22%
Computer Software Company
15%
Manufacturing Company
8%
Government
6%
Financial Services Firm
20%
Computer Software Company
13%
Government
13%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Elastic Observability?
Elastic Observability significantly improves incident response time by providing quick access to logs and data across various sources. For instance, searching for specific keywords in logs spanning...
What is your experience regarding pricing and costs for Elastic Observability?
Elastic Observability is cost-efficient and provides all features in the enterprise license without asset-based licensing. However, sizing and licensing information could be clearer.
What needs improvement with Elastic Observability?
Elastic Observability could improve asset discovery as the current requirement to push the agent is not ideal. Simplifying the parsing of logs and manual efforts would also be beneficial.
What needs improvement with Splunk ITSI (IT Service Intelligence)?
Currently, Glass tables in ITSI only display metrics related to KPIs. I proposed adding an option to show metrics related to entities. This would eliminate the need for custom SPL to achieve this f...
 

Learn More

 

Overview

 

Sample Customers

PSCU, Entel, VITAS, Mimecast, Barrett Steel, Butterfield Bank
TransUnion, Cox Automotive, Carnival Cruises, Leidos, Econocom, National Ignition Factory, Entrust Datacard, Molina Healthcare, United States Census Bureau
Find out what your peers are saying about Elastic Observability vs. Splunk ITSI (IT Service Intelligence) and other solutions. Updated: December 2024.
824,053 professionals have used our research since 2012.