Try our new research platform with insights from 80,000+ expert users

Google Cloud's operations suite (formerly Stackdriver) vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 5, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Google Cloud's operations s...
Ranking in Log Management
30th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
10
Ranking in other categories
Application Performance Monitoring (APM) and Observability (25th), Cloud Monitoring Software (23rd)
Splunk Enterprise Security
Ranking in Log Management
2nd
Average Rating
8.4
Reviews Sentiment
7.6
Number of Reviews
305
Ranking in other categories
Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

As of March 2025, in the Log Management category, the mindshare of Google Cloud's operations suite (formerly Stackdriver) is 0.7%, down from 1.0% compared to the previous year. The mindshare of Splunk Enterprise Security is 7.6%, down from 11.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

Anand_Patel - PeerSpot reviewer
Offers reliable Ops Agent and logging transport feature with easy third-party integrations
As part of our company, we implemented several changes in our log analytics pattern, including the storage and procurement process. Earlier, before implementing the solution, our company was able to procure only one year of data, but later, we came to the three-year mark. Around 15-20% reduction has been witnessed in the total analytic consumption of our company. The aforementioned result was possible because the solution allowed the creation of a dashboard where factors like storage costs, proportion of logs, and logs presence in a storage bucket or BigQuery can all be checked. Earlier all logs were stored in a raw storage, but currently our company is able to move logs in table bucket that contributes towards cost savings.
ROBERT-CHRISTIAN - PeerSpot reviewer
Has many predefined correlation rules and is brilliant for investigation and log analysis
It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like the monitoring feature."
"The most valuable feature is the multi-cloud integration, where there is support for both GCP and AWS."
"Our company has a corporate account for Google Cloud and so our systems and clusters integrate really well."
"Google's technical support is very good."
"Offers a valuable logging transport feature"
"The cloud login enables us to get our logs from the different platforms that we currently use."
"Provides visibility into the performance uptime."
"It's easy to use."
"It gives us the liberty to do more in terms of use cases."
"Splunk is extremely flexible, which allows us to create custom visualizations along with other customizations."
"Its alerting is most valuable. We have alerts set up in our environment for certain attacks, such as an SQL injection attempt. We have a front-facing server for the website. It is out there, and anybody can access it. When those SQL injection attempts come in, we are able to detect that with the alert."
"Scalability-wise, the tool is awesome since you can add or reduce your resources in an easy way."
"Exporting is a good feature. It helps me out when I have to do reports. I do a lot of exporting and crunching of the numbers. Dashboards are okay for showing to the leadership, but for doing statistics and updating tickets, the export feature is very beneficial for me."
"We did not encounter any issues with scalability. It is almost seamless to add new index (storage) or search (used to analyze the data) nodes to the cluster."
"I am enjoying our implementation of risk-based alerting. That has helped very much with cutting out a lot of the noise that we have. It has reduced our alert volume significantly. There is about an 80% reduction."
"The speed of the search engine"
 

Cons

"The product provides minimal metrics that are insufficient."
"It could be even more automated."
"While we are satisfied with the overall performance, in certain cases we must add additional metrics and additional tools like Grafana and Dynatrace."
"The process of logging analytics can be improved"
"If I want to track any round-trip or breakdowns of my response times, I'm not able to get it. My request goes through various levels of the Google Cloud Platform (GCP) and comes back to my client machine. Suppose that my request has taken 10 seconds overall, so if I want to break it down, to see where the delay is happening within my architecture, I am not able to find that out using Stackdriver."
"It is difficult to estimate in advance how much something is going to cost."
"It could be more stable."
"This solution could be improved if it offered the ability to analyze charts, such as a solution like Kibana."
"I haven't found a way for me to create my own plugins and integrate them into Splunk, but this isn't necessarily a limitation; it could simply be a lack of knowledge on my part."
"Its pricing is extremely high. There are other tools out in the market that are competitive. They do not necessarily have all the functionality, but they are competitive. The professional services we have used have been high as well in comparison to the market."
"The tool itself is very difficult to configure. It's great for its number of inputs, for the different types of systems devices, and things that it could collect information from. To actually make good use of it, you need a fairly dedicated team of people that have some reasonably good programming or modeling skills to be able to do the things that you need to do with it. Whereas a lot of the other tools are better packaged for that, and so require a lot less training and a lot less dedication."
"Splunk's implementation process for managing multiple indexes can be complex, especially when dealing with a large number of components."
"The integration with all our tool sets felt like we were reinventing the wheel, which was a pain point for us."
"The upgrading process could be smoother."
"Splunk ES could have more pre-built integrations and rules. The detection is fairly accurate, but it depends on the rules you create. Splunk's out-of-the-box configuration isn't that useful."
"It is important to make sure that everything is built off of the threat models and all the underlying items within Splunk."
 

Pricing and Cost Advice

"The cost could be lower."
"The cost of using Stackdriver depends on usage."
"We have a basic standard license without any additional costs."
"Splunk Enterprise Security's pricing is based on data volume, which generally suits large enterprises."
"Splunk Enterprise Security is not a cheap product, but I think it is worth every dollar that you pay."
"This solution is costly. Splunk is obviously a great product, but you should only choose this product if you need all the features provided. Otherwise, if you don't need all the features to meet your requirements, there are probably other products that will be more cost-effective. It's cost versus the functionality requirement."
"Splunk Enterprise Security is affordable."
"Our customers often complain that the price of Splunk is too high."
"I work on the technical side, so I don't know precise figures. However, I know that Splunk is a premium product, so it's somewhat costly. Still, you get a lot of unique features for the money."
"Licensing is a yearly, one-time cost."
"The Splunk licensing is high."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
839,515 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
20%
Computer Software Company
13%
Manufacturing Company
8%
Retailer
6%
Financial Services Firm
15%
Computer Software Company
14%
Government
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What needs improvement with Google Stackdriver?
If the errors are caught early in the interface, it would be easier for users to manage. The process of logging analytics can be improved.
What is your primary use case for Google Stackdriver?
I use the solution for logging, defining alerts, and monitoring. Our company's Java and Python logging teams mainly use it.
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

Google Stackdriver, Stackdriver Monitoring, Stackdriver Logging, Google Cloud Monitoring
No data available
 

Overview

 

Sample Customers

Uber, Batterii, Q42, Dovetail Games
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Google Cloud's operations suite (formerly Stackdriver) vs. Splunk Enterprise Security and other solutions. Updated: January 2025.
839,515 professionals have used our research since 2012.