ITRS Geneos vs Splunk Enterprise Security comparison

The compared ITRS and Splunk solutions aren't in the same category. ITRS is ranked #34 in APM , with an average rating of 5.0, and holds a 1.0% mindshare in the category. Splunk is ranked #1 in SIEM , with an average rating of 8.3, and holds a 7.2% mindshare. Additionally, 96% of ITRS users are willing to recommend the solution, compared to 94% of Splunk users who would recommend it.

ITRS Geneos

Read 57 ITRS Geneos reviews

4,758 Views
2,950 Comparison Views

96% willing to recommend

Splunk Enterprise Security

Read 380 Splunk Enterprise Security reviews

27,630 Views
14,920 Comparison Views

94% willing to recommend

ITRS Geneos

Splunk Enterprise Security

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between ITRS Geneos and Splunk Enterprise Security based on real PeerSpot user reviews.

Find out in this report how the two Application Performance Monitoring (APM) and Observability solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed ITRS Geneos vs. Splunk Enterprise Security Report (Updated: May 2023).

Buyer's Guide

ITRS Geneos vs. Splunk Enterprise Security

May 2023

Download the complete report

Helped 883,824 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ITRS Geneos

Average Rating

8.2

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (34th), Network Monitoring Software (64th), IT Infrastructure Monitoring (45th)

Splunk Enterprise Security

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

380

Ranking in other categories

Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. ITRS Geneos is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 1.0%, down 1.3% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.2% mindshare, down 9.8% since last year.

Application Performance Monitoring (APM) and Observability Mindshare Distribution
Product	Mindshare (%)
ITRS Geneos	1.0%
Dynatrace	6.0%
Datadog	5.2%
Other	87.8%

Application Performance Monitoring (APM) and Observability

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Splunk Enterprise Security	7.2%
Wazuh	5.8%
IBM Security QRadar	5.3%
Other	81.7%

Security Information and Event Management (SIEM)

Featured Reviews

DeepakR

Site Reliability Engineer(Observability) at Sapiens

If one server fails, the agent will automatically be reinstalled

ITRS Geneos is a legacy system. It predicts or provides proactive measures once an issue is resolved. It doesn't offer any predictive capabilities or root cause analysis. They throw a lot of data if there's a 90% error. You need to check which process is consuming more CPU and determine the root cause for yourself. You need to troubleshoot it manually. This legacy system could introduce predictive analysis and root cause identification. They are reluctant to switch to newer solutions, which may require writing queries to fetch data. Manually logging into servers, checking CPU usage, identifying processes, and determining root causes is time-consuming. Once the root cause is identified, the issue can be resolved efficiently. The manual troubleshooting process is time-consuming. The content is not openly available in the market. If you search for it somewhere, it is not readily accessible. If you want to try it out, no trial version is available. Therefore, it will be challenging to learn. Loading ITRS is difficult, as you need to purchase it first. Secondly, only a few people are knowledgeable about ITRS in the market, making it challenging to find resources. Thirdly, the documentation must be well-documented, making finding content or training material hard. The UI also needs to be updated, which adds to the difficulty.

Read full review

reviewer1469784

Senior Manager at a financial services firm with 10,001+ employees

Helps us detect cyber threats quickly and integrate multiple feeds effectively

Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The filtering in the Active Console is exceptional. Depending on the user base, some people don't want to see server-level errors, so we have filters set up in the Managed Entities view, which allow us to filter out things that certain groups don't want to see, while allowing them to see other things. It's a great real-time monitoring solution. And you can draw graphs immediately, right from the Active Console, whether they're current graphs or historical graphs."

"I would say that it is an easy-to-use monitoring tool. Amongst the available monitoring tools, it is a really good option."

"Real-time log monitoring with desktop alerts is valuable as it tells us immediately when there is an issue."

"The ability to logically normalize data gathered from multiple types of sources via pre-built plugins is extremely powerful. This functionality, coupled with the ability to import custom data via the Toolkit plugin allows Geneos to be leveraged to monitor every system in the enterprise."

"The ability to build integrations to tools that are not monitored out of the box is the most valuable feature."

"ITRS uses SNMP to communicate with our devices as well as SNMP net probes installed on our servers."

"It's a very powerful application monitoring tool across the industry. Many free, open-source tools are available. There are also paid tools, but ITRS Geneos is a real-time application monitoring tool where the user can monitor, self-configure, and manage alerts through their console."

"The ability to completely tailor and customize what it's monitoring is one of its strongest points. A lot of other monitoring tools are good at certain things, but one of my colleagues described it as the “Swiss Army Knife” of monitoring tools. It can do anything you want."

More ITRS Geneos pros

"Being able to aggregate detection and alerts from various sources is valuable. Like everyone else, we have a wide range of tools in our shop. We are able to stop at one spot and look at all the data. All the data is able to come through, and we can then jump from source to source or index to index. We can dig deep whenever we need to and get a good high-level understanding."

"When it comes to leveraging Splunk Enterprise Security's dashboards and visualizations to communicate security posture to executives, it's pretty straightforward for any type of information."

"The search function for spam is like a google search. You just enter and it will quickly show you the results."

"I appreciate the integrations with the SOAR architectures and the expandability that can be used throughout the entire ecosystem of Splunk Enterprise Security."

"Splunk has significantly reduced the time in performing the task of aggregating logs, reviewing as well as time spent during investigations."

"The compatibility with the add-ons helps us add more data in the same compatible format and use data models to elaborate and make it faster."

"I am enjoying our implementation of risk-based alerting. That has helped very much with cutting out a lot of the noise that we have. It has reduced our alert volume significantly. There is about an 80% reduction."

"The most valuable features are how stable and easy to use Splunk is."

More Splunk Enterprise Security pros

Cons

"I would like to see ITRS integrate its setup editor with a SVN to check-in setup XML after major changes."

"I would really like to see something from the Geneos side to set up automated reporting from ITRS. We have to send reporting to management every day. To do that we have to check the dashboard and then we have to report whether everything is fine or not. In the future, I want something, some reporting kind of feature in ITRS, where it can collect all the data and mention what is green, what is amber, what is red in a report."

"The ITA, the post-incident analytics, could be improved."

"They have the Webslinger solution where you can see when something is alerting. It's a little bit cumbersome."

"It needs to be easier to configure, especially with the JMX plugins."

"At the moment Geneos is excellent and handling real time monitoring, however not great at doing historical reporting."

"Geneos' application monitoring could be improved a lot. Products like AppDynamics and Dynatrace provide the process thread-level monitoring, but Geneos lacks these capabilities."

"ITRS have started to make some major changes that we haven't taken on board yet, in the creation of dashboards and more visibility of the metrics that we collect. At the moment, that's something that's lacking, but I know they have addressed it. Still, it’s not that easy to create stuff to help with visibility and dashboarding in Geneos."

More ITRS Geneos cons

"We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy."

"Splunk Enterprise Security could improve in automation, flexibility, and providing more content out of the box."

"Sometimes the communication with support happens with multiple staff. They should reduce the time to resolution."

"Some of the queries are difficult to run and have room for improvement."

"There is a learning curve in order to start using machine learning. We have been trying to do it for three years, and we have not managed anything. It is too complex."

"Splunk Enterprise Security documentation exists, but compared to Palo Alto, Palo Alto has more knowledge base articles."

"It'd be really nice if Splunk Enterprise Security had a better and solid configuration guide."

"Most of my interaction is with the user community, which is how Splunk wants it. When I need help, that community is very hit or miss."

More Splunk Enterprise Security cons

Pricing and Cost Advice

"The licensing cost may seem expensive upfront. However, the service is outstanding, the tool does things that no other tools can do, and the customizability more than makes up for the cost of licensing."

"The organization is not just purchasing a license for the product, but also managing services and professional services from ITRS. Another factor is if the implementation is going to be in production, non-production, or both."

"ITRS Geneos is not a cheap tool. It's a moderate price for the banking industry. The reason we are not able to add the ITRS monitoring tool for the non-banking industries, and non-finance industries, is that the pricing is too high."

"Pricing and licensing is based on the requirements."

"Based on feedback from colleagues and friends working in the financial sector, Geneos is relatively costly. Many companies have been switching from Geneos to Dynatrace, Sysdig, or other monitoring tools in the past two years because of the price."

"When I first came in, their pricing was very high. ITRS had a high expectation of what their price should be based on perceived value. I think they have been realizing, more recently, that there are other competitors, so their pricing is a lot better. Licensing for on-premise is okay, however I feel there is quite some work to be done for cloud and containers. We're still working with them to try and work out what that pricing should look like."

"The market tools are on par with this solution, but if the solution included more features, then it would be well within the range for the cost."

"Given our spend and the amount of service we have in it, the pricing is quite reasonable."

More ITRS Geneos pricing and cost advice

"The solution is a little expensive."

"The price of Splunk is too high for our market."

"The license for Splunk Enterprise Security is expensive."

"Splunk Enterprise Security is a bit expensive overall, but it provides good value."

"The licensing model can be expensive, but the value it provides is significant."

"Truly evaluate the data you want to ingest and go slow. Pulling in data that can provide no use to your mission only wastes data against your license."

"Splunk can be an expensive solution. It all depends on how we configure the alerts and the events from the endpoints. You can save some money if you do that correctly. If not, it becomes an expensive solution."

"Splunk is not a cheap solution and the license is billed annually."

More Splunk Enterprise Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.

See recommendations

883,824 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees

Feb 26, 2015

HP ArcSight vs. IBM QRadar vs. McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm

We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

69%

Computer Software Company

Construction Company

Outsourcing Company

Financial Services Firm

12%

Computer Software Company

10%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	12
Large Enterprise	39

By reviewers
Company Size	Count
Small Business	112
Midsize Enterprise	50
Large Enterprise	266

Questions from the Community

What is your experience regarding pricing and costs for ITRS Geneos?

The pricing is high. Licensing fees might be around 500$ per server monthly.

See all answers

What needs improvement with ITRS Geneos?

See all answers

What is your primary use case for ITRS Geneos?

ITRS offers multiple products, including upgrades for synthetic monitoring and a SaaS platform. Geneos is used for infrastructure monitoring, covering KPIs such as CPU, memory, processes, network l...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What is a better choice, Splunk or Azure Sentinel?

It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...

See all answers

How does Splunk compare with Azure Monitor?

Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...

See all answers

Comparisons

Dynatrace vs ITRS Geneos

Compared 11% of the time

Splunk AppDynamics vs ITRS Geneos

Compared 7% of the time

Grafana vs ITRS Geneos

Compared 7% of the time

Prometheus-AI Platform vs ITRS Geneos

Compared 5% of the time

Datadog vs ITRS Geneos

Compared 4% of the time

More ITRS Geneos Competitors

IBM Security QRadar vs Splunk Enterprise Security

Compared 10% of the time

Wazuh vs Splunk Enterprise Security

Compared 5% of the time

Sentinel vs Splunk Enterprise Security

Compared 5% of the time

Dynatrace vs Splunk Enterprise Security

Compared 3% of the time

Elastic Security vs Splunk Enterprise Security

Compared 3% of the time

More Splunk Enterprise Security Competitors

Product Reports

Buyer's Guide

ITRS Geneos

February 2026

Download ITRS Geneos product report

Buyer's Guide

Splunk Enterprise Security

February 2026

Download Splunk Enterprise Security product report

Also Known As

Geneos

No data available

Overview

ITRS Geneos is a real-time monitoring tool designed for managing increasingly complex, hybrid and interconnected IT estates.

Built with financial services and trading organisations in mind, it collects a wide range of data relating to server performance, infrastructure, trading, connectivity and applications, and analyses it to provide relevant information and alerts in real time.

Geneos can give full stack visibility across highly dynamic environments and presents all the information through a single pane of glass and its configurable and customisable dashboards provide end-to-end visibility to both technical and business users.

For more information, please visit https://www.itrsgroup.com/products/geneos

ITRS

Splunk Enterprise Security delivers powerful log management, rapid searches, and intuitive dashboards, enhancing real-time analytics and security measures. Its advanced machine learning and wide system compatibility streamline threat detection and incident response across diverse IT environments.

Splunk Enterprise Security stands out in security operations with robust features like comprehensive threat intelligence and seamless data integration. Its real-time analytics and customizable queries enable proactive threat analysis and efficient incident response. Integration with multiple third-party feeds allows detailed threat correlation and streamlined data visualization. Users find the intuitive UI and broad compatibility support efficient threat detection while reducing false positives. Despite its strengths, areas such as visualization capabilities and integration processes with cloud environments need enhancement. Users face a high learning curve, and improvements in automation, AI, documentation, and training are desired to maximize its potential.

What Are the Key Features of Splunk Enterprise Security?

Log Management: Efficiently manages and organizes a vast amount of logs for better data handling.
Rapid Data Search: Quickly retrieves relevant data for fast decision-making.
Flexible Dashboards: Customizable dashboards provide clear data visualization.
Comprehensive Threat Intelligence: Offers detailed insights to preemptively defend against threats.
Real-Time Analytics: Analyzes data in real-time to enhance response times.
Integration with Third-Party Feeds: Streamlines information flow from multiple sources.

What Benefits Should Users Investigate in Reviews?

Efficient Incident Response: Enhances the ability to respond promptly to threats.
False Positive Reduction: Minimizes incorrect threat alarms, making monitoring more efficient.
Threat Detection Speed: Accelerates the identification and evaluation of security threats.
Cost-Effectiveness: Potential savings through better licensing options and operational efficiency.
User Adaptability: Enhancements in documentation and training resources aid in overcoming the learning curve.

In specific industries like finance and healthcare, Splunk Enterprise Security is instrumental for log aggregation, SIEM functionalities, and compliance monitoring. Companies leverage its capabilities for proactive threat analysis and response, ensuring comprehensive security monitoring and integration with various tools for heightened operational intelligence.

Splunk

Sample Customers

ITRS Geneos is used by over 170 financial institutions, including JPMorgan, HSBC, RBS, Deutsche Bank and Goldman Sachs. Clients range from investment banks to exchanges and brokers.

Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.

Buyer's Guide

ITRS Geneos vs. Splunk Enterprise Security

May 2023

Free Report: ITRS Geneos vs. Splunk Enterprise Security

Find out what your peers are saying about ITRS Geneos vs. Splunk Enterprise Security and other solutions. Updated: May 2023.

DOWNLOAD NOW

883,824 professionals have used our research since 2012.

See our ITRS Geneos vs. Splunk Enterprise Security report.

We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.