ITRS Geneos vs Splunk Enterprise Security comparison

The compared ITRS and Splunk solutions aren't in the same category. ITRS is ranked #35 in APM , with an average rating of 5.0, and holds a 1.0% mindshare in the category. Splunk is ranked #1 in SIEM , with an average rating of 8.3, and holds a 7.1% mindshare. Additionally, 96% of ITRS users are willing to recommend the solution, compared to 94% of Splunk users who would recommend it.

ITRS Geneos

Read 57 ITRS Geneos reviews

4,591 Views
2,892 Comparison Views

96% willing to recommend

Splunk Enterprise Security

Read 375 Splunk Enterprise Security reviews

26,439 Views
13,748 Comparison Views

94% willing to recommend

ITRS Geneos

Splunk Enterprise Security

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between ITRS Geneos and Splunk Enterprise Security based on real PeerSpot user reviews.

Find out in this report how the two Application Performance Monitoring (APM) and Observability solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed ITRS Geneos vs. Splunk Enterprise Security Report (Updated: May 2023).

Buyer's Guide

ITRS Geneos vs. Splunk Enterprise Security

May 2023

Download the complete report

Helped 882,207 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ITRS Geneos

Average Rating

8.2

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (35th), Network Monitoring Software (64th), IT Infrastructure Monitoring (44th)

Splunk Enterprise Security

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

375

Ranking in other categories

Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. ITRS Geneos is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 1.0%, down 1.3% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.1% mindshare, down 9.8% since last year.

Application Performance Monitoring (APM) and Observability Market Share Distribution
Product	Market Share (%)
ITRS Geneos	1.0%
Dynatrace	6.3%
Datadog	5.3%
Other	87.4%

Application Performance Monitoring (APM) and Observability

Security Information and Event Management (SIEM) Market Share Distribution
Product	Market Share (%)
Splunk Enterprise Security	7.1%
Wazuh	6.4%
IBM Security QRadar	5.4%
Other	81.1%

Security Information and Event Management (SIEM)

Featured Reviews

DeepakR

Site Reliability Engineer(Observability) at Sapiens

If one server fails, the agent will automatically be reinstalled

ITRS Geneos is a legacy system. It predicts or provides proactive measures once an issue is resolved. It doesn't offer any predictive capabilities or root cause analysis. They throw a lot of data if there's a 90% error. You need to check which process is consuming more CPU and determine the root cause for yourself. You need to troubleshoot it manually. This legacy system could introduce predictive analysis and root cause identification. They are reluctant to switch to newer solutions, which may require writing queries to fetch data. Manually logging into servers, checking CPU usage, identifying processes, and determining root causes is time-consuming. Once the root cause is identified, the issue can be resolved efficiently. The manual troubleshooting process is time-consuming. The content is not openly available in the market. If you search for it somewhere, it is not readily accessible. If you want to try it out, no trial version is available. Therefore, it will be challenging to learn. Loading ITRS is difficult, as you need to purchase it first. Secondly, only a few people are knowledgeable about ITRS in the market, making it challenging to find resources. Thirdly, the documentation must be well-documented, making finding content or training material hard. The UI also needs to be updated, which adds to the difficulty.

Read full review

reviewer1469784

Senior Manager at a financial services firm with 10,001+ employees

Helps us detect cyber threats quickly and integrate multiple feeds effectively

Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"ITRS can define rules to alert when certain parameters that you monitor breach a threshold. Rules can be configured to fire recovery actions automatically to clear the alert"

"The flexibility of the product is most valuable. It is highly customizable. If you put your mind to it and think of something you could do, there's a good possibility you can get it integrated within the console, if it's not readily available. The simplicity or ease of customization has been valuable."

"The NetProbe carries over 100 samplers which are capable of monitoring hardware, OS, and the application layer."

"Custom script toolkits"

"The clean and colorful UI and easy to use options like snooze and active times."

"The built-in plug-ins allow administrators to easily configure monitoring components for market data systems such as Thomson Reuters Enterprise Platform and SRLabs Wombat (formerly NYSE)."

"One of the most valuable features is that it can be configured by non-developers. It doesn't require development expertise to configure it."

"Tons of default modules which are available out of the box"

More ITRS Geneos pros

"Splunk provides immediate visibility into key business metrics and new business insights that deliver immediate value."

"It has a rapid response search environment in the event of an incident."

"Splunk's schema on demand is incredibly useful. I do not have to worry about what my users will need when we onboard their data."

"Splunk is a user-friendly solution."

"Splunk Enterprise Security is probably one of the first products that actually could handle all the ingest and do all the correlation without crumbling under its own weight."

"Splunk is user-friendly. We can easily customize the monitoring script."

"I like the Splunk dashboard and search engine."

"The tool helps with advanced reports and keeps the system scalable and flexible. It provides a clear picture of the current status of any incidents. As a CISO, I see a lot of potential for future innovation, which is interesting. I've noticed better performance, especially with the reports."

More Splunk Enterprise Security pros

Cons

"Much of the reporting outside of the user interface is very basic and requires much customization to be useful."

"At the moment Geneos is excellent and handling real time monitoring, however not great at doing historical reporting."

"ITRS have started to make some major changes that we haven't taken on board yet, in the creation of dashboards and more visibility of the metrics that we collect. At the moment, that's something that's lacking, but I know they have addressed it. Still, it’s not that easy to create stuff to help with visibility and dashboarding in Geneos."

"It needs to be easier to configure, especially with the JMX plugins."

"Data visualization – real time and historical – is a weakness."

"There is a part of the rules for monitoring alerts. I want to understand more about how to choose the samples and the requirements for the rules. That is the part that I want to understand better and get better training for."

"We all look at the same things - CPU, disk space, paging stats, service status with RAG status on each. That could be provided straight out, saving significant time."

"One thing that could be improved in terms of rapid scaling would be more ability to clone aspects of an implementation. It seems like there are opportunities in this area, where we have repetitive tasks to do when it comes to implementing things on new servers or on new gateways. It would be great if there was an easy way to clone something that had already been done."

More ITRS Geneos cons

"It would be nice if Splunk reduced the cost of training. Their training sessions are way too costly."

"I find the process for customizing, developing, testing, deploying, and refining detections in Splunk Enterprise Security to be challenging at times. It takes some of our more advanced engineers to be able to work through a lot of those processes."

"Splunk Enterprise Security is complicated in terms of developing specific cybersecurity use cases."

"Most of my interaction is with the user community, which is how Splunk wants it. When I need help, that community is very hit or miss."

"It would be nice to have more advanced UEBA in Splunk Enterprise Security. Additionally, it would be beneficial if they offered more threat intel feeds for free."

"While Splunk Enterprise Security offers valuable features, its cost is high and could be more competitive."

"My security ops team takes 60 or 70% longer to remediate security incidents with Splunk Enterprise Security compared to our previous solution."

"The incident response technique should be available out of the box. That isn't as available as we would expect."

More Splunk Enterprise Security cons

Pricing and Cost Advice

"The pricing seems reasonable. We're happy enough with it."

"When I first came in, their pricing was very high. ITRS had a high expectation of what their price should be based on perceived value. I think they have been realizing, more recently, that there are other competitors, so their pricing is a lot better. Licensing for on-premise is okay, however I feel there is quite some work to be done for cloud and containers. We're still working with them to try and work out what that pricing should look like."

"Pricing and licensing is based on the requirements."

"I can say it's not that cheap because the licensing is a little bit costly"

"The product is priced quite high. There are pricing options for customers based on the size of the environment and plug-ins used by the monitoring system."

"The pricing is fairly market-related. They have been very lenient because we have been working with them for so long. An example is that we're currently migrating some of our services to AWS, and they've given us a grace period for some of the things to help with the migration and not to grow additional costs while we are migrating, but it's still on par with the market."

"The organization is not just purchasing a license for the product, but also managing services and professional services from ITRS. Another factor is if the implementation is going to be in production, non-production, or both."

"You will get the best price if you get a single global deal."

More ITRS Geneos pricing and cost advice

"While licensing can be a concern, there are ways to reduce the licensing costs including filtering some events."

"Splunk Enterprise becomes extremely expensive after the 20GB/month license."

"Splunk can be expensive, as its licensing is based on the daily data ingestion volume."

"Splunk Enterprise Security is an expensive solution."

"While Splunk is more expensive than other solutions, we would still choose it because of its capabilities."

"Our customers often complain that the price of Splunk is too high."

"The pricing model is based on the number of gigabytes that you ingest into the Splunk system. So it can be an expensive solution."

"It's a yearly subscription."

More Splunk Enterprise Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.

See recommendations

882,207 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees

Feb 26, 2015

HP ArcSight vs. IBM QRadar vs. McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm

We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

69%

Computer Software Company

Construction Company

Outsourcing Company

Financial Services Firm

12%

Computer Software Company

10%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	12
Large Enterprise	39

By reviewers
Company Size	Count
Small Business	109
Midsize Enterprise	50
Large Enterprise	264

Questions from the Community

What is your experience regarding pricing and costs for ITRS Geneos?

The pricing is high. Licensing fees might be around 500$ per server monthly.

See all answers

What needs improvement with ITRS Geneos?

See all answers

What is your primary use case for ITRS Geneos?

ITRS offers multiple products, including upgrades for synthetic monitoring and a SaaS platform. Geneos is used for infrastructure monitoring, covering KPIs such as CPU, memory, processes, network l...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What is a better choice, Splunk or Azure Sentinel?

It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...

See all answers

How does Splunk compare with Azure Monitor?

Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...

See all answers

Comparisons

Dynatrace vs ITRS Geneos

Compared 13% of the time

Grafana vs ITRS Geneos

Compared 8% of the time

Splunk AppDynamics vs ITRS Geneos

Compared 7% of the time

Prometheus-AI Platform vs ITRS Geneos

Compared 5% of the time

Nagios XI vs ITRS Geneos

Compared 4% of the time

More ITRS Geneos Competitors

IBM Security QRadar vs Splunk Enterprise Security

Compared 10% of the time

Wazuh vs Splunk Enterprise Security

Compared 5% of the time

Sentinel vs Splunk Enterprise Security

Compared 5% of the time

Dynatrace vs Splunk Enterprise Security

Compared 4% of the time

Datadog vs Splunk Enterprise Security

Compared 3% of the time

More Splunk Enterprise Security Competitors

Product Reports

Buyer's Guide

ITRS Geneos

February 2026

Download ITRS Geneos product report

Buyer's Guide

Splunk Enterprise Security

January 2026

Download Splunk Enterprise Security product report

Also Known As

Geneos

No data available

Overview

ITRS Geneos is a real-time monitoring tool designed for managing increasingly complex, hybrid and interconnected IT estates.

Built with financial services and trading organisations in mind, it collects a wide range of data relating to server performance, infrastructure, trading, connectivity and applications, and analyses it to provide relevant information and alerts in real time.

Geneos can give full stack visibility across highly dynamic environments and presents all the information through a single pane of glass and its configurable and customisable dashboards provide end-to-end visibility to both technical and business users.

For more information, please visit https://www.itrsgroup.com/products/geneos

ITRS

Splunk Enterprise Security delivers powerful log management, rapid searches, and intuitive dashboards, enhancing real-time analytics and security measures. Its advanced machine learning and wide system compatibility streamline threat detection and incident response across diverse IT environments.

Splunk Enterprise Security stands out in security operations with robust features like comprehensive threat intelligence and seamless data integration. Its real-time analytics and customizable queries enable proactive threat analysis and efficient incident response. Integration with multiple third-party feeds allows detailed threat correlation and streamlined data visualization. Users find the intuitive UI and broad compatibility support efficient threat detection while reducing false positives. Despite its strengths, areas such as visualization capabilities and integration processes with cloud environments need enhancement. Users face a high learning curve, and improvements in automation, AI, documentation, and training are desired to maximize its potential.

What Are the Key Features of Splunk Enterprise Security?

Log Management: Efficiently manages and organizes a vast amount of logs for better data handling.
Rapid Data Search: Quickly retrieves relevant data for fast decision-making.
Flexible Dashboards: Customizable dashboards provide clear data visualization.
Comprehensive Threat Intelligence: Offers detailed insights to preemptively defend against threats.
Real-Time Analytics: Analyzes data in real-time to enhance response times.
Integration with Third-Party Feeds: Streamlines information flow from multiple sources.

What Benefits Should Users Investigate in Reviews?

Efficient Incident Response: Enhances the ability to respond promptly to threats.
False Positive Reduction: Minimizes incorrect threat alarms, making monitoring more efficient.
Threat Detection Speed: Accelerates the identification and evaluation of security threats.
Cost-Effectiveness: Potential savings through better licensing options and operational efficiency.
User Adaptability: Enhancements in documentation and training resources aid in overcoming the learning curve.

In specific industries like finance and healthcare, Splunk Enterprise Security is instrumental for log aggregation, SIEM functionalities, and compliance monitoring. Companies leverage its capabilities for proactive threat analysis and response, ensuring comprehensive security monitoring and integration with various tools for heightened operational intelligence.

Splunk

Sample Customers

ITRS Geneos is used by over 170 financial institutions, including JPMorgan, HSBC, RBS, Deutsche Bank and Goldman Sachs. Clients range from investment banks to exchanges and brokers.

Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.

Buyer's Guide

ITRS Geneos vs. Splunk Enterprise Security

May 2023

Free Report: ITRS Geneos vs. Splunk Enterprise Security

Find out what your peers are saying about ITRS Geneos vs. Splunk Enterprise Security and other solutions. Updated: May 2023.

DOWNLOAD NOW

882,207 professionals have used our research since 2012.

See our ITRS Geneos vs. Splunk Enterprise Security report.

We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.