ITRS Geneos vs Splunk Enterprise Security comparison

The compared ITRS and Splunk solutions aren't in the same category. ITRS is ranked #34 in APM , with an average rating of 5.0, and holds a 1.0% mindshare in the category. Splunk is ranked #1 in SIEM , with an average rating of 8.3, and holds a 7.2% mindshare. Additionally, 96% of ITRS users are willing to recommend the solution, compared to 94% of Splunk users who would recommend it.

ITRS Geneos

Read 57 ITRS Geneos reviews

4,758 Views
2,950 Comparison Views

96% willing to recommend

Splunk Enterprise Security

Read 381 Splunk Enterprise Security reviews

27,630 Views
14,920 Comparison Views

94% willing to recommend

ITRS Geneos

Splunk Enterprise Security

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between ITRS Geneos and Splunk Enterprise Security based on real PeerSpot user reviews.

Find out in this report how the two Application Performance Monitoring (APM) and Observability solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed ITRS Geneos vs. Splunk Enterprise Security Report (Updated: May 2023).

Buyer's Guide

ITRS Geneos vs. Splunk Enterprise Security

May 2023

Download the complete report

Helped 884,797 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ITRS Geneos

Average Rating

8.2

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (34th), Network Monitoring Software (64th), IT Infrastructure Monitoring (45th)

Splunk Enterprise Security

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

381

Ranking in other categories

Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. ITRS Geneos is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 1.0%, down 1.3% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.2% mindshare, down 9.8% since last year.

Application Performance Monitoring (APM) and Observability Mindshare Distribution
Product	Mindshare (%)
ITRS Geneos	1.0%
Dynatrace	6.0%
Datadog	5.2%
Other	87.8%

Application Performance Monitoring (APM) and Observability

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Splunk Enterprise Security	7.2%
Wazuh	5.8%
IBM Security QRadar	5.3%
Other	81.7%

Security Information and Event Management (SIEM)

Featured Reviews

DeepakR

Site Reliability Engineer(Observability) at Sapiens

If one server fails, the agent will automatically be reinstalled

ITRS Geneos is a legacy system. It predicts or provides proactive measures once an issue is resolved. It doesn't offer any predictive capabilities or root cause analysis. They throw a lot of data if there's a 90% error. You need to check which process is consuming more CPU and determine the root cause for yourself. You need to troubleshoot it manually. This legacy system could introduce predictive analysis and root cause identification. They are reluctant to switch to newer solutions, which may require writing queries to fetch data. Manually logging into servers, checking CPU usage, identifying processes, and determining root causes is time-consuming. Once the root cause is identified, the issue can be resolved efficiently. The manual troubleshooting process is time-consuming. The content is not openly available in the market. If you search for it somewhere, it is not readily accessible. If you want to try it out, no trial version is available. Therefore, it will be challenging to learn. Loading ITRS is difficult, as you need to purchase it first. Secondly, only a few people are knowledgeable about ITRS in the market, making it challenging to find resources. Thirdly, the documentation must be well-documented, making finding content or training material hard. The UI also needs to be updated, which adds to the difficulty.

Read full review

Sathis-Kumar

Senior Manager at Bank of America

Helps us detect cyber threats quickly and integrate multiple feeds effectively

Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It enables us to monitor application processes, to do log-monitoring on a 24/7 basis, to do server-level monitoring - all the hardware parameters - as well as monitor connectivity across applications to the interfaces."

"The filtering in the Active Console is exceptional. Depending on the user base, some people don't want to see server-level errors, so we have filters set up in the Managed Entities view, which allow us to filter out things that certain groups don't want to see, while allowing them to see other things. It's a great real-time monitoring solution. And you can draw graphs immediately, right from the Active Console, whether they're current graphs or historical graphs."

"In my experience, being able to monitor our databases is a valuable feature as we can create our own queries and aren't reliant on the in-built ones."

"The biggest benefit of Geneos is the fact that we can clearly see, if we have an alert, where that alert has come from. We can see the data around that alert and anything that might be relevant is also shown. We can very easily right-click and see why we've received that alert. That's the best part about it, that you've got all the data there with the alerting."

"Geneos automatically sends email notifications when any batch job fails, the database is down or the website is down. It is automatically monitoring everything and reduces manual effort."

"I always appreciate Geneos's stability and ease of use."

"Custom script toolkits"

"The solution's log monitoring and alerting mechanisms are very user-friendly and easy to plug and play."

More ITRS Geneos pros

"Splunk Enterprise Security helped improve our organization’s ability to ingest and normalize data."

"Splunk RBA or risk-based alerting definitely made our lives a lot easier; we went from hundreds of alerts having to be triaged a day, that generally could be false positives or just noise, and bubble them into one overall alert that we can look at on a per-day basis and see what's rising to the top and respond faster, have a higher rate of true positives and find evil a lot quicker."

"Splunk Enterprise Security performs 80% of our work on its own; we just have to do the remaining 20%, which gives us the freedom to explore and detect threats more effectively."

"It gives us good visibility into multiple environments, including cloud, on-premises, and hybrid; irrespective of platform."

"The most valuable features in Splunk are the search function and the ability to run selected session reports. The session reports are important because I can use them to see what is going on in our environment weekly. Additionally, we can use the graph to see how often that particular event is happening."

"The user interface is excellent, and since I'm using Splunk as a power user, it's easy to create dashboards."

"The query functionality is very easy to use and fast to retrieve logs in comparison to other SIEM solutions."

"Compared to IBM QRadar, Splunk Enterprise Security offers faster alert resolution."

More Splunk Enterprise Security pros

Cons

"I would like to see ITRS integrate its setup editor with a SVN to check-in setup XML after major changes."

"For the solution to stay relevant in the cloud-based monitoring environment Geneos needs more plug-ins with more features. Instead of offering clients workarounds, the solution should have a cloud-based out-of-the-box version."

"Currently, it is difficult to monitor secure websites using SSL or with SSO enabled."

"One area where there is room for improvement is the log file. I would like to be able to do a pre-run on the log files. When you are testing log files for regular expressions, it would be good to be able to do a quick check up front on that side of things before you release that into production."

"The dashboard feature is full of bugs. Grouping items results in a distorted dashboard."

"There is a part of the rules for monitoring alerts. I want to understand more about how to choose the samples and the requirements for the rules. That is the part that I want to understand better and get better training for."

"We all look at the same things - CPU, disk space, paging stats, service status with RAG status on each. That could be provided straight out, saving significant time."

"I would also like to see suggested guidelines to accomplish a monitoring task. The issue is that ITRS is so flexible that there is more than one way to complete a task, each with benefits and disadvantages."

More ITRS Geneos cons

"We would like more integrations with other cloud products, not just AWS, e.g., Azure."

"Splunk needs to be able to hold more days of data. At the moment it only holds three months of data."

"One main change I would suggest is related to the incident board: when an incident is resolved, it should not appear on the incident board. It's just a rare occurrence that we open up the incident."

"In the next release, they should include machine learning-based rules that would streamline the process of finding anomalies."

"They can incorporate the SOAR solution within the actual product so that we do not require two different products, two different installations, and two different pricing methods. In regards to UBA, I am familiar with the UBA that existed two years ago. I am not updated about it today, but two years ago, UBA required such an amount of data that from a cost perspective, it was not worth it. When you compare it to what you get out of the box with Microsoft Sentinel without additional costs, there is no match."

"Features related to content management must be improved."

"Configuring a few apps is complex, not straightforward."

"Most importantly, Splunk can be outrageously expensive. That is the problem with both Splunk and Sentinel. Their pricing literally explodes based on the amount of data you feed in."

More Splunk Enterprise Security cons

Pricing and Cost Advice

"The licensing cost may seem expensive upfront. However, the service is outstanding, the tool does things that no other tools can do, and the customizability more than makes up for the cost of licensing."

"You will get the best price if you get a single global deal."

"Pricing and licensing is based on the requirements."

"The pricing is fairly market-related. They have been very lenient because we have been working with them for so long. An example is that we're currently migrating some of our services to AWS, and they've given us a grace period for some of the things to help with the migration and not to grow additional costs while we are migrating, but it's still on par with the market."

"Based on feedback from colleagues and friends working in the financial sector, Geneos is relatively costly. Many companies have been switching from Geneos to Dynatrace, Sysdig, or other monitoring tools in the past two years because of the price."

"Its price is reasonable. It isn't too expensive, and it isn't too cheap, but it also depends on a company's volume and negotiation."

"When I first came in, their pricing was very high. ITRS had a high expectation of what their price should be based on perceived value. I think they have been realizing, more recently, that there are other competitors, so their pricing is a lot better. Licensing for on-premise is okay, however I feel there is quite some work to be done for cloud and containers. We're still working with them to try and work out what that pricing should look like."

"The product is priced quite high. There are pricing options for customers based on the size of the environment and plug-ins used by the monitoring system."

More ITRS Geneos pricing and cost advice

"It is expensive. That is why many customers have moved to IBM QRadar. The price is definitely a challenge for customers."

"It is pretty straightforward and based on the sizing. If I compare it with other competitors, it makes sense."

"Splunk Enterprise Security is an expensive solution."

"Unlike other security tools, Splunk provides a fixed amount of gigabytes per day, and we are required to pay for any additional usage beyond that limit, in addition to our monthly cost."

"We have an unlimited one, and we pay yearly, but I don't know how much it costs. Previously, I worked for a startup, and when they started building it up, it was complicated for them because they didn't have the budget for that many licenses. It was very costly for them. So, startups might find it a little bit problematic because of the licensing, but for bigger companies, there is no issue."

"Splunk Enterprise Security is an expensive solution."

"Its price is fair. Like with anything else, if you go into the cloud, different providers cost more, and you are able to throttle back or throttle up. The cost is comparable with anything else."

"The licensing is good, but the pricing absolutely needs some work. It is very high."

More Splunk Enterprise Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.

See recommendations

884,797 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees

Feb 26, 2015

HP ArcSight vs. IBM QRadar vs. McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm

We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

69%

Computer Software Company

Outsourcing Company

Real Estate/Law Firm

Financial Services Firm

12%

Computer Software Company

10%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	12
Large Enterprise	39

By reviewers
Company Size	Count
Small Business	112
Midsize Enterprise	50
Large Enterprise	267

Questions from the Community

What is your experience regarding pricing and costs for ITRS Geneos?

The pricing is high. Licensing fees might be around 500$ per server monthly.

See all answers

What needs improvement with ITRS Geneos?

See all answers

What is your primary use case for ITRS Geneos?

ITRS offers multiple products, including upgrades for synthetic monitoring and a SaaS platform. Geneos is used for infrastructure monitoring, covering KPIs such as CPU, memory, processes, network l...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What is a better choice, Splunk or Azure Sentinel?

It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...

See all answers

How does Splunk compare with Azure Monitor?

Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...

See all answers

Comparisons

Dynatrace vs ITRS Geneos

Compared 10% of the time

Splunk AppDynamics vs ITRS Geneos

Compared 8% of the time

Grafana vs ITRS Geneos

Compared 7% of the time

Nagios XI vs ITRS Geneos

Compared 5% of the time

Datadog vs ITRS Geneos

Compared 4% of the time

More ITRS Geneos Competitors

IBM Security QRadar vs Splunk Enterprise Security

Compared 9% of the time

Sentinel vs Splunk Enterprise Security

Compared 5% of the time

Wazuh vs Splunk Enterprise Security

Compared 4% of the time

Dynatrace vs Splunk Enterprise Security

Compared 3% of the time

Elastic Security vs Splunk Enterprise Security

Compared 3% of the time

More Splunk Enterprise Security Competitors

Product Reports

Buyer's Guide

ITRS Geneos

March 2026

Download ITRS Geneos product report

Buyer's Guide

Splunk Enterprise Security

February 2026

Download Splunk Enterprise Security product report

Also Known As

Geneos

No data available

Overview

ITRS Geneos is a real-time monitoring tool designed for managing increasingly complex, hybrid and interconnected IT estates.

Built with financial services and trading organisations in mind, it collects a wide range of data relating to server performance, infrastructure, trading, connectivity and applications, and analyses it to provide relevant information and alerts in real time.

Geneos can give full stack visibility across highly dynamic environments and presents all the information through a single pane of glass and its configurable and customisable dashboards provide end-to-end visibility to both technical and business users.

For more information, please visit https://www.itrsgroup.com/products/geneos

ITRS

Splunk Enterprise Security delivers powerful log management, rapid searches, and intuitive dashboards, enhancing real-time analytics and security measures. Its advanced machine learning and wide system compatibility streamline threat detection and incident response across diverse IT environments.

Splunk Enterprise Security stands out in security operations with robust features like comprehensive threat intelligence and seamless data integration. Its real-time analytics and customizable queries enable proactive threat analysis and efficient incident response. Integration with multiple third-party feeds allows detailed threat correlation and streamlined data visualization. Users find the intuitive UI and broad compatibility support efficient threat detection while reducing false positives. Despite its strengths, areas such as visualization capabilities and integration processes with cloud environments need enhancement. Users face a high learning curve, and improvements in automation, AI, documentation, and training are desired to maximize its potential.

What Are the Key Features of Splunk Enterprise Security?

Log Management: Efficiently manages and organizes a vast amount of logs for better data handling.
Rapid Data Search: Quickly retrieves relevant data for fast decision-making.
Flexible Dashboards: Customizable dashboards provide clear data visualization.
Comprehensive Threat Intelligence: Offers detailed insights to preemptively defend against threats.
Real-Time Analytics: Analyzes data in real-time to enhance response times.
Integration with Third-Party Feeds: Streamlines information flow from multiple sources.

What Benefits Should Users Investigate in Reviews?

Efficient Incident Response: Enhances the ability to respond promptly to threats.
False Positive Reduction: Minimizes incorrect threat alarms, making monitoring more efficient.
Threat Detection Speed: Accelerates the identification and evaluation of security threats.
Cost-Effectiveness: Potential savings through better licensing options and operational efficiency.
User Adaptability: Enhancements in documentation and training resources aid in overcoming the learning curve.

In specific industries like finance and healthcare, Splunk Enterprise Security is instrumental for log aggregation, SIEM functionalities, and compliance monitoring. Companies leverage its capabilities for proactive threat analysis and response, ensuring comprehensive security monitoring and integration with various tools for heightened operational intelligence.

Splunk

Sample Customers

ITRS Geneos is used by over 170 financial institutions, including JPMorgan, HSBC, RBS, Deutsche Bank and Goldman Sachs. Clients range from investment banks to exchanges and brokers.

Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.

Buyer's Guide

ITRS Geneos vs. Splunk Enterprise Security

May 2023

Free Report: ITRS Geneos vs. Splunk Enterprise Security

Find out what your peers are saying about ITRS Geneos vs. Splunk Enterprise Security and other solutions. Updated: May 2023.

DOWNLOAD NOW

884,797 professionals have used our research since 2012.

See our ITRS Geneos vs. Splunk Enterprise Security report.

We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.