ITRS Geneos vs Splunk Enterprise Security comparison

The compared ITRS and Splunk solutions aren't in the same category. ITRS is ranked #35 in APM , with an average rating of 5.0, and holds a 1.0% mindshare in the category. Splunk is ranked #1 in SIEM , with an average rating of 8.3, and holds a 7.1% mindshare. Additionally, 96% of ITRS users are willing to recommend the solution, compared to 94% of Splunk users who would recommend it.

ITRS Geneos

Read 57 ITRS Geneos reviews

4,591 Views
2,892 Comparison Views

96% willing to recommend

Splunk Enterprise Security

Read 378 Splunk Enterprise Security reviews

26,439 Views
13,748 Comparison Views

94% willing to recommend

ITRS Geneos

Splunk Enterprise Security

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between ITRS Geneos and Splunk Enterprise Security based on real PeerSpot user reviews.

Find out in this report how the two Application Performance Monitoring (APM) and Observability solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed ITRS Geneos vs. Splunk Enterprise Security Report (Updated: May 2023).

Buyer's Guide

ITRS Geneos vs. Splunk Enterprise Security

May 2023

Download the complete report

Helped 882,594 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ITRS Geneos

Average Rating

8.2

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (35th), Network Monitoring Software (64th), IT Infrastructure Monitoring (44th)

Splunk Enterprise Security

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

378

Ranking in other categories

Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. ITRS Geneos is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 1.0%, down 1.3% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.1% mindshare, down 9.8% since last year.

Application Performance Monitoring (APM) and Observability Market Share Distribution
Product	Market Share (%)
ITRS Geneos	1.0%
Dynatrace	6.3%
Datadog	5.3%
Other	87.4%

Application Performance Monitoring (APM) and Observability

Security Information and Event Management (SIEM) Market Share Distribution
Product	Market Share (%)
Splunk Enterprise Security	7.1%
Wazuh	6.4%
IBM Security QRadar	5.4%
Other	81.1%

Security Information and Event Management (SIEM)

Featured Reviews

DeepakR

Site Reliability Engineer(Observability) at Sapiens

If one server fails, the agent will automatically be reinstalled

ITRS Geneos is a legacy system. It predicts or provides proactive measures once an issue is resolved. It doesn't offer any predictive capabilities or root cause analysis. They throw a lot of data if there's a 90% error. You need to check which process is consuming more CPU and determine the root cause for yourself. You need to troubleshoot it manually. This legacy system could introduce predictive analysis and root cause identification. They are reluctant to switch to newer solutions, which may require writing queries to fetch data. Manually logging into servers, checking CPU usage, identifying processes, and determining root causes is time-consuming. Once the root cause is identified, the issue can be resolved efficiently. The manual troubleshooting process is time-consuming. The content is not openly available in the market. If you search for it somewhere, it is not readily accessible. If you want to try it out, no trial version is available. Therefore, it will be challenging to learn. Loading ITRS is difficult, as you need to purchase it first. Secondly, only a few people are knowledgeable about ITRS in the market, making it challenging to find resources. Thirdly, the documentation must be well-documented, making finding content or training material hard. The UI also needs to be updated, which adds to the difficulty.

Read full review

reviewer1469784

Senior Manager at a financial services firm with 10,001+ employees

Helps us detect cyber threats quickly and integrate multiple feeds effectively

Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The Netprobe is so lightweight compared to the agents that most monitoring tools use. It's really superior to the competition. The agent that is used by almost every competitive tool takes a lot more system resources. It's slower and it requires a greater effort and more compromises in terms of security to install on the monitored servers. With Geneos, because it lives outside the code, it is far easier and far less taxing on the monitored systems."

"The clean and colorful UI and easy to use options like snooze and active times."

"I would say that it is an easy-to-use monitoring tool. Amongst the available monitoring tools, it is a really good option."

"The flexibility of the product is most valuable. It is highly customizable. If you put your mind to it and think of something you could do, there's a good possibility you can get it integrated within the console, if it's not readily available. The simplicity or ease of customization has been valuable."

"The ability to completely tailor and customize what it's monitoring is one of its strongest points. A lot of other monitoring tools are good at certain things, but one of my colleagues described it as the “Swiss Army Knife” of monitoring tools. It can do anything you want."

"Real-time log monitoring with desktop alerts is valuable as it tells us immediately when there is an issue."

"The ability to build integrations to tools that are not monitored out of the box is the most valuable feature."

"One thing we're utilizing in Geneos is the Gateway-SQL. That's really helpful for us. Using Gateway-SQL, we are able to merge two different views into one. Suppose we have to check something in the log and that we have to check something in the database and do a comparison before publishing a result. We can achieve that using Gateway-SQL."

More ITRS Geneos pros

"Support is quick and competent."

"The flexibility of the search capability is most valuable. You can use it for more than just a basic log aggregator. It is powerful in that regard."

"Splunk is a user-friendly solution."

"Splunk RBA or risk-based alerting definitely made our lives a lot easier; we went from hundreds of alerts having to be triaged a day, that generally could be false positives or just noise, and bubble them into one overall alert that we can look at on a per-day basis and see what's rising to the top and respond faster, have a higher rate of true positives and find evil a lot quicker."

"Splunk Enterprise Security is doing its job in helping improve my organization's business resilience."

"The features I find most valuable in Splunk Enterprise Security are Incident Review, Security Essentials, Asset and Identity Management, and Machine Learning Toolkit."

"The dashboards are the most valuable feature. We like the ability to drill in and see what queries are under the dashboard, build new visualizations, edit the querying, and see the reports."

"The incident review in Splunk Enterprise Security seems to be the most helpful feature."

More Splunk Enterprise Security pros

Cons

"ITRS have started to make some major changes that we haven't taken on board yet, in the creation of dashboards and more visibility of the metrics that we collect. At the moment, that's something that's lacking, but I know they have addressed it. Still, it’s not that easy to create stuff to help with visibility and dashboarding in Geneos."

"I would like to see ITRS integrate its setup editor with a SVN to check-in setup XML after major changes."

"One thing that could be improved in terms of rapid scaling would be more ability to clone aspects of an implementation. It seems like there are opportunities in this area, where we have repetitive tasks to do when it comes to implementing things on new servers or on new gateways. It would be great if there was an easy way to clone something that had already been done."

"The dashboard feature is full of bugs. Grouping items results in a distorted dashboard."

"I would also like to see suggested guidelines to accomplish a monitoring task. The issue is that ITRS is so flexible that there is more than one way to complete a task, each with benefits and disadvantages."

"We all look at the same things - CPU, disk space, paging stats, service status with RAG status on each. That could be provided straight out, saving significant time."

"It needs to be easier to configure, especially with the JMX plugins."

"t needs to have better middleware integration for things such as application and Microsft SQL servers."

More ITRS Geneos cons

"I find the graphical options really limited and you don't have enough control over how to display the data that you want to see."

"It currently has limited default rules and customizations. If they can concentrate more on the compliance part and the security information part, it would be helpful. The platform part is good, but it requires many features from the security aspect."

"The user interface is the main area for improvement."

"The use cases provided by Splunk are a good starting point, but could cover many additional topics to ensure that a smaller or less experienced shop might maximize the value of an ES deployment."

"The solution's case management system could be further improved to make it easier for analysts to manage cases."

"I have not seen ROI with Splunk Enterprise Security."

"Most importantly, Splunk can be outrageously expensive. That is the problem with both Splunk and Sentinel. Their pricing literally explodes based on the amount of data you feed in."

"The upgrading process could be smoother."

More Splunk Enterprise Security cons

Pricing and Cost Advice

"When I first came in, their pricing was very high. ITRS had a high expectation of what their price should be based on perceived value. I think they have been realizing, more recently, that there are other competitors, so their pricing is a lot better. Licensing for on-premise is okay, however I feel there is quite some work to be done for cloud and containers. We're still working with them to try and work out what that pricing should look like."

"You will get the best price if you get a single global deal."

"The market tools are on par with this solution, but if the solution included more features, then it would be well within the range for the cost."

"The organization is not just purchasing a license for the product, but also managing services and professional services from ITRS. Another factor is if the implementation is going to be in production, non-production, or both."

"The pricing is fairly market-related. They have been very lenient because we have been working with them for so long. An example is that we're currently migrating some of our services to AWS, and they've given us a grace period for some of the things to help with the migration and not to grow additional costs while we are migrating, but it's still on par with the market."

"Its price is reasonable. It isn't too expensive, and it isn't too cheap, but it also depends on a company's volume and negotiation."

"The pricing seems reasonable. We're happy enough with it."

"The licensing cost may seem expensive upfront. However, the service is outstanding, the tool does things that no other tools can do, and the customizability more than makes up for the cost of licensing."

More ITRS Geneos pricing and cost advice

"Our customers often complain that the price of Splunk is too high."

"The tool's licensing is good and we haven't received any complaints from the team handling it."

"Splunk has always been on the expensive side."

"Pricing and licensing is quite expensive. But for the value the product provides, it seems at par in the market."

"I've heard Splunk is often preferred over other options, but the cost can be prohibitive for smaller organizations."

"The pricing is very complicated, and it is very pricey. You do require a lot of different licenses in order to get a comprehensive solution that is not just the SIEM solution."

"I would highly recommend anyone evaluating this option to download the free trial which allows for the ingestion of 500MB of data per day in order to get a feel for what Splunk does at its core. It will get pricey once your ingestion rates start to sky rocket, but I would consider it expensive given the amount of information that it allows you to analyze and react on straight out-of-the-box."

"It is not cheap."

More Splunk Enterprise Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.

See recommendations

882,594 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees

Feb 26, 2015

HP ArcSight vs. IBM QRadar vs. McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm

We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

69%

Computer Software Company

Construction Company

Outsourcing Company

Financial Services Firm

12%

Computer Software Company

10%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	12
Large Enterprise	39

By reviewers
Company Size	Count
Small Business	110
Midsize Enterprise	50
Large Enterprise	266

Questions from the Community

What is your experience regarding pricing and costs for ITRS Geneos?

The pricing is high. Licensing fees might be around 500$ per server monthly.

See all answers

What needs improvement with ITRS Geneos?

See all answers

What is your primary use case for ITRS Geneos?

ITRS offers multiple products, including upgrades for synthetic monitoring and a SaaS platform. Geneos is used for infrastructure monitoring, covering KPIs such as CPU, memory, processes, network l...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What is a better choice, Splunk or Azure Sentinel?

It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...

See all answers

How does Splunk compare with Azure Monitor?

Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...

See all answers

Comparisons

Dynatrace vs ITRS Geneos

Compared 13% of the time

Splunk AppDynamics vs ITRS Geneos

Compared 7% of the time

Grafana vs ITRS Geneos

Compared 7% of the time

Prometheus-AI Platform vs ITRS Geneos

Compared 5% of the time

Datadog vs ITRS Geneos

Compared 5% of the time

More ITRS Geneos Competitors

IBM Security QRadar vs Splunk Enterprise Security

Compared 10% of the time

Wazuh vs Splunk Enterprise Security

Compared 5% of the time

Sentinel vs Splunk Enterprise Security

Compared 5% of the time

Dynatrace vs Splunk Enterprise Security

Compared 4% of the time

Elastic Security vs Splunk Enterprise Security

Compared 3% of the time

More Splunk Enterprise Security Competitors

Product Reports

Buyer's Guide

ITRS Geneos

February 2026

Download ITRS Geneos product report

Buyer's Guide

Splunk Enterprise Security

January 2026

Download Splunk Enterprise Security product report

Also Known As

Geneos

No data available

Overview

ITRS Geneos is a real-time monitoring tool designed for managing increasingly complex, hybrid and interconnected IT estates.

Built with financial services and trading organisations in mind, it collects a wide range of data relating to server performance, infrastructure, trading, connectivity and applications, and analyses it to provide relevant information and alerts in real time.

Geneos can give full stack visibility across highly dynamic environments and presents all the information through a single pane of glass and its configurable and customisable dashboards provide end-to-end visibility to both technical and business users.

For more information, please visit https://www.itrsgroup.com/products/geneos

ITRS

Splunk Enterprise Security delivers powerful log management, rapid searches, and intuitive dashboards, enhancing real-time analytics and security measures. Its advanced machine learning and wide system compatibility streamline threat detection and incident response across diverse IT environments.

Splunk Enterprise Security stands out in security operations with robust features like comprehensive threat intelligence and seamless data integration. Its real-time analytics and customizable queries enable proactive threat analysis and efficient incident response. Integration with multiple third-party feeds allows detailed threat correlation and streamlined data visualization. Users find the intuitive UI and broad compatibility support efficient threat detection while reducing false positives. Despite its strengths, areas such as visualization capabilities and integration processes with cloud environments need enhancement. Users face a high learning curve, and improvements in automation, AI, documentation, and training are desired to maximize its potential.

What Are the Key Features of Splunk Enterprise Security?

Log Management: Efficiently manages and organizes a vast amount of logs for better data handling.
Rapid Data Search: Quickly retrieves relevant data for fast decision-making.
Flexible Dashboards: Customizable dashboards provide clear data visualization.
Comprehensive Threat Intelligence: Offers detailed insights to preemptively defend against threats.
Real-Time Analytics: Analyzes data in real-time to enhance response times.
Integration with Third-Party Feeds: Streamlines information flow from multiple sources.

What Benefits Should Users Investigate in Reviews?

Efficient Incident Response: Enhances the ability to respond promptly to threats.
False Positive Reduction: Minimizes incorrect threat alarms, making monitoring more efficient.
Threat Detection Speed: Accelerates the identification and evaluation of security threats.
Cost-Effectiveness: Potential savings through better licensing options and operational efficiency.
User Adaptability: Enhancements in documentation and training resources aid in overcoming the learning curve.

In specific industries like finance and healthcare, Splunk Enterprise Security is instrumental for log aggregation, SIEM functionalities, and compliance monitoring. Companies leverage its capabilities for proactive threat analysis and response, ensuring comprehensive security monitoring and integration with various tools for heightened operational intelligence.

Splunk

Sample Customers

ITRS Geneos is used by over 170 financial institutions, including JPMorgan, HSBC, RBS, Deutsche Bank and Goldman Sachs. Clients range from investment banks to exchanges and brokers.

Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.

Buyer's Guide

ITRS Geneos vs. Splunk Enterprise Security

May 2023

Free Report: ITRS Geneos vs. Splunk Enterprise Security

Find out what your peers are saying about ITRS Geneos vs. Splunk Enterprise Security and other solutions. Updated: May 2023.

DOWNLOAD NOW

882,594 professionals have used our research since 2012.

See our ITRS Geneos vs. Splunk Enterprise Security report.

We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.