Try our new research platform with insights from 80,000+ expert users

OpenText SiteScope vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

OpenText SiteScope
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
28
Ranking in other categories
Application Performance Monitoring (APM) and Observability (18th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
318
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. OpenText SiteScope is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 0.6%, up 0.4% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 9.4% mindshare, down 12.1% since last year.
Application Performance Monitoring (APM) and Observability
Security Information and Event Management (SIEM)
 

Featured Reviews

Gyanesh Rahatekar - PeerSpot reviewer
Achieve seamless incident response with valuable monitoring capabilities and reliable alerts
There are multiple features related to OpenText SiteScope monitoring that I have found to be very useful, such as SSL monitoring. If SSL is present as a file in a server, then OpenText SiteScope is a very effective tool to monitor when that certificate expires. It provides comprehensive information related to SSL certificates and log monitoring. If any kind of required keyword monitoring is present in the log file, OpenText SiteScope has excellent functionality for monitoring. It is very easy to configure and obtain the correct information related to end-user requirements. The agentless monitoring feature of OpenText SiteScope is particularly impressive and easy to configure and gather information from. According to the operations team perspective, there is no impact related to resource management from the agentless monitoring. It demonstrates very low resource consumption related to its functionality.
ROBERT-CHRISTIAN - PeerSpot reviewer
Has many predefined correlation rules and is brilliant for investigation and log analysis
It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I would rate the stability of OpenText SiteScope as excellent."
"Being able to create your monitors for monitoring your internal URLs and databases and other things like that is valuable."
"The stability of the Micro Focus Voltage SiteScope is good."
"For the system environment, SiteScope can be useful."
"I find OpenText SiteScope itself to be uncomplicated and deserving of a ten out of ten due to its simplicity."
"The most valuable feature of SiteScope is its infrastructure monitoring."
"VM monitoring is pretty good showing good visualizations of how VMs are operating within the context of all the VMs running on the same hypervisor."
"The Monitor Templates functionality allowed us to spin up monitoring with .csv files pretty easily."
"Splunk Enterprise Security is able to process a huge amount of data without any issues."
"The ability to quickly search logs, performance data, and other inputs has helped tremendously with troubleshooting."
"It's better than IBM, in my opinion, because it's an independent entity."
"The solution's most valuable feature is the aggregation of all the logs in one place, using enterprise securities built-in or ESCU use cases to find them."
"The solution's most valuable feature is its data modeling."
"The data representation options in the dashboards are excellent."
"The product is adept at log mining."
"It gives us good visibility into multiple environments, including cloud, on-premises, and hybrid; irrespective of platform."
 

Cons

"I would be very interested in having transaction traceability included in the product, to give us a better view of what is really going wrong in a particular method and action."
"The interface of OpenText SiteScope needs improvement. It has a Java-based interface, which is slow and could be simplified for better usability."
"While working with OpenText, I noticed sometimes teams refuse intervention due to compliance issues."
"We have four or five data centers around North America where we have it deployed into a single or a two-server primary backup type of deployment. All those are made available under a single GUI provided by Micro Focus that allows you to put them all together. A room for improvement would be an appliance or a server that would manage all of our other servers so that I don't have to remember to log on to all different servers and data centers. I could manage them from a single location."
"Full application functionality available via the API. There are some functions you can perform managing monitors, that are only available through the UI."
"They should provide more templates for new vendor devices."
"You can use OpenText SiteScope for small or middle environments. But if you want to monitor a large environment, it is not scalable. If you can monitor a large environment with OpenText SiteScope, it can be a valuable product."
"Direct integration with an SMS gateway for sending critical alerts to the support SME. This will help customer investing in third party middleware solutions for SMS."
"There is improvement needed when importing from some types of data sources."
"In the next releases, I would like to see more pricing flexibility."
"While scheduled reports can be embedded, Splunk dashboard can not be embedded directly without enabling cross origin."
"One issue is that we are getting a lot of false positives. We are trying to reduce them by customizing the default rules, changing thresholds, and using white-listing and black-listing. It's getting better and better as a result. But they need to build components that would reduce the false positives."
"Splunk Enterprise Security offers a vast amount of information to learn and comprehend, resulting in a challenging initial learning curve."
"Our two main complaints are about the difficulty of the initial setup and the licensing model."
"I haven't found a way for me to create my own plugins and integrate them into Splunk, but this isn't necessarily a limitation; it could simply be a lack of knowledge on my part."
"The CIM model is the method Splunk uses to normalize data and categorize its important parts, but it is quite complex."
 

Pricing and Cost Advice

"When Micro Focus Voltage SiteScope has introduced approximately eight years ago and there was not very much competition making the price high. However, when comparing the price of Micro Focus Voltage SiteScope now to other tools, they should reduce the price. It is similar to a legacy tool at this point."
"The pricing or licensing cost for Micro Focus SiteScope is often bundled with other things, so the cost for each individual would be difficult to calculate. Pricing could be $2,000,000 a year. My company pays for technical support because it's part of the contract with Micro Focus SiteScope. You buy the licenses, but you're also paying for the support. With Nagios, it's much more bare-bones as far as paying for licenses and the software itself, and my company didn't have to use as much Nagios support yet in one or two years because there weren't too many problems using Nagios, and it's much more cost-effective, so that's one of the reasons why my company is migrating to Nagios from Micro Focus SiteScope."
"You have to pay for their "solution templates". Other tools do not charge you for knowledge-based monitoring bundles."
"SiteScope licensing can be node based-or monitor-based. I would recommend for node-based licensing."
"It is expensive. I don't like its licensing. I don't like anything where you have to license it by individual licenses. I'm not a fan of that, but that's just me."
"Depending on your requirements, there are two licensing models available. A simple point model, or an endpoint model."
"Licensing is a little steep."
"The product's pricing should be lower since there are many open-source products that can do the same job with better user interfaces. The tool's pricing is yearly and you need to pay for support."
"Be upfront about your needs and expectations. Splunk is great to work with."
"Regarding the product's pricing, I think it has always been difficult to have a conversation with Splunk."
"Splunk Enterprise becomes extremely expensive after the 20GB/month license."
"The tool's pricing model is great. You can choose between workloads or volume."
"I believe that Splunk Enterprise Security is worth the price, but it is expensive."
"I've heard Splunk is often preferred over other options, but the cost can be prohibitive for smaller organizations."
"The pricing of Splunk Enterprise Security is somewhat high, but comparing it with its benefits, it's acceptable. It depends on the type of business."
"The price of Splunk Enterprise Security fluctuates based on the customer, but I believe it's quite costly, especially for our clientele."
report
Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.
861,524 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
32%
Manufacturing Company
13%
Computer Software Company
11%
Government
5%
Financial Services Firm
14%
Computer Software Company
14%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Micro Focus Voltage SiteScope?
The most valuable feature of SiteScope is its infrastructure monitoring.
What is your experience regarding pricing and costs for Micro Focus Voltage SiteScope?
The licensing scheme for Micro Focus tools is reasonable, and more affordable. It's seen as medium or de-receivable.
What needs improvement with Micro Focus Voltage SiteScope?
Integration related to other applications with OpenText SiteScope is effective, as we are using both functionalities in our environment. The integration for other applications related to alerts and...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

Micro Focus SiteScope, HPE SiteScope, SiteScope
No data available
 

Overview

 

Sample Customers

Vodafone Ireland, Kuveyt Turk Participation Bank
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about OpenText SiteScope vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
861,524 professionals have used our research since 2012.