Try our new research platform with insights from 80,000+ expert users

Power Admin PA File Sight vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 29, 2024
 

Categories and Ranking

Power Admin PA File Sight
Ranking in Log Management
40th
Average Rating
9.0
Reviews Sentiment
6.6
Number of Reviews
1
Ranking in other categories
No ranking in other categories
Splunk Enterprise Security
Ranking in Log Management
1st
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
301
Ranking in other categories
Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

As of December 2024, in the Log Management category, the mindshare of Power Admin PA File Sight is 0.0%, down from 0.1% compared to the previous year. The mindshare of Splunk Enterprise Security is 9.0%, down from 13.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

AntoSebastin - PeerSpot reviewer
Good stability and preferred choice for DLP needs over other solutions
The customers who have the use case of monitoring the file server and want to know the user's activity. It's the Power Admin's requirement, actually. Power Admin has been recommended, plus Power Admin has some quick features in place of DLP features, actually I work with two solutions. Both…
Avinash Gopu. - PeerSpot reviewer
Offers good visibility into multiple environments, significantly reduces our alert volume, and speeds up our security investigations
There are limitations with Splunk not detecting all user activity, especially on mainframes and network devices. This is because Splunk relies on agents, which cannot access certain workstations. In these cases, we have to rely on application data. For example, with mainframes, manual reports are generated and sent to Splunk, limiting visibility to what's manually reported. This lack of automation for specific platforms needs improvement from Splunk. Additionally, API access is limited for other applications that rely on API calls and requests. This requires heavy customization on Splunk's end. These are the main challenges we've encountered. Monitoring multiple cloud platforms, like Azure, GCP, and AWS, with Splunk Enterprise Security presents some challenges. While Splunk provides different connectors for each provider, consolidating data from two domains across distinct cloud environments can be complex. However, leveraging pre-built templates and Splunk's data collation capabilities can help overcome these hurdles. Despite initial difficulties, I believe Splunk can effectively address this task, earning it an eight out of ten rating for its multi-cloud monitoring capabilities. While Splunk Enterprise Security offers insider threat detection capabilities, its effectiveness could be enhanced by integrating with additional tools, such as endpoint security solutions. This integrated approach is particularly crucial for financial institutions, which often require dedicated endpoint security teams. While using multiple tools is valuable, further improvements within Splunk itself are also necessary. Considering both external integration and internal development, I would rate its current insider threat detection capabilities as three out of ten. Threat detection is where Splunk falls behind. While it offers tools, other use cases require additional work. PAM is an enterprise tool that centralizes information about users, servers, and everything else. It needs real-time monitoring, which I haven't seen in any of the companies I've worked for. They only rely on Splunk for alerting, but real-time monitoring should be handled by the endpoint security team's tools. This means there's no detection or analysis at the machine or endpoint level. Additionally, threat analysis reporting is also absent.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The customers who have the use case of monitoring the file server and want to know the user's activity. It's the Power Admin's requirement."
"I have also been able to take advantage of some of the more complex statistical capabilities when analyzing logs."
"It has the ability to correlate data, analyze and review it."
"The most valuable features of Splunk Enterprise Security are the enterprise search bar and the dashboards."
"The solution's most valuable feature is threat intelligence correlations."
"Visualizations are the best way to understand deviation techniques from the norm."
"Alerts when a server is malfunctioning, monitors external attacks, and takes action to stop spreading viruses."
"Splunk has machine learning which is a valuable feature."
"If properly built, I'm very impressed with the stability of Splunk ES."
 

Cons

"The setup takes half an hour. It will be a little complex."
"The support that is included with the standard licensing fee is very bad."
"I love the solution, but I would like to see more accessibility to the machine-learning capabilities that are sprinkled around Splunk."
"Most of my interaction is with the user community, which is how Splunk wants it. When I need help, that community is very hit or miss."
"I would like some additional AI capabilities to provide additional information about things going wrong and things going well."
"We were inundated with the amount of alerts and alarms that we could get out of it. It is also a resource hog and we didn't have the resources to support it on-prem so we're taking it offline now."
"Configuring a few apps is complex, not straightforward."
"The use cases provided by Splunk are a good starting point, but could cover many additional topics to ensure that a smaller or less experienced shop might maximize the value of an ES deployment."
"The main issue that I have with it is that the field transformations sometimes overlap with those in Splunk Enterprise, and then you get permissions issues that lead to troubles."
 

Pricing and Cost Advice

Information not available
"The pricing model is based on the number of gigabytes that you ingest into the Splunk system. So it can be an expensive solution."
"Splunk can be an expensive solution. It all depends on how we configure the alerts and the events from the endpoints. You can save some money if you do that correctly. If not, it becomes an expensive solution."
"I believe that Splunk Enterprise Security is worth the price, but it is expensive."
"I think the price could be improved."
"Pricing can be a limiting factor. You have to continuously tune what you are bringing in and make sure what you bring in is of value."
"The solution is costly."
"It is economical than other solutions."
"We have seen ROI and improvements as we have continued to use the product, but they are more reactive."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
823,875 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
16%
Computer Software Company
14%
Government
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Power Admin PA File Sight?
The customers who have the use case of monitoring the file server and want to know the user's activity. It's the Power Admin's requirement.
What is your experience regarding pricing and costs for Power Admin PA File Sight?
It will be costly. Actually, it will be more expensive compared to the other solutions. I would rate the pricing a two out of ten, with one being expensive and ten being cheap. The licensing model ...
What needs improvement with Power Admin PA File Sight?
There is room for improvement in terms of the pricing model.
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

PA File Sight
No data available
 

Overview

 

Sample Customers

Bartling IT, Symantec, Pohlmann & Dimai GbR, 3M, L4U Library Software, Global Collect, On-Site Computer Solutions, Astra Tech Inc, TechProse, SysKon, Maine Medical Center, Presbyterian Foundation, Infineum, DDT
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Splunk, Wazuh, Datadog and others in Log Management. Updated: December 2024.
823,875 professionals have used our research since 2012.