Try our new research platform with insights from 80,000+ expert users

SolarWinds Server and Application Monitor vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SolarWinds Server and Appli...
Average Rating
8.0
Reviews Sentiment
4.5
Number of Reviews
44
Ranking in other categories
Application Performance Monitoring (APM) and Observability (22nd), Server Monitoring (8th), Active Directory Management (9th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
375
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. SolarWinds Server and Application Monitor is designed for Server Monitoring and holds a mindshare of 3.2%, up 2.7% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.1% mindshare, down 9.8% since last year.
Server Monitoring Market Share Distribution
ProductMarket Share (%)
SolarWinds Server and Application Monitor3.2%
Zabbix15.2%
Checkmk7.3%
Other74.3%
Server Monitoring
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security7.1%
Wazuh6.4%
IBM Security QRadar5.4%
Other81.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilKalwint - PeerSpot reviewer
Technical Specialist at ServiceIO
Monitoring over a thousand systems has improved decision making and operational visibility
From an advantage perspective, SolarWinds Server and Application Monitor is comparatively cheaper from a commercial point of view. It is easy to install and configure, very user-friendly, and quick to get up and running, allowing you to see the early value adds in your organization. It is compatible with most technologies for monitoring with very few chances of incompatibility. Configuration also allows us to monitor all the technical parameters we are looking for, making it a very good experience for us. The alerting feature in SolarWinds Server and Application Monitor is a main advantage, as it alerts based on threshold breaches and can raise tickets to the ticketing system, send SMS, and email notifications, allowing engineers to work on those tickets to resolve issues and avoid further impact. The visibility into server health is a beneficial feature that I am utilizing. We widely use various application performance metrics in SolarWinds Server and Application Monitor such as database monitoring and server monitoring, which are quite good enough for any monitoring solution. We utilize the customizable dashboards in SolarWinds Server and Application Monitor.
reviewer1469784 - PeerSpot reviewer
Senior Manager at a financial services firm with 10,001+ employees
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product integrates with Remedy."
"I find it to be a strong product suite, particularly when you need a comprehensive monitoring tool."
"SolarWinds SAM has significantly improved our workflow by allowing us to develop a comprehensive knowledge base of known errors and automate responses to specific alerts."
"The most beneficial aspect of SolarWinds Server and Application Monitor is its ability to monitor at the application level."
"SSL Certificate Monitoring and Expiry Alerting"
"Features like monitoring and infrastructure dependency mapping are valuable to us."
"The component and cable monitoring are good. SolarWinds is more intuitive and user-friendly than AppDynamics. The AppDynamics console is more complex because it's a more feature-rich solution, so it's not easy for somebody to pick it up."
"The most valuable feature of the solution is its interface, which is used for monitoring."
"The solution has plenty of features that are good."
"Our clients use the solution to find any threats or vulnerabilities inside their environment."
"The features I find most valuable in Splunk Enterprise Security are Incident Review, Security Essentials, Asset and Identity Management, and Machine Learning Toolkit."
"The ability to quickly search logs, performance data, and other inputs has helped tremendously with troubleshooting."
"It's better than IBM, in my opinion, because it's an independent entity."
"The initial setup isn't overly complex."
"Splunk Enterprise Security offers two valuable features: the Common Information Model and arrangement modules."
"Its huge, versatile AppBase helped me to configure and bring data from different sources to a unified platform."
 

Cons

"Nodes in Azure are able to be monitored with the use of agents, but this does not apply to cloud service offerings that are not node based."
"There is one feature that is a report writer. And they are currently trying to take it out from being a stand-alone application and integrating to the web. This doesn't give us the flexibility and it doesn't expand what we can get when it comes to reporting. So, putting it on the web is going to make it difficult to get some information. Leaving it where it is now will help us a lot."
"They should incorporate more artificial intelligence. There should also be more predictive features."
"The product does not explain why a problem occurred."
"It needs time-based functions for monitoring. Some things need to be polled on a specific schedule or only during a specific window."
"One product area that could benefit from improvement is the synchronization of licensing periods across different modules"
"SolarWinds Server and Application Monitor could improve by having a cloud version. They have an observability platform but it still needs to be maintained by us."
"The product needs to reduce its price."
"On-premises scaling of the solution is a bit more limited than it is on the cloud."
"The area of concern revolves around the fact that Splunk is an expensive product."
"The case management area of the ES could be improved. The ability to move cases through various stages and states. The ability to close a case would be key improvement."
"The way Splunk Enterprise Security could improve is by pulling in and mapping my DHCP data and tracking users' IP addresses as it changes throughout sessions, and being able to keep track of who is actually assigned to what IP address more natively."
"The user access control could be much more granular, so that the admins can control r/w/x access for specific features of the product like dashboards, etc."
"I would like to get visibility into the data pipelines on heavy forwarders and indexers to see exactly their source and the cause of saturation when it occurs. This would help us learn even more about our high use applications."
"The default threat intel feeds create many false positives and noise, which is counterproductive."
"Its deployment is difficult. I remember when I first started learning, I faced several challenges, especially when deploying VMware in a virtual environment."
 

Pricing and Cost Advice

"We are on an annual license to use the solution. The price of the solution is expensive. The price is based on a bunch of factors, such as the number of engines and elements."
"The solution is overpriced in terms of application management."
"Price can always be lower. It is neither on the expensive side nor on the cheap side. We have worked with them for a lot of years, so we get a discount due to the size of the installation."
"I have always said SolarWinds is very “proud” of their products, meaning they are expensive. I cannot afford to purchase all the licenses I need for all the SolarWinds products."
"I would advise potential buyers to wait until the end of the quarter, end of year, or other time to place orders. There are actually great deals to be had at those times if your budget cycle can match up."
"When compared to other licensed models in the market, it stands out as one of the more cost-effective options."
"Pricing is inexpensive, starting at 2440 euros. For that, you get the ability to monitor a couple of nodes and one year of maintenance and support."
"The product is expensive."
"Splunk Enterprise Security is expensive."
"Splunk Enterprise Security is priced lower than competitors."
"While licensing can be a concern, there are ways to reduce the licensing costs including filtering some events."
"The variables and the flexibility that Splunk provides are helpful, especially in a hybrid and multi-cloud environment."
"It is quite expensive."
"I've heard Splunk is often preferred over other options, but the cost can be prohibitive for smaller organizations."
"Splunk Enterprise Security's pricing is competitive."
"Splunk is not free."
report
Use our free recommendation engine to learn which Server Monitoring solutions are best for your needs.
882,180 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Educational Organization
12%
Financial Services Firm
9%
Government
9%
Computer Software Company
7%
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise8
Large Enterprise21
By reviewers
Company SizeCount
Small Business109
Midsize Enterprise50
Large Enterprise264
 

Questions from the Community

What needs improvement with SolarWinds Server and Application Monitor?
There is definitely room for improvement besides simplifying its setup. As a non-technical person, I believe the dashboards could be improved. Everything we use appears on video walls, and we need ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

SolarWinds SAM
No data available
 

Overview

 

Sample Customers

Andr. L. Riis AS, NetSuite
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about SolarWinds Server and Application Monitor vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
882,180 professionals have used our research since 2012.