Try our new research platform with insights from 80,000+ expert users

SolarWinds Server and Application Monitor vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SolarWinds Server and Appli...
Average Rating
8.0
Reviews Sentiment
4.5
Number of Reviews
44
Ranking in other categories
Application Performance Monitoring (APM) and Observability (22nd), Server Monitoring (8th), Active Directory Management (9th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
380
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. SolarWinds Server and Application Monitor is designed for Server Monitoring and holds a mindshare of 3.3%, up 2.5% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.2% mindshare, down 9.8% since last year.
Server Monitoring Mindshare Distribution
ProductMindshare (%)
SolarWinds Server and Application Monitor3.3%
Zabbix13.4%
Checkmk6.6%
Other76.7%
Server Monitoring
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security7.2%
Wazuh5.8%
IBM Security QRadar5.3%
Other81.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilKalwint - PeerSpot reviewer
Technical Specialist at ServiceIO
Monitoring over a thousand systems has improved decision making and operational visibility
From an advantage perspective, SolarWinds Server and Application Monitor is comparatively cheaper from a commercial point of view. It is easy to install and configure, very user-friendly, and quick to get up and running, allowing you to see the early value adds in your organization. It is compatible with most technologies for monitoring with very few chances of incompatibility. Configuration also allows us to monitor all the technical parameters we are looking for, making it a very good experience for us. The alerting feature in SolarWinds Server and Application Monitor is a main advantage, as it alerts based on threshold breaches and can raise tickets to the ticketing system, send SMS, and email notifications, allowing engineers to work on those tickets to resolve issues and avoid further impact. The visibility into server health is a beneficial feature that I am utilizing. We widely use various application performance metrics in SolarWinds Server and Application Monitor such as database monitoring and server monitoring, which are quite good enough for any monitoring solution. We utilize the customizable dashboards in SolarWinds Server and Application Monitor.
reviewer1469784 - PeerSpot reviewer
Senior Manager at a financial services firm with 10,001+ employees
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Monitoring of processes and services is the most valuable feature. It is not necessarily just the server alone in terms of the CPU or the memory. We can go in-depth into services and processes."
"Features like monitoring and infrastructure dependency mapping are valuable to us."
"I am impressed with the tool's AppStack feature which mainly helps us in the identification process. This feature can give an overview of the fault and help us identify the issues for performance degradation. Instead of looking at multiple places, we can look at a single place to identify the issues."
"The initial setup was relatively easy, and we didn't have to install anything. All we had to do was put on the devices we wanted to monitor."
"This product can monitor application environments no matter where they reside and provides capabilities for deep insight into infrastructure."
"I adore the NTA module that provides deep details on ingress/egress traffic for any interface. With a few clicks, you can correlate who is accessing what and when, beside the bandwidth consuming applications/users."
"SolarWinds SAM has significantly improved our workflow by allowing us to develop a comprehensive knowledge base of known errors and automate responses to specific alerts."
"I'd rate technical support at eight out of ten. They are helpful and fast."
"The most valuable features in Splunk are the search function and the ability to run selected session reports. The session reports are important because I can use them to see what is going on in our environment weekly. Additionally, we can use the graph to see how often that particular event is happening."
"The features of Splunk Enterprise Security that I have found most valuable include the risk-based score and UBA/UEBA, user behavior analytics, or user and entity behavior analytics."
"Its alerting is most valuable. We have alerts set up in our environment for certain attacks, such as an SQL injection attempt. We have a front-facing server for the website. It is out there, and anybody can access it. When those SQL injection attempts come in, we are able to detect that with the alert."
"We primarily use it to correlate logs throughout the enterprise for both searching and use in investigations."
"Being able to aggregate detection and alerts from various sources is valuable. Like everyone else, we have a wide range of tools in our shop. We are able to stop at one spot and look at all the data. All the data is able to come through, and we can then jump from source to source or index to index. We can dig deep whenever we need to and get a good high-level understanding."
"Splunk Enterprise Security is a very useful application to collect all the logs and also to find out the problems."
"it can explain to management about what kind of traffic is visiting the network. It can also explain other traffic coming in and out, along with protecting against malware."
"Incident detection is the positive impact I have seen from Splunk Enterprise Security; it probably saved the company from financial losses because of the early detection of the incidents."
 

Cons

"Currently SolarWinds SAM offers AppInsight for modern versions of: IIS, Exchange, SQL Server. They have shown to be powerful and insightful tools. However, AppInsight needs to be offered for more applications: Citrix, SharePoint, AX, etc."
"In terms of the dashboards on offer, they should work to improve them. The types of dashboards that you get in terms of the graphs on offer aren't ideal right now."
"There is one feature that is a report writer. And they are currently trying to take it out from being a stand-alone application and integrating to the web. This doesn't give us the flexibility and it doesn't expand what we can get when it comes to reporting. So, putting it on the web is going to make it difficult to get some information. Leaving it where it is now will help us a lot."
"Mapping interactions between systems."
"They are complex to operate; users need to know what they want during setup."
"The setup was complex. We had local support to assist us."
"An additional feature that would improve this solution is the ability to complete root cause analysis."
"The tool’s report feature created issues for us. We needed to gain skills to use that feature. The tool’s customization is not easy since you have to reconfigure the whole system."
"There were only one or two issues related to the user account, but nothing major."
"While Splunk Enterprise Security offers valuable features, its cost is high and could be more competitive."
"The system can be intimidating, and sometimes the concepts conveyed in the documentation require adjustment."
"The security can be improved."
"I'm not as familiar as I should be to answer how Splunk Enterprise Security can be improved, however, one of the improvement points that Enterprise Security could offer is on-prem training."
"Splunk is more expensive than other solutions."
"The system can be intimidating, and sometimes the concepts conveyed in the documentation require adjustment."
"Could be more user friendly."
 

Pricing and Cost Advice

"The product is expensive."
"Its licensing is on a yearly basis. It is just the standard price, but it can vary depending on the current rate of the dollar."
"The product might cost you $30,000 USD to buy, but scaling this solution requires the purchase of additional polling engines at $20,000 USD each."
"When compared to other licensed models in the market, it stands out as one of the more cost-effective options."
"The licenses start from USD 3000.00 and go up to USD 20,000.00 for the year. It's a perpetual license. Nothing is free in SolarWinds, anything that you need is an additional cost."
"Understanding the counts of objects to monitor will determine the licensing need. In terms of pricing, it’s not cheap but it’s not expensive as larger vendors whose products don’t have all the features or integrations."
"The solution is overpriced in terms of application management."
"Pricing is inexpensive, starting at 2440 euros. For that, you get the ability to monitor a couple of nodes and one year of maintenance and support."
"The pricing seems good relative to the other vendors that we have had here. However, they need to find ways to be more flexible with the licensing and be able to deal with situations where we start generating more logs. Maybe having some controls in the Splunk interface to turn it off, so we don't have to change anything in our application."
"It is economical than other solutions."
"Price-wise, if you compare QRadar to Splunk for SIEM functionality then they are in the same range but when you integrate SOAR with these solutions, Splunk takes the lead and is more competitive."
"Pricing and licensing are quite high compared to other tools or SIEM tools, but the features justify it."
"While Splunk offers generous developer licenses and obtaining annual licenses is straightforward, the cost is a major consideration."
"The price of Splunk is reasonable."
"My customers have found the price of the solution to be high."
"The tool's licensing is good and we haven't received any complaints from the team handling it."
report
Use our free recommendation engine to learn which Server Monitoring solutions are best for your needs.
884,012 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Educational Organization
12%
Government
8%
Financial Services Firm
8%
Computer Software Company
7%
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise8
Large Enterprise21
By reviewers
Company SizeCount
Small Business112
Midsize Enterprise50
Large Enterprise266
 

Questions from the Community

What needs improvement with SolarWinds Server and Application Monitor?
There is definitely room for improvement besides simplifying its setup. As a non-technical person, I believe the dashboards could be improved. Everything we use appears on video walls, and we need ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

SolarWinds SAM
No data available
 

Overview

 

Sample Customers

Andr. L. Riis AS, NetSuite
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about SolarWinds Server and Application Monitor vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
884,012 professionals have used our research since 2012.