No more typing reviews! Try our Samantha, our new voice AI agent.

SolarWinds Server and Application Monitor vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SolarWinds Server and Appli...
Average Rating
8.0
Reviews Sentiment
4.5
Number of Reviews
44
Ranking in other categories
Application Performance Monitoring (APM) and Observability (17th), Server Monitoring (8th), Active Directory Management (8th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
387
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. SolarWinds Server and Application Monitor is designed for Server Monitoring and holds a mindshare of 3.0%, up 2.6% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.1% mindshare, down 9.2% since last year.
Server Monitoring Mindshare Distribution
ProductMindshare (%)
SolarWinds Server and Application Monitor3.0%
Zabbix10.7%
Nagios XI6.1%
Other80.2%
Server Monitoring
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security7.1%
IBM Security QRadar5.2%
Wazuh4.6%
Other83.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilKalwint - PeerSpot reviewer
Technical Specialist at ServiceIO
Monitoring over a thousand systems has improved decision making and operational visibility
From an advantage perspective, SolarWinds Server and Application Monitor is comparatively cheaper from a commercial point of view. It is easy to install and configure, very user-friendly, and quick to get up and running, allowing you to see the early value adds in your organization. It is compatible with most technologies for monitoring with very few chances of incompatibility. Configuration also allows us to monitor all the technical parameters we are looking for, making it a very good experience for us. The alerting feature in SolarWinds Server and Application Monitor is a main advantage, as it alerts based on threshold breaches and can raise tickets to the ticketing system, send SMS, and email notifications, allowing engineers to work on those tickets to resolve issues and avoid further impact. The visibility into server health is a beneficial feature that I am utilizing. We widely use various application performance metrics in SolarWinds Server and Application Monitor such as database monitoring and server monitoring, which are quite good enough for any monitoring solution. We utilize the customizable dashboards in SolarWinds Server and Application Monitor.
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Features like monitoring and infrastructure dependency mapping are valuable to us."
"The solution can be deployed quickly."
"It's good at monitoring system-specific things like ports, services."
"I'd rate technical support at eight out of ten. They are helpful and fast."
"Identifying the problem statement is easy."
"The initial setup was relatively easy, and we didn't have to install anything; all we had to do was put on the devices we wanted to monitor."
"SolarWinds SAM has significantly improved our workflow by allowing us to develop a comprehensive knowledge base of known errors and automate responses to specific alerts."
"Manage Groups: The capability to group appropriate devices gives better visibility of sites, categories, or critical regions. The same can be used to represent a dashboard for higher management."
"Splunk has significantly helped with aggregation and correlation of critical logs, and not having to grep on each individual server has made everyone more efficient."
"It has a low barrier to entry, but it is extremely extensible, allowing it to be tailored to highly specific use cases."
"The feature that I have found most valuable with Splunk is the ability to sift through a bunch of data very quickly."
"It follows MITRE ATT&CK and Cyber Kill Chain frameworks. There are certain notable events for which we can configure our security posture."
"Splunk provides a free version so you can test it before purchasing."
"It can log more logs than other solutions; it's a good way to troubleshoot problems."
"We can present to our management in real time the security of the batch management for the PCs, security regarding the network equipment, and we can send any logs from the cloud to Splunk so we can monitor them and present to the managers and customers, making it a very good solution for reporting and monitoring of any solution in the company."
"Splunk gives my clients the ability to bring multiple, disparate types of data together, then correlate and report on them."
 

Cons

"An additional feature that would improve this solution is the ability to complete root cause analysis."
"One product area that could benefit from improvement is the synchronization of licensing periods across different modules"
"Support for the IBM Mainframe is needed."
"The tool's AppStack needs to improve in the storage monitoring part. It should also include an analytics and recommendation approach. If I have found a fault in a server or application, I would like to know what caused it and how do I recover from it."
"SAM's software-defined network monitoring capability is also low and could be improved."
"In terms of the dashboards on offer, they should work to improve them."
"The tool’s report feature created issues for us. We needed to gain skills to use that feature. The tool’s customization is not easy since you have to reconfigure the whole system."
"They should incorporate more artificial intelligence. There should also be more predictive features."
"The integration with all our tool sets felt like we were reinventing the wheel, which was a pain point for us."
"Sometimes the communication with support happens with multiple staff. They should reduce the time to resolution."
"Splunk's implementation process for managing multiple indexes can be complex, especially when dealing with a large number of components."
"The correlation of events is the most significant challenge I face when using Splunk Enterprise Security for advanced threat detection."
"Our two main complaints are about the difficulty of the initial setup and the licensing model."
"I would definitely improve the risk-based alerts in Splunk Enterprise Security, helping SOC analysts to get to the drill-down searches."
"An area of improvement would be the licensing of the solution. They need a free license, which would allow faster lead times."
"Queries are not always as easy or straightforward as they might be, so it can be difficult to figure out what you need to look for."
 

Pricing and Cost Advice

"The product might cost you $30,000 USD to buy, but scaling this solution requires the purchase of additional polling engines at $20,000 USD each."
"We pay around $ 2,000 to $ 5,000 yearly for the solution."
"The solution's price is reasonable. Though it's on the higher side, the tool is worth the money."
"Price can always be lower. It is neither on the expensive side nor on the cheap side. We have worked with them for a lot of years, so we get a discount due to the size of the installation."
"Nagios XI, WhatsUpGold, Uptime Software, PRTG, Manage Engine, and SpiceWorks are the other tools that have lower pricing and licensing costs. However, they can't compete with SolarWinds when it comes to the features and functionality that SolarWinds can provide."
"The price is too high."
"Its licensing is on a yearly basis. It is just the standard price, but it can vary depending on the current rate of the dollar."
"When planning for the number of licenses to purchase, make sure you understand all of the elements within an application required to really understand performance well. In our case, we quickly came to the conclusion that an unlimited license for SAM was the way to go."
"Expensive compared to other options."
"From what I have seen so far, Splunk has multiple cost models. The one that we are using is pretty good when it comes to ingesting data into the environment. It has worked out pretty well."
"Splunk should be able to integrate with other product using the free version."
"Setup cost is cheap: It is free, it is user-friendly, and it is fast."
"The pricing model is based on the number of gigabytes that you ingest into the Splunk system. So it can be an expensive solution."
"The pricing of Splunk Enterprise Security is high."
"It can be expensive, especially the licensing costs. However, there is added value in what it can do, not just log aggregation."
"It is not cheap."
report
Use our free recommendation engine to learn which Server Monitoring solutions are best for your needs.
893,915 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Educational Organization
12%
Financial Services Firm
9%
Government
7%
Healthcare Company
7%
Financial Services Firm
14%
Manufacturing Company
9%
Computer Software Company
9%
Comms Service Provider
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise8
Large Enterprise21
By reviewers
Company SizeCount
Small Business118
Midsize Enterprise50
Large Enterprise270
 

Questions from the Community

What needs improvement with SolarWinds Server and Application Monitor?
There is definitely room for improvement besides simplifying its setup. As a non-technical person, I believe the dashboards could be improved. Everything we use appears on video walls, and we need ...
What is your primary use case for SolarWinds Server and Application Monitor?
I am doing research as we currently have both solutions, and I am looking to see if we need both or can manage with one. Currently, the outcome indicates that we need both. The focus point is diffe...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

SolarWinds SAM
No data available
 

Overview

 

Sample Customers

Andr. L. Riis AS, NetSuite
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about SolarWinds Server and Application Monitor vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
893,915 professionals have used our research since 2012.