Try our new research platform with insights from 80,000+ expert users

SolarWinds Server and Application Monitor vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SolarWinds Server and Appli...
Average Rating
8.0
Reviews Sentiment
4.5
Number of Reviews
44
Ranking in other categories
Application Performance Monitoring (APM) and Observability (22nd), Server Monitoring (8th), Active Directory Management (9th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
375
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. SolarWinds Server and Application Monitor is designed for Server Monitoring and holds a mindshare of 3.2%, up 2.7% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.1% mindshare, down 9.8% since last year.
Server Monitoring Market Share Distribution
ProductMarket Share (%)
SolarWinds Server and Application Monitor3.2%
Zabbix15.2%
Checkmk7.3%
Other74.3%
Server Monitoring
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security7.1%
Wazuh6.4%
IBM Security QRadar5.4%
Other81.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilKalwint - PeerSpot reviewer
Technical Specialist at ServiceIO
Monitoring over a thousand systems has improved decision making and operational visibility
From an advantage perspective, SolarWinds Server and Application Monitor is comparatively cheaper from a commercial point of view. It is easy to install and configure, very user-friendly, and quick to get up and running, allowing you to see the early value adds in your organization. It is compatible with most technologies for monitoring with very few chances of incompatibility. Configuration also allows us to monitor all the technical parameters we are looking for, making it a very good experience for us. The alerting feature in SolarWinds Server and Application Monitor is a main advantage, as it alerts based on threshold breaches and can raise tickets to the ticketing system, send SMS, and email notifications, allowing engineers to work on those tickets to resolve issues and avoid further impact. The visibility into server health is a beneficial feature that I am utilizing. We widely use various application performance metrics in SolarWinds Server and Application Monitor such as database monitoring and server monitoring, which are quite good enough for any monitoring solution. We utilize the customizable dashboards in SolarWinds Server and Application Monitor.
reviewer1469784 - PeerSpot reviewer
Senior Manager at a financial services firm with 10,001+ employees
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"This product can monitor application environments no matter where they reside and provides capabilities for deep insight into infrastructure."
"We manage SolarWinds ourselves without outsourcing its services."
"SolarWinds SAM has provided us with dynamic thresholds based on historical trends and requirements. The threshold gets configured automatically, so it's no longer necessary to configure it manually every time."
"It's good at monitoring system-specific things like ports, services."
"It is simple to implement and can provide fairly decent Windows-based monitoring, beyond simple SNMP. It is great for monitoring newbies and smaller shops."
"I am impressed with the tool's AppStack feature which mainly helps us in the identification process. This feature can give an overview of the fault and help us identify the issues for performance degradation. Instead of looking at multiple places, we can look at a single place to identify the issues."
"I'd rate technical support at eight out of ten. They are helpful and fast."
"The more valuable feature of this solution is the Exchange feature."
"The features I find most valuable in Splunk Enterprise Security are Incident Review, Security Essentials, Asset and Identity Management, and Machine Learning Toolkit."
"It helps streamline troubleshooting and log analysis."
"Splunk would be my choice for the presentation layer because it comes with inbuilt reports and a dashboard that you can customize."
"The features of Splunk Enterprise Security that I have found most valuable include the risk-based score and UBA/UEBA, user behavior analytics, or user and entity behavior analytics."
"Low barrier to start searching with the ability to normalize data on the fly."
"The most valuable feature of Splunk Enterprise Security is the comprehensive logging capabilities it provides."
"Our clients are easily able to modify and evolve their implementations."
"We have created a few custom use cases for Splunk that have helped us detect threats faster. For example, we set up endpoint-related data models and specialized setups for various scenarios. It's more efficient than some other products I've used."
 

Cons

"The tool's AppStack needs to improve in the storage monitoring part. It should also include an analytics and recommendation approach. If I have found a fault in a server or application, I would like to know what caused it and how do I recover from it."
"An additional feature that would improve this solution is the ability to complete root cause analysis."
"I believe that some of the trends, environmental maps, and items like those found in Orion would be very beneficial."
"When you implement SolarWinds on a larger scale my customers complain about the speed."
"One area that could benefit from improvement is its performance"
"They are complex to operate; users need to know what they want during setup."
"The stability, flexibility, and ease of use could be improved."
"Downside of the tools is the web console are hung or crash. It need to improve the performance."
"​Not even Splunk's support guy, who came to our firm, could help with defining proper role management.​"
"The biggest thing with Splunk is making sure that the documentation is maintained."
"An area of improvement would be the licensing of the solution. They need a free license, which would allow faster lead times."
"I would like some additional AI capabilities to provide additional information about things going wrong and things going well."
"I do not have any pain points for Splunk Enterprise Security. I am still trying to learn it, but there can be more information on the education side for Splunk Enterprise Security. It would be nice if the certification path was more specific to what I use instead of being so broad."
"Splunk could improve its default machine-learning models. Also, Splunk Enterprise's native threat intelligence isn't that good. I prefer a custom threat intelligence model."
"A lot of people are averse to using new tools so if they make it even more user-friendly than it already is, I think that could go a long way."
"The level of scalability depends on the license you have. You can expand or reduce it based on the environment. It does cost more money to scale, however."
 

Pricing and Cost Advice

"I would rate the pricing for this solution a three out of five."
"I think SolarWinds' pricing is very decent compared to other competitors in the market."
"I have always said SolarWinds is very “proud” of their products, meaning they are expensive. I cannot afford to purchase all the licenses I need for all the SolarWinds products."
"We pay around $ 2,000 to $ 5,000 yearly for the solution."
"The product is expensive."
"The solution's price is reasonable. Though it's on the higher side, the tool is worth the money."
"I would advise potential buyers to wait until the end of the quarter, end of year, or other time to place orders. There are actually great deals to be had at those times if your budget cycle can match up."
"When compared to other licensed models in the market, it stands out as one of the more cost-effective options."
"While some clients find the cost of Splunk Enterprise Security to be on the higher end, its pricing is comparable to other SIEM solutions."
"This product could use better pricing in general."
"In terms of pricing, I believe Splunk is unreasonably costly for the majority of mid and small-sized companies."
"My customers have found the price of the solution to be high."
"The pricing is very complicated, and it is very pricey. You do require a lot of different licenses in order to get a comprehensive solution that is not just the SIEM solution."
"There is an annual license required to use this solution."
"The pricing is a little bit on the higher side, but looking at what Splunk provides us, it is reasonable."
"I am not personally involved with the pricing of the solution."
report
Use our free recommendation engine to learn which Server Monitoring solutions are best for your needs.
882,032 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Educational Organization
11%
Financial Services Firm
9%
Government
9%
Computer Software Company
7%
Financial Services Firm
13%
Computer Software Company
10%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise8
Large Enterprise21
By reviewers
Company SizeCount
Small Business109
Midsize Enterprise50
Large Enterprise264
 

Questions from the Community

What needs improvement with SolarWinds Server and Application Monitor?
There is definitely room for improvement besides simplifying its setup. As a non-technical person, I believe the dashboards could be improved. Everything we use appears on video walls, and we need ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

SolarWinds SAM
No data available
 

Overview

 

Sample Customers

Andr. L. Riis AS, NetSuite
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about SolarWinds Server and Application Monitor vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
882,032 professionals have used our research since 2012.