Try our new research platform with insights from 80,000+ expert users

SolarWinds Server and Application Monitor vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SolarWinds Server and Appli...
Average Rating
8.0
Reviews Sentiment
4.5
Number of Reviews
44
Ranking in other categories
Application Performance Monitoring (APM) and Observability (22nd), Server Monitoring (8th), Active Directory Management (9th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
375
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. SolarWinds Server and Application Monitor is designed for Server Monitoring and holds a mindshare of 3.2%, up 2.7% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.1% mindshare, down 9.8% since last year.
Server Monitoring Market Share Distribution
ProductMarket Share (%)
SolarWinds Server and Application Monitor3.2%
Zabbix15.2%
Checkmk7.3%
Other74.3%
Server Monitoring
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security7.1%
Wazuh6.4%
IBM Security QRadar5.4%
Other81.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilKalwint - PeerSpot reviewer
Technical Specialist at ServiceIO
Monitoring over a thousand systems has improved decision making and operational visibility
From an advantage perspective, SolarWinds Server and Application Monitor is comparatively cheaper from a commercial point of view. It is easy to install and configure, very user-friendly, and quick to get up and running, allowing you to see the early value adds in your organization. It is compatible with most technologies for monitoring with very few chances of incompatibility. Configuration also allows us to monitor all the technical parameters we are looking for, making it a very good experience for us. The alerting feature in SolarWinds Server and Application Monitor is a main advantage, as it alerts based on threshold breaches and can raise tickets to the ticketing system, send SMS, and email notifications, allowing engineers to work on those tickets to resolve issues and avoid further impact. The visibility into server health is a beneficial feature that I am utilizing. We widely use various application performance metrics in SolarWinds Server and Application Monitor such as database monitoring and server monitoring, which are quite good enough for any monitoring solution. We utilize the customizable dashboards in SolarWinds Server and Application Monitor.
reviewer1469784 - PeerSpot reviewer
Senior Manager at a financial services firm with 10,001+ employees
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is simple to implement and can provide fairly decent Windows-based monitoring, beyond simple SNMP. It is great for monitoring newbies and smaller shops."
"I have found the visibility into server health with SolarWinds Server and Application Monitor very beneficial, which we use on a daily basis."
"Hardware health: It allows for proactive monitoring of the hardware health and is a game changer."
"The solution has good alerts. Notifications are sent via email to technicians. You can filter the kinds of alerts you want to receive as well. It's excellent."
"The most beneficial aspect of SolarWinds Server and Application Monitor is its ability to monitor at the application level."
"Features like monitoring and infrastructure dependency mapping are valuable to us."
"The product integrates with Remedy."
"The component and cable monitoring are good. SolarWinds is more intuitive and user-friendly than AppDynamics. The AppDynamics console is more complex because it's a more feature-rich solution, so it's not easy for somebody to pick it up."
"I find it beneficial that Splunk Enterprise Security easily integrates with other tools. Due to its excellent API capabilities, it facilitates connections with various cybersecurity tools."
"The client site login is pretty extensible and probably cost-effective."
"Splunk is quite flexible for our customers. Splunk does not filter from a specific lock, you can define it later."
"The risk-based alerting (RBA) is one of the valuable features."
"The ability to easily aggregate data and make meaningful reports is what makes Splunk Enterprise Security excellent."
"It gives us the liberty to do more in terms of use cases."
"The product has a good security posture."
"Splunk Enterprise Security has helped improve my organization's business resilience by fulfilling gaps in forensics, incident management, IRP, and data management while helping us mature our security operations."
 

Cons

"An additional feature that would improve this solution is the ability to complete root cause analysis."
"Mapping interactions between systems."
"Application-based monitoring, such as monitoring within servers like Apache and IIS, has room for improvement."
"They are complex to operate; users need to know what they want during setup."
"Reporting is the only thing with which we currently have challenges. They have this in two ways. There is the report writer, which is the backend, and we also have web reports, which are on the console. So, they have removed the report writer for the backend reports, and we are making use of the web console, but most of the users are not finding it very interesting to use the frontend reports. I would like them to bring back the report writer. That's the key area within it to improve on the reporting. If they can bring back the report writer, then most users will actually be comfortable. I have some customers who are trying to export their report to an Excel format, but it is not possible because they said any report that has been done from the web console cannot be exported to Excel, but most of the customers need to export their reports to Excel. That's one area they need to work on."
"The tool’s report feature created issues for us. We needed to gain skills to use that feature. The tool’s customization is not easy since you have to reconfigure the whole system."
"It lacks a user experience for measuring things like the end-to-end time for which a user waits for a specific response in the system. In the application layer, it has some very basic stuff. You have to build your own with manuscripts and things like that."
"One area that could benefit from improvement is its performance"
"It needs more formatting control without having to be an admin."
"I would like to have fraud detection features. Fraud is within the same turf as with security operations. Fraud and cybersecurity work hand in hand. I would like to have detection capabilities, or at least dashboards in Enterprise Security for fraud."
"In the next release, they should include machine learning-based rules that would streamline the process of finding anomalies."
"Its interface and usability can always be improved."
"It is very complicated to write your own correlation rules without the help of Splunk support."
"The tool itself is very difficult to configure. It's great for its number of inputs, for the different types of systems devices, and things that it could collect information from. To actually make good use of it, you need a fairly dedicated team of people that have some reasonably good programming or modeling skills to be able to do the things that you need to do with it. Whereas a lot of the other tools are better packaged for that, and so require a lot less training and a lot less dedication."
"Splunk Enterprise Security could be cheaper."
"Cybersecurity and infrastructure monitoring have room for improvement."
 

Pricing and Cost Advice

"SAM is not per server so the pricing model can be deceiving. If you have an enterprise environment, you will quickly exceed your licensing quickly. You should know this before going in."
"The tool is available for my company at a good price point."
"Pricing is inexpensive, starting at 2440 euros. For that, you get the ability to monitor a couple of nodes and one year of maintenance and support."
"Its licensing is on a yearly basis. It is just the standard price, but it can vary depending on the current rate of the dollar."
"I would rate the pricing for this solution a three out of five."
"I like the pricing for this SolarWinds product."
"The solution is overpriced in terms of application management."
"The product might cost you $30,000 USD to buy, but scaling this solution requires the purchase of additional polling engines at $20,000 USD each."
"We had a yearly subscription."
"It would be nice if the pricing were cheaper. However, we did purchase it."
"Luckily, we come under a large federal agency, and before the pandemic, they signed a large enterprise license agreement. It worked out great and to our advantage because we are a small organization. We got a 300 gig license, and we just did not have the buying power to be able to get products cheaply. Because we all partnered together under the agency umbrella, we were able to get Splunk Enterprise Security, UBA, and ITSI for cheap. This was good considering the fact that some of these premium apps require a minimum number of users, and we do not have the number of people needed to even justify buying it."
"The pricing of Splunk Enterprise Security is high."
"The subscription is monthly."
"The tool's licensing is good and we haven't received any complaints from the team handling it."
"Expensive compared to other options."
"The pricing is based on the volume of data fed into it, which can lead to substantial costs. This pricing model is complex and unpredictable, making cost management difficult."
report
Use our free recommendation engine to learn which Server Monitoring solutions are best for your needs.
881,360 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Educational Organization
11%
Financial Services Firm
9%
Government
9%
Computer Software Company
7%
Financial Services Firm
13%
Computer Software Company
11%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise8
Large Enterprise21
By reviewers
Company SizeCount
Small Business109
Midsize Enterprise50
Large Enterprise264
 

Questions from the Community

What needs improvement with SolarWinds Server and Application Monitor?
There is definitely room for improvement besides simplifying its setup. As a non-technical person, I believe the dashboards could be improved. Everything we use appears on video walls, and we need ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

SolarWinds SAM
No data available
 

Overview

 

Sample Customers

Andr. L. Riis AS, NetSuite
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about SolarWinds Server and Application Monitor vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
881,360 professionals have used our research since 2012.