Try our new research platform with insights from 80,000+ expert users

SolarWinds Server and Application Monitor vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SolarWinds Server and Appli...
Average Rating
8.0
Reviews Sentiment
4.5
Number of Reviews
44
Ranking in other categories
Application Performance Monitoring (APM) and Observability (22nd), Server Monitoring (8th), Active Directory Management (9th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
378
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. SolarWinds Server and Application Monitor is designed for Server Monitoring and holds a mindshare of 3.2%, up 2.7% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.1% mindshare, down 9.8% since last year.
Server Monitoring Market Share Distribution
ProductMarket Share (%)
SolarWinds Server and Application Monitor3.2%
Zabbix15.2%
Checkmk7.3%
Other74.3%
Server Monitoring
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security7.1%
Wazuh6.4%
IBM Security QRadar5.4%
Other81.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilKalwint - PeerSpot reviewer
Technical Specialist at ServiceIO
Monitoring over a thousand systems has improved decision making and operational visibility
From an advantage perspective, SolarWinds Server and Application Monitor is comparatively cheaper from a commercial point of view. It is easy to install and configure, very user-friendly, and quick to get up and running, allowing you to see the early value adds in your organization. It is compatible with most technologies for monitoring with very few chances of incompatibility. Configuration also allows us to monitor all the technical parameters we are looking for, making it a very good experience for us. The alerting feature in SolarWinds Server and Application Monitor is a main advantage, as it alerts based on threshold breaches and can raise tickets to the ticketing system, send SMS, and email notifications, allowing engineers to work on those tickets to resolve issues and avoid further impact. The visibility into server health is a beneficial feature that I am utilizing. We widely use various application performance metrics in SolarWinds Server and Application Monitor such as database monitoring and server monitoring, which are quite good enough for any monitoring solution. We utilize the customizable dashboards in SolarWinds Server and Application Monitor.
reviewer1469784 - PeerSpot reviewer
Senior Manager at a financial services firm with 10,001+ employees
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have found the visibility into server health with SolarWinds Server and Application Monitor very beneficial, which we use on a daily basis."
"SolarWinds SAM has provided us with dynamic thresholds based on historical trends and requirements. The threshold gets configured automatically, so it's no longer necessary to configure it manually every time."
"I am impressed with the tool's AppStack feature which mainly helps us in the identification process. This feature can give an overview of the fault and help us identify the issues for performance degradation. Instead of looking at multiple places, we can look at a single place to identify the issues."
"The most valuable feature of SolarWinds Server and Application Monitor is the network devices' performance monitor is the best."
"Monitoring of processes and services is the most valuable feature. It is not necessarily just the server alone in terms of the CPU or the memory. We can go in-depth into services and processes."
"I adore the NTA module that provides deep details on ingress/egress traffic for any interface. With a few clicks, you can correlate who is accessing what and when, beside the bandwidth consuming applications/users."
"This product can monitor application environments no matter where they reside and provides capabilities for deep insight into infrastructure."
"We manage SolarWinds ourselves without outsourcing its services."
"It's great for finding anonymous threats."
"My customer was integrated with many third-party credentials and other threat sources as well. The integration part was seamless and easy. The rates for allocating valuable information and IOCs from different sources are also good."
"I find it beneficial that Splunk Enterprise Security easily integrates with other tools. Due to its excellent API capabilities, it facilitates connections with various cybersecurity tools."
"The query functionality is very easy to use and fast to retrieve logs in comparison to other SIEM solutions."
"If you want to understand how it can analyze or find out incidents, the visibility is good."
"It is quite extensible. It is a platform that we can build our use instead of each case instead of each case being limited or restricted to each capability. This is probably the best feature."
"The dashboards are the most valuable feature. We like the ability to drill in and see what queries are under the dashboard, build new visualizations, edit the querying, and see the reports."
"We can present to our management in real time the security of the batch management for the PCs, security regarding the network equipment. We're currently working in the Azure Cloud project, so we can send any logs from the cloud to Splunk. We can monitor them and we can present to the managers and customers. It's a very good solution for reporting. We use Splunk for reporting and monitoring of any solution in the company."
 

Cons

"PerfStack can be made more effective. I am sure SolarWinds already has a plan for the same in coming versions."
"It lacks a user experience for measuring things like the end-to-end time for which a user waits for a specific response in the system. In the application layer, it has some very basic stuff. You have to build your own with manuscripts and things like that."
"It needs time-based functions for monitoring. Some things need to be polled on a specific schedule or only during a specific window."
"They should incorporate more artificial intelligence. There should also be more predictive features."
"The tool’s report feature created issues for us. We needed to gain skills to use that feature. The tool’s customization is not easy since you have to reconfigure the whole system."
"When you implement SolarWinds on a larger scale my customers complain about the speed."
"It would be helpful if the solution could integrate more with the security compliances, like this IDSS, etc."
"The technical support was better in previous years. With the launch of the premium support service, the normal support has declined."
"Some of the queries are difficult to run and have room for improvement."
"We'd like to see a more seamless cloud-based integration."
"Splunk Enterprise Security offers a vast amount of information to learn and comprehend, resulting in a challenging initial learning curve."
"Its interface could be improved."
"The monitoring aspect of Splunk could be improved. We have to do some queries to get as much information as CrowdStrike or other solutions provide. If you run a big query, you will see a delay. That is the only concern we have because it will take some time if you query large data sets."
"Splunk has a steeper learning curve, making it feel less user-friendly."
"Splunk Enterprise Security is not exactly user-friendly."
"I think the licensing costs for Splunk Enterprise Security are on the higher side, but I am not certain."
 

Pricing and Cost Advice

"I would advise potential buyers to wait until the end of the quarter, end of year, or other time to place orders. There are actually great deals to be had at those times if your budget cycle can match up."
"The solution's price is reasonable. Though it's on the higher side, the tool is worth the money."
"Price can always be lower. It is neither on the expensive side nor on the cheap side. We have worked with them for a lot of years, so we get a discount due to the size of the installation."
"Pricing is inexpensive, starting at 2440 euros. For that, you get the ability to monitor a couple of nodes and one year of maintenance and support."
"We are on an annual license to use the solution. The price of the solution is expensive. The price is based on a bunch of factors, such as the number of engines and elements."
"SAM is not per server so the pricing model can be deceiving. If you have an enterprise environment, you will quickly exceed your licensing quickly. You should know this before going in."
"The licenses start from USD 3000.00 and go up to USD 20,000.00 for the year. It's a perpetual license. Nothing is free in SolarWinds, anything that you need is an additional cost."
"I would rate the pricing for this solution a three out of five."
"While licensing can be a concern, there are ways to reduce the licensing costs including filtering some events."
"It is a pretty high cost solution, but if your organization has the funds, it can bring many benefits."
"Splunk is costly but it’s worth it due to the high-end features."
"While Splunk is more expensive than other solutions, we would still choose it because of its capabilities."
"Splunk is definitely not a cheap solution. It is an expensive product."
"The pricing depends on the bandwidth of an organization and is good compared to some SIEM tools. IBM, for example, is quite costly. But Microsoft Sentinel is notably cheaper."
"We had a yearly subscription."
"The pricing modules could be improved."
report
Use our free recommendation engine to learn which Server Monitoring solutions are best for your needs.
882,479 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Educational Organization
12%
Financial Services Firm
9%
Government
9%
Computer Software Company
7%
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise8
Large Enterprise21
By reviewers
Company SizeCount
Small Business110
Midsize Enterprise50
Large Enterprise266
 

Questions from the Community

What needs improvement with SolarWinds Server and Application Monitor?
There is definitely room for improvement besides simplifying its setup. As a non-technical person, I believe the dashboards could be improved. Everything we use appears on video walls, and we need ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

SolarWinds SAM
No data available
 

Overview

 

Sample Customers

Andr. L. Riis AS, NetSuite
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about SolarWinds Server and Application Monitor vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
882,479 professionals have used our research since 2012.