No more typing reviews! Try our Samantha, our new voice AI agent.

SolarWinds Server and Application Monitor vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SolarWinds Server and Appli...
Average Rating
8.0
Reviews Sentiment
4.5
Number of Reviews
44
Ranking in other categories
Application Performance Monitoring (APM) and Observability (17th), Server Monitoring (8th), Active Directory Management (8th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
388
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. SolarWinds Server and Application Monitor is designed for Server Monitoring and holds a mindshare of 3.0%, up 2.6% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.1% mindshare, down 9.2% since last year.
Server Monitoring Mindshare Distribution
ProductMindshare (%)
SolarWinds Server and Application Monitor3.0%
Zabbix10.7%
Nagios XI6.1%
Other80.2%
Server Monitoring
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security7.1%
IBM Security QRadar5.2%
Wazuh4.6%
Other83.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilKalwint - PeerSpot reviewer
Technical Specialist at ServiceIO
Monitoring over a thousand systems has improved decision making and operational visibility
From an advantage perspective, SolarWinds Server and Application Monitor is comparatively cheaper from a commercial point of view. It is easy to install and configure, very user-friendly, and quick to get up and running, allowing you to see the early value adds in your organization. It is compatible with most technologies for monitoring with very few chances of incompatibility. Configuration also allows us to monitor all the technical parameters we are looking for, making it a very good experience for us. The alerting feature in SolarWinds Server and Application Monitor is a main advantage, as it alerts based on threshold breaches and can raise tickets to the ticketing system, send SMS, and email notifications, allowing engineers to work on those tickets to resolve issues and avoid further impact. The visibility into server health is a beneficial feature that I am utilizing. We widely use various application performance metrics in SolarWinds Server and Application Monitor such as database monitoring and server monitoring, which are quite good enough for any monitoring solution. We utilize the customizable dashboards in SolarWinds Server and Application Monitor.
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of SolarWinds Server and Application Monitor is the network devices' performance monitor is the best."
"It is scalable."
"The application dependency feature identifies issues between applications and servers or within the network where the application is hosted. It highlights related problems, whether related to packet processing or other issues, enabling the creation of alerts and reports accordingly."
"One of the most valuable features are the reports, they're pretty good, and the ease of installation and customization for the client is another feature that we value."
"Monitoring the components on your devices with out of the box monitors or the ability to create new ones (SAM)"
"Manage Groups: The capability to group appropriate devices gives better visibility of sites, categories, or critical regions. The same can be used to represent a dashboard for higher management."
"The most valuable feature of SolarWinds Server and Application Monitor is the network devices' performance monitor is the best."
"We use the solution as a central monitoring tool. We use it to monitor every transaction that has a relation to the organization’s infrastructure."
"Generally speaking, their support is pretty good and their response time is pretty good."
"This is the right choice if you are looking for a platform that can combine all machine-generated data and use it for various use cases from different domains."
"Splunk RBA or risk-based alerting definitely made our lives a lot easier; we went from hundreds of alerts having to be triaged a day, that generally could be false positives or just noise, and bubble them into one overall alert that we can look at on a per-day basis and see what's rising to the top and respond faster, have a higher rate of true positives and find evil a lot quicker."
"The search function for spam is like a google search. You just enter and it will quickly show you the results."
"It can log more logs than other solutions; it's a good way to troubleshoot problems."
"Splunk can quickly be deployed and it's not difficult to learn the solution."
"The solution has proven to be quite stable."
"It has a big user base, so the community is useful."
 

Cons

"There is one feature that is a report writer. And they are currently trying to take it out from being a stand-alone application and integrating to the web. This doesn't give us the flexibility and it doesn't expand what we can get when it comes to reporting. So, putting it on the web is going to make it difficult to get some information. Leaving it where it is now will help us a lot."
"It lacks a user experience for measuring things like the end-to-end time for which a user waits for a specific response in the system."
"They are complex to operate; users need to know what they want during setup."
"The stability, flexibility, and ease of use could be improved."
"I would like to see support for non-Windows or non-Microsoft domains, especially Apache and other non-Windows servers."
"Some custom applications cannot be monitored, and a lot more applications need to be included."
"Scalability was an issue in the past."
"It lacks a user experience for measuring things like the end-to-end time for which a user waits for a specific response in the system. In the application layer, it has some very basic stuff. You have to build your own with manuscripts and things like that."
"The way Splunk Enterprise Security could improve is by pulling in and mapping my DHCP data and tracking users' IP addresses as it changes throughout sessions, and being able to keep track of who is actually assigned to what IP address more natively."
"The search could be improved. Now, it is a bit difficult to write search queries because they become quite long, then maintaining those long search queries is a quite challenging."
"I have not seen ROI with Splunk Enterprise Security."
"Previously, they developed custom connectors or add-ons for a lot of applications. But that number can be upgraded still. There are a lot of applications in the world that are not supported."
"Missing capability for audio/video and image processing."
"We can only increase the environment. For instance, with an ES server, we cannot make a cluster of ES. If you have two servers and want to make a cluster of these two servers for ES, that is not possible."
"We had an instance when Splunk failed and it took us a couple of days to recover."
"More training on PetaData using artificial intelligence techniques to identify the events which are not normal and exceptions that would help the organization identify threats and malware on the go with results."
 

Pricing and Cost Advice

"The solution's price is reasonable. Though it's on the higher side, the tool is worth the money."
"The product is expensive."
"The product might cost you $30,000 USD to buy, but scaling this solution requires the purchase of additional polling engines at $20,000 USD each."
"I would rate the pricing for this solution a three out of five."
"We pay around $ 2,000 to $ 5,000 yearly for the solution."
"SAM is not per server so the pricing model can be deceiving. If you have an enterprise environment, you will quickly exceed your licensing quickly. You should know this before going in."
"Nagios XI, WhatsUpGold, Uptime Software, PRTG, Manage Engine, and SpiceWorks are the other tools that have lower pricing and licensing costs. However, they can't compete with SolarWinds when it comes to the features and functionality that SolarWinds can provide."
"When compared to other licensed models in the market, it stands out as one of the more cost-effective options."
"The pricing seems good relative to the other vendors that we have had here. However, they need to find ways to be more flexible with the licensing and be able to deal with situations where we start generating more logs. Maybe having some controls in the Splunk interface to turn it off, so we don't have to change anything in our application."
"It is quite expensive."
"While licensing can be a concern, there are ways to reduce the licensing costs including filtering some events."
"From what I have seen so far, Splunk has multiple cost models. The one that we are using is pretty good when it comes to ingesting data into the environment. It has worked out pretty well."
"My experience with the solution's setup cost, pricing, and licensing was really good."
"The price can always be lower, but it is fair at the moment. The cost efficiencies depend on the licensing and how much data we are bringing in. We have a fairly large footprint, so it is cost-effective."
"There is an annual license required to use this solution."
"In addition to the licensing fee, there is also a support and maintenance charge."
report
Use our free recommendation engine to learn which Server Monitoring solutions are best for your needs.
894,738 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Educational Organization
13%
Financial Services Firm
9%
Government
7%
Healthcare Company
7%
Financial Services Firm
14%
Manufacturing Company
9%
Computer Software Company
9%
Comms Service Provider
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise8
Large Enterprise21
By reviewers
Company SizeCount
Small Business119
Midsize Enterprise50
Large Enterprise270
 

Questions from the Community

What needs improvement with SolarWinds Server and Application Monitor?
There is definitely room for improvement besides simplifying its setup. As a non-technical person, I believe the dashboards could be improved. Everything we use appears on video walls, and we need ...
What is your primary use case for SolarWinds Server and Application Monitor?
I am doing research as we currently have both solutions, and I am looking to see if we need both or can manage with one. Currently, the outcome indicates that we need both. The focus point is diffe...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

SolarWinds SAM
No data available
 

Overview

 

Sample Customers

Andr. L. Riis AS, NetSuite
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about SolarWinds Server and Application Monitor vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
894,738 professionals have used our research since 2012.