Try our new research platform with insights from 80,000+ expert users

SolarWinds Server and Application Monitor vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SolarWinds Server and Appli...
Average Rating
8.0
Reviews Sentiment
4.5
Number of Reviews
44
Ranking in other categories
Application Performance Monitoring (APM) and Observability (22nd), Server Monitoring (8th), Active Directory Management (9th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
381
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. SolarWinds Server and Application Monitor is designed for Server Monitoring and holds a mindshare of 3.3%, up 2.5% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.2% mindshare, down 9.8% since last year.
Server Monitoring Mindshare Distribution
ProductMindshare (%)
SolarWinds Server and Application Monitor3.3%
Zabbix13.4%
Checkmk6.6%
Other76.7%
Server Monitoring
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security7.2%
Wazuh5.8%
IBM Security QRadar5.3%
Other81.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilKalwint - PeerSpot reviewer
Technical Specialist at ServiceIO
Monitoring over a thousand systems has improved decision making and operational visibility
From an advantage perspective, SolarWinds Server and Application Monitor is comparatively cheaper from a commercial point of view. It is easy to install and configure, very user-friendly, and quick to get up and running, allowing you to see the early value adds in your organization. It is compatible with most technologies for monitoring with very few chances of incompatibility. Configuration also allows us to monitor all the technical parameters we are looking for, making it a very good experience for us. The alerting feature in SolarWinds Server and Application Monitor is a main advantage, as it alerts based on threshold breaches and can raise tickets to the ticketing system, send SMS, and email notifications, allowing engineers to work on those tickets to resolve issues and avoid further impact. The visibility into server health is a beneficial feature that I am utilizing. We widely use various application performance metrics in SolarWinds Server and Application Monitor such as database monitoring and server monitoring, which are quite good enough for any monitoring solution. We utilize the customizable dashboards in SolarWinds Server and Application Monitor.
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We use the solution as a central monitoring tool. We use it to monitor every transaction that has a relation to the organization’s infrastructure."
"Monitoring the components on your devices with out of the box monitors or the ability to create new ones (SAM)"
"The solution is great for monitoring. If something is going wrong, we can immediately find the root cause."
"The features like trends, capacity planning, recommendations, and diagnostics are the main items I focus on for added value."
"Solarwinds has an open database that allows you to do serious integrations. It doesn't matter which service desk you have, you can implement and integrate it with SolarWinds."
"The most valuable feature of SolarWinds Server and Application Monitor is its powerful monitoring capabilities."
"Features like monitoring and infrastructure dependency mapping are valuable to us."
"The solution is end-to-end from the network and the application to the processes. Everything about the enterprise infrastructure is being covered by the solution. It's easy to use and easy to navigate and one of the leaders among monitoring solutions."
"Splunk is extremely flexible, which allows us to create custom visualizations along with other customizations."
"The solution has proven to be quite stable."
"Splunk stands out for its extensive application integrations."
"Splunk Enterprise Security would provide better capabilities and out-of-box detections."
"From the class that I took this week, being able to create notable events from whatever you find in the data set is pretty useful."
"The site is constantly up, and it's been really easy to adjust the data."
"I appreciate the Identity and Assets framework the most, as well as the threat analysis framework."
"It follows MITRE ATT&CK and Cyber Kill Chain frameworks. There are certain notable events for which we can configure our security posture."
 

Cons

"In terms of the dashboards on offer, they should work to improve them. The types of dashboards that you get in terms of the graphs on offer aren't ideal right now."
"It needs time-based functions for monitoring. Some things need to be polled on a specific schedule or only during a specific window."
"The tool’s report feature created issues for us. We needed to gain skills to use that feature. The tool’s customization is not easy since you have to reconfigure the whole system."
"Downside of the tools is the web console are hung or crash. It need to improve the performance."
"The current script monitoring feature has limitations, especially when dealing with custom scripts."
"SAM's software-defined network monitoring capability is also low and could be improved."
"Currently SolarWinds SAM offers AppInsight for modern versions of: IIS, Exchange, SQL Server. They have shown to be powerful and insightful tools. However, AppInsight needs to be offered for more applications: Citrix, SharePoint, AX, etc."
"The stability, flexibility, and ease of use could be improved."
"An improved user interface along with multi-tenancy support would be beneficial."
"The way Splunk Enterprise Security could improve is by pulling in and mapping my DHCP data and tracking users' IP addresses as it changes throughout sessions, and being able to keep track of who is actually assigned to what IP address more natively."
"Splunk Enterprise Security documentation exists, but compared to Palo Alto, Palo Alto has more knowledge base articles."
"AngularJS/ReactJS inclusion could be made easier in GUI."
"The only improvement I am expecting is the cost of the licensing. Clients are going to other solutions just because of the cost."
"The most significant challenges I face when using Splunk Enterprise Security for advanced threat detection include not having enough time to be in it, the resources and people to also be in there, and trying to configure it and teach people how to use it. A lack of resources prevents us from giving it the attention it needs."
"The way Splunk Enterprise Security could improve is by pulling in and mapping my DHCP data and tracking users' IP addresses as it changes throughout sessions, and being able to keep track of who is actually assigned to what IP address more natively."
"Free-floating panels in the dashboards are like a glass table."
 

Pricing and Cost Advice

"When compared to other licensed models in the market, it stands out as one of the more cost-effective options."
"Nagios XI, WhatsUpGold, Uptime Software, PRTG, Manage Engine, and SpiceWorks are the other tools that have lower pricing and licensing costs. However, they can't compete with SolarWinds when it comes to the features and functionality that SolarWinds can provide."
"We are on an annual license to use the solution. The price of the solution is expensive. The price is based on a bunch of factors, such as the number of engines and elements."
"We pay around $ 2,000 to $ 5,000 yearly for the solution."
"Pricing and licensing is fair for what you get. It does have a great bang-for-the-buck appeal."
"The licenses start from USD 3000.00 and go up to USD 20,000.00 for the year. It's a perpetual license. Nothing is free in SolarWinds, anything that you need is an additional cost."
"Its licensing is on a yearly basis. It is just the standard price, but it can vary depending on the current rate of the dollar."
"The price is too high."
"It is pretty straightforward and based on the sizing. If I compare it with other competitors, it makes sense."
"Our customers often complain that the price of Splunk is too high."
"Splunk Enterprise Security is an expensive solution."
"Truly evaluate the data you want to ingest and go slow. Pulling in data that can provide no use to your mission only wastes data against your license."
"I think we recently switched to the SVC pricing compared to the ingest pricing."
"Splunk Enterprise Security is expensive but the solution is equipped with a lot of features."
"It is a bit costly."
"I've heard Splunk is often preferred over other options, but the cost can be prohibitive for smaller organizations."
report
Use our free recommendation engine to learn which Server Monitoring solutions are best for your needs.
884,696 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Educational Organization
13%
Government
9%
Financial Services Firm
8%
Manufacturing Company
7%
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise8
Large Enterprise21
By reviewers
Company SizeCount
Small Business112
Midsize Enterprise50
Large Enterprise267
 

Questions from the Community

What needs improvement with SolarWinds Server and Application Monitor?
There is definitely room for improvement besides simplifying its setup. As a non-technical person, I believe the dashboards could be improved. Everything we use appears on video walls, and we need ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

SolarWinds SAM
No data available
 

Overview

 

Sample Customers

Andr. L. Riis AS, NetSuite
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about SolarWinds Server and Application Monitor vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
884,696 professionals have used our research since 2012.