Try our new research platform with insights from 80,000+ expert users

SolarWinds Server and Application Monitor vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SolarWinds Server and Appli...
Average Rating
8.0
Reviews Sentiment
4.5
Number of Reviews
44
Ranking in other categories
Application Performance Monitoring (APM) and Observability (22nd), Server Monitoring (8th), Active Directory Management (9th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
375
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. SolarWinds Server and Application Monitor is designed for Server Monitoring and holds a mindshare of 3.2%, up 2.7% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.1% mindshare, down 9.8% since last year.
Server Monitoring Market Share Distribution
ProductMarket Share (%)
SolarWinds Server and Application Monitor3.2%
Zabbix15.2%
Checkmk7.3%
Other74.3%
Server Monitoring
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security7.1%
Wazuh6.4%
IBM Security QRadar5.4%
Other81.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilKalwint - PeerSpot reviewer
Technical Specialist at ServiceIO
Monitoring over a thousand systems has improved decision making and operational visibility
From an advantage perspective, SolarWinds Server and Application Monitor is comparatively cheaper from a commercial point of view. It is easy to install and configure, very user-friendly, and quick to get up and running, allowing you to see the early value adds in your organization. It is compatible with most technologies for monitoring with very few chances of incompatibility. Configuration also allows us to monitor all the technical parameters we are looking for, making it a very good experience for us. The alerting feature in SolarWinds Server and Application Monitor is a main advantage, as it alerts based on threshold breaches and can raise tickets to the ticketing system, send SMS, and email notifications, allowing engineers to work on those tickets to resolve issues and avoid further impact. The visibility into server health is a beneficial feature that I am utilizing. We widely use various application performance metrics in SolarWinds Server and Application Monitor such as database monitoring and server monitoring, which are quite good enough for any monitoring solution. We utilize the customizable dashboards in SolarWinds Server and Application Monitor.
reviewer1469784 - PeerSpot reviewer
Senior Manager at a financial services firm with 10,001+ employees
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Monitoring of processes and services is the most valuable feature. It is not necessarily just the server alone in terms of the CPU or the memory. We can go in-depth into services and processes."
"Monitoring the components on your devices with out of the box monitors or the ability to create new ones (SAM)"
"Hardware health: It allows for proactive monitoring of the hardware health and is a game changer."
"Manage Groups: The capability to group appropriate devices gives better visibility of sites, categories, or critical regions. The same can be used to represent a dashboard for higher management."
"It is easy to install and configure, very user-friendly, and quick to get up and running, allowing you to see the early value adds in your organization."
"Features like monitoring and infrastructure dependency mapping are valuable to us."
"The solution is end-to-end from the network and the application to the processes. Everything about the enterprise infrastructure is being covered by the solution. It's easy to use and easy to navigate and one of the leaders among monitoring solutions."
"The most valuable feature is application monitoring."
"The most valuable feature of Splunk Enterprise Security is the comprehensive logging capabilities it provides."
"We have found all the features useful. However, the dashboarding and logging have been very helpful. Additionally, the log analysis does a great job."
"The product is generally stable and forgiving."
"My security ops team takes around 30 minutes to one hour to remediate security incidents with Splunk Enterprise Security compared to a previous solution."
"The SIEM is the most valuable feature of the product."
"The most valuable features in Splunk are the search function and the ability to run selected session reports. The session reports are important because I can use them to see what is going on in our environment weekly. Additionally, we can use the graph to see how often that particular event is happening."
"Splunk can extract all kinds of data. There's no limitation on what kind of structured and unstructured data one needs to extract — it can access any kind of data, including machine-generated data."
"The product is adept at log mining."
 

Cons

"From an integration point of view, if you want to have a manager of manager kind of layer, that is currently lacking in SolarWinds Server and Application Monitor."
"Downside of the tools is the web console are hung or crash. It need to improve the performance."
"Solarwinds should come up the same monitoring system for other certificate expiration alert apart from SSL."
"A lot of times, we have to do a lot of manual cleanups."
"An additional feature that would improve this solution is the ability to complete root cause analysis."
"The technical support was better in previous years. With the launch of the premium support service, the normal support has declined."
"I would like to see support for non-Windows or non-Microsoft domains, especially Apache and other non-Windows servers."
"Mapping interactions between systems."
"An area of improvement would be the licensing of the solution. They need a free license, which would allow faster lead times."
"Data retention can be better. If we want to look at the data for five months or six months, that is not available to us. We only have a history of 20 or 30 days. After that, the information gets lost. That is a drawback."
"It does not give us permission to implement on-premise so we implement them on the cloud."
"Professional support is great, but too expensive."
"The training was mostly sales-focused, like how to monitor your sales. It was hard to then come back from doing the training and try to switch it to a cybersecurity focus because all the training we did was sales oriented. The basic training didn't really touch on any kind of cybersecurity use cases or anything like that. That would have been great to see in the training."
"Its pricing is extremely high. There are other tools out in the market that are competitive. They do not necessarily have all the functionality, but they are competitive. The professional services we have used have been high as well in comparison to the market."
"There's been a big push for SBC compute over the ingestion model, which will hamper us."
"They can incorporate the SOAR solution within the actual product so that we do not require two different products, two different installations, and two different pricing methods. In regards to UBA, I am familiar with the UBA that existed two years ago. I am not updated about it today, but two years ago, UBA required such an amount of data that from a cost perspective, it was not worth it. When you compare it to what you get out of the box with Microsoft Sentinel without additional costs, there is no match."
 

Pricing and Cost Advice

"We pay around $ 2,000 to $ 5,000 yearly for the solution."
"Pricing and licensing is fair for what you get. It does have a great bang-for-the-buck appeal."
"The product might cost you $30,000 USD to buy, but scaling this solution requires the purchase of additional polling engines at $20,000 USD each."
"I would advise potential buyers to wait until the end of the quarter, end of year, or other time to place orders. There are actually great deals to be had at those times if your budget cycle can match up."
"When planning for the number of licenses to purchase, make sure you understand all of the elements within an application required to really understand performance well. In our case, we quickly came to the conclusion that an unlimited license for SAM was the way to go."
"I have always said SolarWinds is very “proud” of their products, meaning they are expensive. I cannot afford to purchase all the licenses I need for all the SolarWinds products."
"Pricing is inexpensive, starting at 2440 euros. For that, you get the ability to monitor a couple of nodes and one year of maintenance and support."
"I think SolarWinds' pricing is very decent compared to other competitors in the market."
"Splunk is really expensive."
"Regarding the product's pricing, I think it has always been difficult to have a conversation with Splunk."
"In addition to the licensing fee, there is also a support and maintenance charge."
"It can be expensive, especially the licensing costs. However, there is added value in what it can do, not just log aggregation."
"Splunk Enterprise Security incurs a significant cost because of the amount of data we send, but we are fine with the value we're getting for that price."
"Splunk Enterprise Security's pricing is based on data volume, which generally suits large enterprises."
"In terms of pricing, I believe Splunk is unreasonably costly for the majority of mid and small-sized companies."
"I am not personally involved with the pricing of the solution."
report
Use our free recommendation engine to learn which Server Monitoring solutions are best for your needs.
882,207 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Educational Organization
12%
Financial Services Firm
9%
Government
9%
Computer Software Company
7%
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise8
Large Enterprise21
By reviewers
Company SizeCount
Small Business109
Midsize Enterprise50
Large Enterprise264
 

Questions from the Community

What needs improvement with SolarWinds Server and Application Monitor?
There is definitely room for improvement besides simplifying its setup. As a non-technical person, I believe the dashboards could be improved. Everything we use appears on video walls, and we need ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

SolarWinds SAM
No data available
 

Overview

 

Sample Customers

Andr. L. Riis AS, NetSuite
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about SolarWinds Server and Application Monitor vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
882,207 professionals have used our research since 2012.