No more typing reviews! Try our Samantha, our new voice AI agent.

SolarWinds Server and Application Monitor vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SolarWinds Server and Appli...
Average Rating
8.0
Reviews Sentiment
4.5
Number of Reviews
44
Ranking in other categories
Application Performance Monitoring (APM) and Observability (17th), Server Monitoring (8th), Active Directory Management (8th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
386
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. SolarWinds Server and Application Monitor is designed for Server Monitoring and holds a mindshare of 3.0%, up 2.6% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.1% mindshare, down 9.2% since last year.
Server Monitoring Mindshare Distribution
ProductMindshare (%)
SolarWinds Server and Application Monitor3.0%
Zabbix10.7%
Nagios XI6.1%
Other80.2%
Server Monitoring
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security7.1%
IBM Security QRadar5.2%
Wazuh4.6%
Other83.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilKalwint - PeerSpot reviewer
Technical Specialist at ServiceIO
Monitoring over a thousand systems has improved decision making and operational visibility
From an advantage perspective, SolarWinds Server and Application Monitor is comparatively cheaper from a commercial point of view. It is easy to install and configure, very user-friendly, and quick to get up and running, allowing you to see the early value adds in your organization. It is compatible with most technologies for monitoring with very few chances of incompatibility. Configuration also allows us to monitor all the technical parameters we are looking for, making it a very good experience for us. The alerting feature in SolarWinds Server and Application Monitor is a main advantage, as it alerts based on threshold breaches and can raise tickets to the ticketing system, send SMS, and email notifications, allowing engineers to work on those tickets to resolve issues and avoid further impact. The visibility into server health is a beneficial feature that I am utilizing. We widely use various application performance metrics in SolarWinds Server and Application Monitor such as database monitoring and server monitoring, which are quite good enough for any monitoring solution. We utilize the customizable dashboards in SolarWinds Server and Application Monitor.
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of the solution is its interface, which is used for monitoring."
"It's good at monitoring system-specific things like ports, services."
"The product integrates with Remedy."
"The recommendations are a life saver."
"I'd rate technical support at eight out of ten. They are helpful and fast."
"SolarWinds is a very stable platform compared to others on the market."
"The most valuable feature of SolarWinds Server and Application Monitor is the network devices' performance monitor is the best."
"This feature from Solarwinds SAM helped us to monitor and alert whenever the SSL cert is going to expire on the server to avoid any downtime of the services running on the server specially on ADFS platform where we have Video conference, Webex, Office 365 and single sign-on services."
"Splunk Enterprise Security helps my SOC team prioritize and investigate high-fidelity alerts more effectively by enabling us to quickly gather information, collaborate, and provide various teams with access to the same information, allowing them to follow the workflow to complete the task."
"Splunk is extremely flexible, which allows us to create custom visualizations along with other customizations."
"We use Splunk Cloud as a SIEM solution and to monitor traffic and the network for detection purposes."
"The features of Splunk Enterprise Security that I appreciate the most are its flexibility and scalability."
"I find the process for customizing, developing, testing, deploying, and refining detections in Splunk Enterprise Security effective."
"Splunk can extract all kinds of data. There's no limitation on what kind of structured and unstructured data one needs to extract — it can access any kind of data, including machine-generated data."
"If properly built, I'm very impressed with the stability of Splunk ES."
"My security ops team takes around 30 minutes to one hour to remediate security incidents with Splunk Enterprise Security compared to a previous solution."
 

Cons

"SAM AppInsight for SQL: The ability to ignore fragmentation of specific indexes."
"PerfStack can be made more effective."
"I believe that SolarWinds should spend more effort in reporting."
"In terms of the dashboards on offer, they should work to improve them. The types of dashboards that you get in terms of the graphs on offer aren't ideal right now."
"It should also be easier to upgrade SolarWinds. AppDynamics is harder to deploy but easier to upgrade. So AppDynamics takes a lot of time and effort to install, but you can upgrade it in minutes. SolarWinds is the opposite. It's easy to deploy, but upgrades take forever. To date, nobody can complete it on time, so the production environment is sitting idle."
"As per my view, Solarwinds should come up the same monitoring system for other certificate expiration alert apart from SSL."
"The current script monitoring feature has limitations, especially when dealing with custom scripts."
"SolarWinds Server and Application Monitor is not stable. We have to maintain the platform and it goes down frequently."
"The ingestion happens quickly, so you can run up the data costs if you use the default settings. It isn't a problem for government agencies in the Saudi market, but many of the corporations in India are small or medium-sized enterprises that cannot afford that kind of ingestion system."
"I have concerns about the architecture as well since I can see it is not very well defined."
"I find the process for customizing, developing, testing, deploying, and refining detections in Splunk Enterprise Security to be challenging at times. It takes some of our more advanced engineers to be able to work through a lot of those processes."
"Splunk Enterprise Security incurs a significant cost because of the amount of data we send, but we are fine with the value we're getting for that price."
"I think the licensing costs for Splunk Enterprise Security are on the higher side, but I am not certain."
"There is another new term called benign positives. It is better to clearly identify each definition of those terms since it has not been popular in the industry, and everyone needs to be aware of those things."
"Splunk could improve its default machine-learning models. Also, Splunk Enterprise's native threat intelligence isn't that good. I prefer a custom threat intelligence model."
"I'm a security manager and Splunk is not a good solution for my needs and not as good as other products I've used."
 

Pricing and Cost Advice

"Its licensing is on a yearly basis. It is just the standard price, but it can vary depending on the current rate of the dollar."
"The tool is available for my company at a good price point."
"I would rate the pricing for this solution a three out of five."
"Understanding the counts of objects to monitor will determine the licensing need. In terms of pricing, it’s not cheap but it’s not expensive as larger vendors whose products don’t have all the features or integrations."
"The product might cost you $30,000 USD to buy, but scaling this solution requires the purchase of additional polling engines at $20,000 USD each."
"When compared to other licensed models in the market, it stands out as one of the more cost-effective options."
"We pay around $ 2,000 to $ 5,000 yearly for the solution."
"The solution's price is reasonable. Though it's on the higher side, the tool is worth the money."
"Splunk Enterprise becomes extremely expensive after the 20GB/month license."
"Splunk Enterprise Security is an expensive solution."
"Splunk Enterprise Security is a worthwhile investment given the comprehensive range of features it offers."
"Splunk is costly but it’s worth it due to the high-end features."
"Splunk is not free."
"The pricing modules could be improved."
"The pricing depends on the bandwidth of an organization and is good compared to some SIEM tools. IBM, for example, is quite costly. But Microsoft Sentinel is notably cheaper."
"Splunk Enterprise Security is expensive."
report
Use our free recommendation engine to learn which Server Monitoring solutions are best for your needs.
892,868 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Educational Organization
13%
Financial Services Firm
9%
Government
7%
Healthcare Company
7%
Financial Services Firm
14%
Manufacturing Company
9%
Computer Software Company
9%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise8
Large Enterprise21
By reviewers
Company SizeCount
Small Business117
Midsize Enterprise51
Large Enterprise269
 

Questions from the Community

What needs improvement with SolarWinds Server and Application Monitor?
There is definitely room for improvement besides simplifying its setup. As a non-technical person, I believe the dashboards could be improved. Everything we use appears on video walls, and we need ...
What is your primary use case for SolarWinds Server and Application Monitor?
I am doing research as we currently have both solutions, and I am looking to see if we need both or can manage with one. Currently, the outcome indicates that we need both. The focus point is diffe...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

SolarWinds SAM
No data available
 

Overview

 

Sample Customers

Andr. L. Riis AS, NetSuite
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about SolarWinds Server and Application Monitor vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
892,868 professionals have used our research since 2012.