Try our new research platform with insights from 80,000+ expert users

Splunk Cloud Platform vs Wazuh comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Splunk Cloud Platform
Average Rating
8.2
Number of Reviews
56
Ranking in other categories
Data Visualization (3rd), IT Alerting and Incident Management (3rd)
Wazuh
Average Rating
7.4
Reviews Sentiment
7.1
Number of Reviews
43
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (3rd), Extended Detection and Response (XDR) (4th)
 

Mindshare comparison

While both are Systems Management solutions, they serve different purposes. Splunk Cloud Platform is designed for Data Visualization and holds a mindshare of 0.4%, up 0.3% compared to last year.
Wazuh, on the other hand, focuses on Log Management, holds 17.1% mindshare, up 13.0% since last year.
Data Visualization
Log Management
 

Featured Reviews

Raul Lapaz - PeerSpot reviewer
Aug 17, 2023
Does not require backend maintenance, is easily integrated and utilized
Splunk Cloud Platform helps us with our security incident response. The cloud security logs are integrated with all the cloud providers. The federated search feature enables us to search between Europe and the US, from one Splunk instance to another, all from a single location. This federated search simplifies how we handle data, making it easy to swiftly search for and manage information. We monitor several cloud environments and find it easy to utilize the Splunk Cloud Platform for this purpose. Each cloud provider offers its own prebuilt dashboard, or customers can create their own. The Splunk Cloud Platform offers excellent visibility into multiple environments. In the past, we utilized hybrid integrations, and they seamlessly worked right out of the box. The reporting functionality provided by the Splunk Cloud Platform resembles that of the on-premise platform. It is readily available without requiring integration or the installation of reporting visualizations. From a security standpoint, the Splunk Cloud Platform provides us with comprehensive visibility into all security logs. This enables us to implement security incident responses with great efficiency. Additionally, we have discovered that internal employees, such as product teams, are utilizing the platform as intended for various other use cases. For instance, it has proven valuable in troubleshooting performance issues and monitoring within Kubernetes. As such, we are leveraging a wide array of use cases within the company. Splunk is a highly mature software that has been in the market for many years, which greatly influenced our decision-making process. Another factor was the user-friendly nature of the latest version, making it easy to initiate. We don't require a large workforce for installing components; it's as simple as out-of-the-box. Consequently, minimal time investment is needed for training. The Splunk Cloud Platform assists us in accessing data to meet critical compliance and privacy regulations. For instance, this is particularly important for regulations such as GDPR and HIPAA. We are utilizing Splunk Cloud with a specific focus on HIPAA compliance, allocating extra attention to this aspect. In the case of GDPR, Splunk offers a range of built-in capabilities. For instance, it allows for log masking. Moreover, there are novel features available in Splunk Cloud, such as ingest actions. This feature is exceptionally useful as it enables us to mask the data before it's ingested into Splunk. Consequently, this approach ensures our adherence to compliance regulations, exemplified by GDPR. The Splunk Cloud Platform has had a significant impact on our organization's security posture. It serves as our primary visibility tool and is the main source of trust for all login activities. Without Splunk, we would lose essential visibility and access to security updates. Currently, Splunk stands as one of the primary tools we utilize due to its utmost importance.
SyedAli17 - PeerSpot reviewer
Sep 25, 2023
Has excellent scalability when deployed on Azure
We primarily use Wazuh for internal security monitoring to ensure the safety of our organization's internal systems. We have two specific requirements: first, we use it to monitor our internal operations, which is essential for general security purposes. Second, we rely on Wazuh to manage the…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"There is definitely the ease of the infrastructure administration. It frees up a lot of time."
"The most valuable feature is we don't have to deal with any back-end server maintenance because the solution is cloud-based."
"I like the Cloud monitoring console feature."
"Splunk Cloud has helped us to be able to focus on getting more information out of our data."
"he cloud performance is good."
"The Cloud Platform interface is cleaner than Splunk Enterprise's monitoring console. You can easily understand what's happening with your indexes. It's more refined than Splunk Enterprise's console, but they have the same feel and function."
"The data management and instant search features are the most valuable ones for us, as they allow us to instantly retrieve information needed for reports and security compliance."
"In terms of the benefits of the product, I would say it is my go-to tool."
"We use it to find any aberration in our endpoint devices. For example, if someone installs a game on their company laptop, Wazuh will detect it and inform us of the unauthorized software or unintended use of the devices provided by the company."
"Integrates with various open-source and paid products, allowing for flexibility in customization based on use cases."
"Some of the strengths of Wazuh that stand out for us include its scalability when deployed on Azure, its open-source nature, which allows for customization based on our needs, and its compatibility with various security solutions like threat intelligence platforms."
"I find the PCI DSS feature the most valuable, along with the feature that monitors the compliance of Windows and the CIS benchmarks on other devices like Unix or Linux systems."
"Wazuh's most beneficial features for our security needs are flexibility, built-in rules, integration capabilities, and documentation."
"The most valuable features are the modules and metrics."
"I like Wazuh because it is a lot like ELK, which I was already comfortable with, so I didn't have to learn from scratch."
"Wazuh is simple to use for PCI compliance."
 

Cons

"Splunk Cloud could improve by having pre-defined templates. It has very good design views, but there is no predefined template. You have to define your own. If they could add predefined templates for different use cases."
"There could be better searches, but mainly, it needs to improve the performance with a vast amount of data. That will make it better and easier to use."
"Splunk should offer various options for real-time monitoring."
"Using basic natural language in English instead of writing a regex expression will be helpful."
"Some of the implementation is challenging. They're not very proxy-aware."
"The only thing that is missing from Splunk Cloud is the command-line interface."
"The security connection should have a seamless integration. Other than that, the way we are using it, so far, it seems quite good."
"The dashboards should be easier to customize."
"One area where Wazuh could use some improvement is in its reporting mechanism, especially for high-level management like CSOs and CEOs."
"The deployment is a bit complex."
"The product's configuration part and lack of AI capabilities are some of the major concerns associated with Wazuh."
"Wazuh needs more security and features, particularly visualization features and a health monitor."
"It would be great if there could be customization for the decoder portion."
"The tool does not provide CTI to monitor darknet."
"Adding the flexibility to integrate various plug-ins or modules into its core system would enhance functionality."
"It would be better if they had a vulnerability assessment plug-in like the one AlienVault has. In the next release, I would like to have an app with an alerting mechanism."
 

Pricing and Cost Advice

"The certifications are costly."
"I do not personally deal with that side, but from discussions, I know that it is one of the more expensive tools. I do not have anything to compare it with."
"Currently, we have the ingest-based license. They are offering SVC-based licenses as well, but I am not a fan of SVC-based licensing. At the end of the day, I want to predict my budget and how much I am going to pay to the vendor so that I can plan my yearly budget."
"Splunk Cloud Platform is more expensive than some of its competitors, but it offers a wider range of features."
"Splunk Cloud Platform's pricing is a little on the higher end."
"It is a touchy subject because we are locked into it. That goes back to the rehydrating data. We cannot have the retention that we want to store for legal and compliance purposes because that is seven years' worth of data for some of the indexes, so we ship them off into S3 buckets and install them there, at which point they are invisible to Splunk, so we have to rehydrate them, but we cannot rehydrate those pockets into Splunk Cloud. We have to rehydrate them into a self-hosted version of Splunk, which can take days to set up and get going. I would not call Splunk's licensing and pricing predatory, but they have made it very difficult to maintain the independence of your own data."
"As far as the pricing goes, it was what was expected. It is a premium product. There were no surprises there."
"Splunk Cloud Platform fell within our budget so we pulled the trigger and implemented it."
"Wazuh is a good tool, but the open-source version has scalability limitations."
"Wazuh has a community edition, and I was using that. It's free and open source."
"The current pricing is open source."
"My client uses the open-source version of Wazuh."
"Wazuh is not an expensive solution."
"There is not a license required for Wazuh."
"Wazuh is a cheaply priced product."
"Wazuh is open-source, therefore it is free. You can purchase support for $1,000 a year."
report
Use our free recommendation engine to learn which Data Visualization solutions are best for your needs.
814,649 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
26%
Financial Services Firm
13%
Educational Organization
6%
University
6%
Computer Software Company
16%
University
7%
Government
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Splunk Cloud Platform?
Splunk has sped up our response and reduced the time we spend manually monitoring any logs for ticketing tools or servers. It saves us around two hours daily.
What is your experience regarding pricing and costs for Splunk Cloud Platform?
Splunk Cloud is affordable, depending on your license. I don't know how much it costs exactly, but my colleague said it depends on your licensing and which features you use.
What needs improvement with Splunk Cloud Platform?
First-time users may struggle with the user interface. When I first used Splunk, I entered my username and password. After that, we get a dashboard on the left side with apps. At the top, you can c...
What do you like most about Wazuh?
Integrates with various open-source and paid products, allowing for flexibility in customization based on use cases.
What needs improvement with Wazuh?
Wazuh doesn't have native support for some enterprise solutions. It requires an agent installed on the server, whether Windows Server or Linux, to collect logs. While you can gather information via...
What is your primary use case for Wazuh?
My company specializes in providing SIEM as a service. We leverage Wazoo for that. Since Wazoo is open-source, I hosted it on Azure. We provide Wazuh as a service to our customers. Currently, we ha...
 

Learn More

 

Overview

 

Sample Customers

Mindtouch
Information Not Available
Find out what your peers are saying about Splunk Cloud Platform vs. Wazuh and other solutions. Updated: March 2023.
814,649 professionals have used our research since 2012.