Splunk Enterprise Reviews

Splunk makes it easy to search through various data including logs. In the past I have had to pour through logs in order to find the one lines among the 100 of thousands of lines. Splunk allows me to search through those logs in a matter of seconds vs the hours it used to take.

Most of enterprise setup is done through the command line. It would be nice to have cluster configuration (index creation) as part of the UI.

Several of our applications are distributed across multiple systems. It is the same software running on each server but doing the same job for different users. Each server would generate its own log files. When things went wrong, we used Splunk to be able to see what was going on on each server. Click a few buttons and you get two logs from two different servers listed together coordinated by time. But that leads you to discover that the issue came from a separate upstream or downstream server, then bring in those logs too . . . all coordinated by time. Don't get me wrong, the IT guys love these tools for their own enterprise reasons, but as a server stack developer, this was a resource I used OFTEN.

I never fully grokked their SQL like language. I could do basic things daily without issue. However, I often had to hit the documentation to do anything more than a simple "find this" query.

Splunk has excellent abilities to search and data-mine your logs.
In addition, you can build dashboards on top of aggregated data in order to save precious time each time you want to have a look at your system's performance without querying from scratch.

There are times in which the service experienced performance issues. Sometimes they were so severe which meant you're "blind" since you can't access your logs.

The best part of it is its UI which has very responsive page and can drag couple of days logs. Best in its performance and versions are being upgraded at regular intervals and its best in delivering the outcomes as required

User friendly and an awesome dashboard to manage your logs and analyze your apps.

It can be a little expensive but it's worth.

It very easy to jump in and learn. Installation, configuration, and administration is very easy. Use of the product such as Search/Dashboard can seem daunting at first but is actually very simple. Splunk has very good documentation and community support. I am always able to find answers to my questions by using Splunk Answers and/or the IRC channel.

Licensing and pricing in general. Managing the license usage can be annoying and paying for more can be costly. There have been quite a few times where small issues with our log intensive systems have caused license violations. Scenarios like this are usually avoidable with small changes to the Splunk configuration but it can be tedious.

Splunk makes log aggregation and log search extremely easy for micro service model architecture. UI feels easy to navigate and the query language is quite simply to learn

Sometimes log ingestion takes a lot of time , depending upon the method we use to ingest the data. Enterprise version vs on site is also an interesting choice

Building a query is very easy. It's easy to understand the interface, graphs are good and can be easily exported. The dashboards are very useful.

I am not sure if I am using the latest version, but the version I use sometimes would expand the text area where the query is written hard to tell if the search is still on or done. Also, sometimes it takes very long for a query to finish execution. I understand it depends on the query itself and also the amount of data, but the tool aims at getting quicker result for a high volume of data.

The charts and visualizations that you can create in general have a good look and it has the minimum functionalities expected as a user (export, filtering, search, etc), I spent some time trying to understand the interface and functionalities but once I started to load some data and use the search I was able to see the capabilities of the product.

Splunk is easy to start going but difficult to master with so many features. The query language has many analytical features that requires some learning curve

Love the ease of being able to log various performance statistics for our applications whether it’s documenting response times or any failures

Some things like figuring out the ways plunk structures it’s queries for search is difficult. Seems like documentation is not very straightforward

We use Splunk to parse and catalog our system and audit logs for propiertary software we use in house. The file sizes are compact and the search is very thorough.

The interface is somewhat clunky and a little hard to navigate.

Splunk can handle huge data set and grab specific information from a data set.

It is costly but it provides great value for the money.

It can do a lot once you figure things out-- you can run a really professional software on this platform and make it look nice as well.

Super hard to get the hang of for a beginner. Don't use this if you've had no experience with computer software or coding before. Also, some of the products on the "free trial version" aren't available on Splunk Enterprise, which doesn't make sense, because Splunk Enterprise is more expensive?

Theres a certification path to using Splunk. Extremently easy to set up reports within minutes which add good value to the company. Reviewing data has been beneficial at both network and server level. Its made Devops lives easy in such a way that all teams can pull relevant information beneficial to them.

There are alternatives available which make Splunk a hard sell for organizations.

Makes it easy to identify trends within your environment. Once everything is aggregated it makes it easy for example, to see the knock on events of a network outage throughout the environment.

Web user interface is a bit clunky. Its very polished interface, but in many cases it's style over substance. When I'm debugging an issue I want to be able to drill down into the problem fast, and the shiny interface can be sluggish and slow you down.h

It allows me to seamlessly collect and visualize all my data. Provides a greater level of insights which were not visible in custom solutions before using Splunk

Sometimes it can be overwhelming to understand all the feature sets, it is not so clearly defined, it might help to have the documentation handy before using.

Great application for log collection and correlation of the logs, easy for searching and working with. Support is more user based and support is helpful for issues.

Not the full product, due to being free. Can be confusing if you don't use the free training offered from Splunk.

It's a very good tool to analyze real-time data. It also generates graphs, reports, visualizations based on the data. Product is easy to use and understand. Installation is also not that difficult.

As a student I think price is high, but I think value for money is good.

Its ability to process large chunks of data and transform the data to information of interest.

Its regex builder for field extraction needs improvement.

Splunk gives data analytics on the application usage. And it is great tool to monitor software applications

Users need to learn SPL search processing language

Beautiful design, that makes event logs fun. Intuitive design.

Repetitive adjustments, I wish you could save a default time format. Resources.

With Splunk, sky is the limit, this is also a disadvantage, you have too many possibilities

Very hard and complex to configure, be ready to have sleepless nights !

simple and easy

costly

The product is neat and simple to use with a great customer support

Nothing much, maybe the pricing model. Other than that, I think it's a great product

Nice analytics UI. Nice support system. Healthy user community.

The amount of time it takes to load, performance-wise could be better