No more typing reviews! Try our Samantha, our new voice AI agent.

Datameer vs Splunk Enterprise Security comparison

Why PeerSpot?

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Datameer
Average Rating
7.2
Number of Reviews
4
Ranking in other categories
BI on Hadoop (3rd)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
468
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

Datameer and Splunk Enterprise Security aren’t in the same category and serve different purposes. Datameer is designed for BI on Hadoop and holds a mindshare of 15.0%, up 8.1% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 8.2% mindshare, down 9.1% since last year.
BI on Hadoop Mindshare Distribution
ProductMindshare (%)
Datameer15.0%
AtScale Adaptive Analytics (A3)24.2%
JethroData15.8%
Other45.0%
BI on Hadoop
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security8.2%
IBM Security QRadar5.6%
Wazuh3.8%
Other82.4%
Security Information and Event Management (SIEM)
 

Featured Reviews

it_user357459 - PeerSpot reviewer
Hadoop Developer at a tech services company with 10,001+ employees
It helps to onboard and enrich data quickly as it does not involve writing scripts or queries, but the transformation functions can be more mature.
The most valuable feature are the data transformation functions in the workbook It helps to onboard and enrich data quickly as it does not involve writing scripts or queries. Maintenance is easy. We would like to have more inbuilt connections to different types of sources. The transformation…
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The built-in smart analytic tools are the most valuable features for me."
"Customer Service: It's very good."
"Datameer has around 400 inbuilt functions that are very useful for any beginner and also it has a good visualization which helps end user to see that how the trend is showing."
"The most valuable feature are the data transformation functions in the workbook."
"It definitely does help with both auditing and as well as regular monitoring. SOC does more monitoring, but ES also gives you other features that are auditing-related. The dashboards are also beneficial."
"Splunk provides a free version so you can test it before purchasing."
"The user interface is excellent, and since I'm using Splunk as a power user, it's easy to create dashboards."
"I have not seen any outages in the product in the past two years that it has been running in our company, so I think it is good when it comes to the stability part."
"On average, my security ops team takes fairly quickly to remediate security incidents with Splunk Enterprise Security, depending on the use case, minutes versus hours, compared to my previous solution, which was ArcSight."
"Some of the insights that we have obtained as a part of using Splunk have greatly helped us in increasing our revenue in terms of selling our products."
"Splunk is user-friendly. We can easily customize the monitoring script."
"It has been helping a lot of my clients with fast data mining and information propagation."
 

Cons

"Although this tool is very good, it has some limitations that I think could be removed in later versions."
"It needs better integration with other enterprise technologies out of the box."
"When I run the single license on my MacBook Pro, the memory space can be an issue."
"It is a good tool from an analysis perspective, but is not suitable for IT."
"We have seen that the pricing has gone higher and the support quality has not kept up or was not as good as it was earlier."
"The product was designed for security and IT with business intelligence needs, such as PDF exporting, but this has not been the highest priority. While the functionality is there, it could be developed more."
"Splunk Enterprise Security can be improved with more integrations, and maintaining it can sometimes be problematic."
"Its pricing is extremely high. There are other tools out in the market that are competitive. They do not necessarily have all the functionality, but they are competitive. The professional services we have used have been high as well in comparison to the market."
"Splunk Enterprise Security provides us with the relevant context to help guide our investigations, but it would be interesting to add even more context, for instance, in order to raise the level of risk."
"Licensing costs can be a barrier for those with limited budgets."
"Splunk ES could have more pre-built integrations and rules. The detection is fairly accurate, but it depends on the rules you create. Splunk's out-of-the-box configuration isn't that useful."
"Splunk isn't appropriate for smaller companies. It's too expensive."
 

Pricing and Cost Advice

Information not available
"The solution is a little expensive."
"Its pricing model can be improved."
"Be upfront about your needs and expectations. Splunk is great to work with."
"Splunk Enterprise Security is not a cheap product, but I think it is worth every dollar that you pay."
"I've heard Splunk is often preferred over other options, but the cost can be prohibitive for smaller organizations."
"Personnel costs are saved by not having to involve the domain developers from multiple teams when tracing a problem that spans multiple platforms."
"It is possible to use a developer's license, which is up to 10GB per day of volume traffic, which is usually enough for most use cases."
"The license for Splunk Enterprise Security is expensive."
report
Use our free recommendation engine to learn which BI on Hadoop solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
No data available
Outsourcing Company
12%
Financial Services Firm
11%
Manufacturing Company
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business135
Midsize Enterprise74
Large Enterprise320
 

Questions from the Community

Ask a question
Earn 20 points
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Trustev, DetroitCrime Commission, Sears, Visa, citi, vivint, workday, Kabam, USA Olympic Team, CDW, BT, at&t, Bank of America, NetApp., expresso
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.