Try our new research platform with insights from 80,000+ expert users

Evolven vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 6, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Evolven
Ranking in IT Operations Analytics
16th
Average Rating
7.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
Splunk Enterprise Security
Ranking in IT Operations Analytics
1st
Average Rating
8.4
Reviews Sentiment
7.6
Number of Reviews
315
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st)
 

Mindshare comparison

As of July 2025, in the IT Operations Analytics category, the mindshare of Evolven is 0.4%, up from 0.4% compared to the previous year. The mindshare of Splunk Enterprise Security is 24.2%, down from 29.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Operations Analytics
 

Featured Reviews

MF
Provides visualization of risk levels. However, alerting needs improvement.
Our primary use case is operational analytics. It gives insights into a changing landscape, which was not possible before. It facilitates infrastructure readiness and consistency. Provides visualization of risk levels. Alerting needs improvement. Less than one year.
ROBERT-CHRISTIAN - PeerSpot reviewer
Has many predefined correlation rules and is brilliant for investigation and log analysis
It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It provides visualization of risk levels."
"It facilitates infrastructure readiness and consistency."
"Splunk Enterprise Security's dashboards are a key asset."
"The dashboard is amazing. Out-of-the-box dashboard is very good. It is very user-friendly."
"The logs on the solution are excellent."
"It is very simple to tweak or write a small piece of glue code to go ahead and create a new dashboard for a business unit to make near real-time decisions to focus more on other geographies when launching the product."
"It's better than IBM, in my opinion, because it's an independent entity."
"Splunk Enterprise Security has helped speed up our security investigations."
"The most valuable feature is the incident dashboard, and the extensive use of correlation searches, which isn't available with a standard Splunk search package. This feature is important to me because it enables SOC analysts to do their job more efficiently and be able to investigate or mediate incidents at a faster pace."
"The reporting aspect is good and it does what I need it to do."
 

Cons

"Alerting needs improvement."
"One thing that I probably dislike the most about the Splunk product is their support."
"Splunk does not provide any default threat intelligence like Microsoft Sentinel, but you can integrate any third-party threat intelligence with Splunk. By default, no threat intelligence suite is there, whereas, with IBM QRadar or Microsoft Sentinel, the default feature of threat intelligence is there. It is free. If Splunk can provide a default threat intelligence suite, it would be better."
"The user experience could be improved."
"The UI can be improved. Dashboards and reports can be better in terms of graphics."
"Splunk Enterprise Security is great but can have some frustration points. It can sometimes be slower to use."
"It is very complicated to write your own correlation rules without the help of Splunk support."
"The configuration had a bit of a learning curve."
"Splunk does not build apps. They only go back and validate the apps that somebody has already built. They should have remote consulting support. They have a wonderful solution. They have 24/7 security. Nobody needs to depend on any third party and will therefore just buy Splunk on the cloud."
 

Pricing and Cost Advice

Information not available
"It can be expensive, especially the licensing costs. However, there is added value in what it can do, not just log aggregation."
"Unlike other security tools, Splunk provides a fixed amount of gigabytes per day, and we are required to pay for any additional usage beyond that limit, in addition to our monthly cost."
"The Splunk Enterprise Security license is expensive."
"It is expensive, but it is a good tool. It is worth the cost."
"Setup cost is cheap: It is free, it is user-friendly, and it is fast."
"While some clients find the cost of Splunk Enterprise Security to be on the higher end, its pricing is comparable to other SIEM solutions."
"The pricing of Splunk Enterprise Security is somewhat high, but comparing it with its benefits, it's acceptable. It depends on the type of business."
"I think the price could be improved."
report
Use our free recommendation engine to learn which IT Operations Analytics solutions are best for your needs.
860,592 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
15%
Financial Services Firm
14%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Aegon, Barclays, Chubb, Deloitte, DLL, HP, Huber, imshealth, ING, JPMorgan Chase, Moody's, Quintiles, Southboro Medical Group, Tullet Prebon, VSE Corporation, Western Union
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Splunk, New Relic, IBM and others in IT Operations Analytics. Updated: June 2025.
860,592 professionals have used our research since 2012.