Try our new research platform with insights from 80,000+ expert users

Evolven vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Evolven
Ranking in IT Operations Analytics
23rd
Average Rating
7.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
Splunk Enterprise Security
Ranking in IT Operations Analytics
1st
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
381
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st)
 

Mindshare comparison

As of March 2026, in the IT Operations Analytics category, the mindshare of Evolven is 1.1%, up from 0.5% compared to the previous year. The mindshare of Splunk Enterprise Security is 14.4%, down from 26.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Operations Analytics Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security14.4%
Evolven1.1%
Other84.5%
IT Operations Analytics
 

Featured Reviews

MF
Business Analyst at Swisscom
Provides visualization of risk levels. However, alerting needs improvement.
Our primary use case is operational analytics. It gives insights into a changing landscape, which was not possible before. It facilitates infrastructure readiness and consistency. Provides visualization of risk levels. Alerting needs improvement. Less than one year.
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It facilitates infrastructure readiness and consistency."
"It provides visualization of risk levels."
"The most valuable features in Splunk Enterprise Security are the cluster capabilities."
"The site is constantly up, and it's been really easy to adjust the data."
"Support is quick and competent."
"Search language is easy to understand and teach to new users."
"The biggest advantage I can see in Splunk Enterprise Security is the big data analytics."
"It helps streamline troubleshooting and log analysis."
"The features of Splunk Enterprise Security that I find most valuable include Mission Control, which I really appreciate, the way accelerated data functions, making it really fast to see, the integration with SOAR, which is something really cool and integrates with automated processes, and the way to ingest threat intelligence feeds, which is an amazing feature as well."
"The correlation capabilities are the first value that our clients say they like with Splunk."
 

Cons

"Alerting needs improvement."
"While Splunk offers SOAR as a separate product, integrating it into the next version of Splunk Enterprise Security as a unified solution would be beneficial."
"The solution could improve by giving more email details."
"One thing that I probably dislike the most about the Splunk product is their support."
"We've sometimes faced issues with upgrades. The incident review dashboard sometimes breaks after updates. When we add a space or something in the description or anywhere in the SQL, the drill-down value may be reset with a blank value. Before rolling out any software, they should test it thoroughly and ensure clients won't have issues with the upgraded version. It should be compatible with all or most of the apps. All major issues must be addressed before rolling out the upgrade."
"Splunk could improve its default machine-learning models. Also, Splunk Enterprise's native threat intelligence isn't that good. I prefer a custom threat intelligence model."
"I find the process for customizing, developing, testing, deploying, and refining detections in Splunk Enterprise Security to be challenging at times. It takes some of our more advanced engineers to be able to work through a lot of those processes."
"Splunk Enterprise Security could be cheaper."
"The Web Application Firewall will send you too much information because it's more dedicated to security than a normal firewall."
 

Pricing and Cost Advice

Information not available
"Splunk is really expensive."
"My experience with the solution's setup cost, pricing, and licensing was really good."
"Pricing is probably its weakest spot. As compared to some competitors, Splunk is really expensive."
"It can be expensive, especially the licensing costs. However, there is added value in what it can do, not just log aggregation."
"It can be tough to determine if you are getting all of the value out of your investment at times."
"Splunk's costing is a little more difficult. The pricing method is complicated, and the way that costing is calculated in Splunk is a little more difficult."
"As a team, we prefer the old pricing model with a perpetual license. We are still evaluating the whole subscription-based model."
"Splunk Enterprise Security is cheaper than competitors, but I do not know whether it is just our contract."
report
Use our free recommendation engine to learn which IT Operations Analytics solutions are best for your needs.
884,797 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business112
Midsize Enterprise50
Large Enterprise267
 

Questions from the Community

Ask a question
Earn 20 points
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Aegon, Barclays, Chubb, Deloitte, DLL, HP, Huber, imshealth, ING, JPMorgan Chase, Moody's, Quintiles, Southboro Medical Group, Tullet Prebon, VSE Corporation, Western Union
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Splunk, New Relic, ScienceLogic and others in IT Operations Analytics. Updated: February 2026.
884,797 professionals have used our research since 2012.