No more typing reviews! Try our Samantha, our new voice AI agent.

GroundWork Monitor vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GroundWork Monitor
Ranking in IT Operations Analytics
22nd
Average Rating
8.0
Reviews Sentiment
8.0
Number of Reviews
1
Ranking in other categories
Network Monitoring Software (101st), IT Infrastructure Monitoring (75th), Cloud Monitoring Software (49th)
Splunk Enterprise Security
Ranking in IT Operations Analytics
1st
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
388
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (1st)
 

Mindshare comparison

As of May 2026, in the IT Operations Analytics category, the mindshare of GroundWork Monitor is 1.7%, up from 0.3% compared to the previous year. The mindshare of Splunk Enterprise Security is 13.4%, down from 25.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Operations Analytics Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security13.4%
GroundWork Monitor1.7%
Other84.9%
IT Operations Analytics
 

Featured Reviews

it_user186582 - PeerSpot reviewer
Sr PC/Client Server Analyst II at a individual & family service with 10,001+ employees
It's easy to setup and the plugins are easy to write. When we need to, the threshold is easy to change.
It's easy to setup and the plugins are easy to write. When we need to, the threshold is easy to change It would be nice to have a centralized client-settings management. At the moment, the client settings have to be changed individually. I've used it since 2011. The deployment of the new server…
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's easy to setup and the plugins are easy to write."
"They have approximately 50,000 predefined correlation rules, which is quite a lot, and I find that good."
"It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query on Splunk. The resolution time is about the same, but it took longer to discover the issue with ArcSight. Our previous solution took about an hour or more, but Splunk can do it within a few minutes or an hour at most."
"Splunk gives my clients the ability to bring multiple, disparate types of data together, then correlate and report on them."
"Splunk has significantly reduced the time in performing the task of aggregating logs, reviewing as well as time spent during investigations."
"I appreciate the Identity and Assets framework the most, as well as the threat analysis framework."
"The most valuable feature of Splunk Enterprise Security is the comprehensive logging capabilities it provides."
"It's very flexible. If you look from the cloud implementation it is there. Reports are made quickly. Unlike other tools, it caters to all kinds of technical information on the front very easily. There's no need to put in any technical information. You can pull on the reports very easily, take action, and notify stakeholders."
"My security ops team takes around 30 minutes to one hour to remediate security incidents with Splunk Enterprise Security compared to a previous solution."
 

Cons

"Deploying an agent leaves much to be desired."
"Splunk can improve its third-party device application plugins."
"In terms of training. I find that some things about Splunk aren't well-explained. I see features and then go to the website but don't find good explanations."
"I find the process for customizing, developing, testing, deploying, and refining detections in Splunk Enterprise Security to be challenging at times."
"Enterprise security: Splunk must work on clarifying the solution to customers and explain how to gain more from it."
"We had an instance when Splunk failed and it took us a couple of days to recover."
"We don't have SOAR products from Splunk. I believe that's an important piece."
"The Enterprise Security app could be improved. We have had trouble with it working from the first day."
"Because we are using a licensed DataDog, which gives us more reliable results. And for file logs, we are using a BAM, a business audit and monitoring tool, which gives us a more visualized experience than Splunk Enterprise Security."
 

Pricing and Cost Advice

Information not available
"In addition to the licensing fee, there is also a support and maintenance charge."
"We have seen ROI and improvements as we have continued to use the product, but they are more reactive."
"I think the price could be improved."
"My experience with the solution's setup cost, pricing, and licensing was really good."
"The licensing is good, but the pricing absolutely needs some work. It is very high."
"Splunk Enterprise Security is expensive."
"Splunk is priced higher than other solutions."
"The pricing is based on the volume of data fed into it, which can lead to substantial costs. This pricing model is complex and unpredictable, making cost management difficult."
report
Use our free recommendation engine to learn which IT Operations Analytics solutions are best for your needs.
894,738 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Construction Company
29%
Financial Services Firm
17%
Comms Service Provider
10%
Outsourcing Company
8%
Financial Services Firm
14%
Manufacturing Company
9%
Computer Software Company
9%
Comms Service Provider
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business119
Midsize Enterprise50
Large Enterprise270
 

Questions from the Community

Ask a question
Earn 20 points
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

GWOS
No data available
 

Overview

 

Sample Customers

Swiss Life, JBFCS, Capital Markets Cooperative Research Centre
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Splunk, New Relic, Dell Technologies and others in IT Operations Analytics. Updated: May 2026.
894,738 professionals have used our research since 2012.