Try our new research platform with insights from 80,000+ expert users

Monte Carlo vs Splunk Enterprise Security comparison

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Monte Carlo
Average Rating
9.0
Number of Reviews
1
Ranking in other categories
Data Observability (1st)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.6
Number of Reviews
308
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

Monte Carlo and Splunk Enterprise Security aren’t in the same category and serve different purposes. Monte Carlo is designed for Data Observability and holds a mindshare of 33.5%, down 43.5% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 9.5% mindshare, down 12.6% since last year.
Data Observability
Security Information and Event Management (SIEM)
 

Featured Reviews

PR
Provides centralized data observability features and has an easy-to-use user interface.
The product's initial setup is in a daily improvement stage, deploying new plugins for upstream and downstream resources. It takes 25 minutes to complete. The process involves integrating with third-party services for Single Sign-On (SSO). It requires only one executive for maintenance as it has easy-to-use navigation and user interface.
ROBERT-CHRISTIAN - PeerSpot reviewer
Has many predefined correlation rules and is brilliant for investigation and log analysis
It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It makes organizing work easier based on its relevance to specific projects and teams."
"We can quickly search for almost anything across many log sources in seconds."
"I like Splunk's data aggregation and search capabilities."
"What is nice about the solution is that it makes it easy to build the queries, search for the events and then do analysis."
"It's great for finding anonymous threats."
"It has the ability to correlate data, analyze and review it."
"The solution's most valuable feature is the criticality of alerts."
"Integrity with many vendors: This simplifies the implementation and integration with different devices"
"I am enjoying our implementation of risk-based alerting. That has helped very much with cutting out a lot of the noise that we have. It has reduced our alert volume significantly. There is about an 80% reduction."
 

Cons

"For anomaly detection, the product provides only the last three weeks of data, while some competitors can analyze a more extended data history."
"Splunk's ability to analyze malicious activities scores an 8 out of 10, but there's room for improvement. By analyzing emerging patterns, Splunk could identify and predict potential threats more effectively."
"Features related to content management must be improved."
"More control with Splunk Cloud as it seems a bit limited. I used to manage an on-premise instance of Splunk Enterprise and really liked having more control over it."
"Being able to have a one-stop shop where you have the alert, but then you can generate the case right there from Splunk Enterprise Security instead of having to pivot to another tool such as Mission Control. You do not have to keep bouncing between them, so if you could do it all in one place, that would be great. The new release is supposed to start getting in that direction."
"It'd be really nice if Splunk Enterprise Security had a better and solid configuration guide."
"Due to its high licensing cost, Splunk is out of reach for many organizations."
"Our two main complaints are about the difficulty of the initial setup and the licensing model."
"The tool should include more real-world use case examples built out either through videos or in the community."
 

Pricing and Cost Advice

"The product has moderate pricing."
"I am fine with the licensing, but in terms of the cost, it is expensive for the data that we have. We have an open discussion with our account rep about this."
"Further reductions would be fantastic, and I believe that more and more people would flock to it."
"My customers have found the price of the solution to be high."
"From what I have seen so far, Splunk has multiple cost models. The one that we are using is pretty good when it comes to ingesting data into the environment. It has worked out pretty well."
"Splunk is not a cheap solution and the license is billed annually."
"The tool's licensing is good and we haven't received any complaints from the team handling it."
"The tool's pricing model is great. You can choose between workloads or volume."
"Although Splunk is an expensive product, it is designed to be utilized across your organization in order to maximize your ROI and lower your TCO."
report
Use our free recommendation engine to learn which Data Observability solutions are best for your needs.
851,604 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Manufacturing Company
10%
Financial Services Firm
10%
Retailer
8%
Financial Services Firm
15%
Computer Software Company
14%
Manufacturing Company
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Monte Carlo?
It makes organizing work easier based on its relevance to specific projects and teams.
What needs improvement with Monte Carlo?
For anomaly detection, the product provides only the last three weeks of data, while some competitors can analyze a more extended data history. This feature needs improvement. Its price could be a ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Information Not Available
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.