Try our new research platform with insights from 80,000+ expert users

OpenText SiteScope vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

OpenText SiteScope
Average Rating
7.8
Reviews Sentiment
7.7
Number of Reviews
26
Ranking in other categories
Application Performance Monitoring (APM) and Observability (34th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.6
Number of Reviews
308
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. OpenText SiteScope is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 0.5%, up 0.4% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 9.5% mindshare, down 12.6% since last year.
Application Performance Monitoring (APM) and Observability
Security Information and Event Management (SIEM)
 

Featured Reviews

Christopher M Cook - PeerSpot reviewer
Doesn't require much custom coding and can run on different platforms, but the types of scripting files you can execute on it are limited
In terms of issues with Micro Focus SiteScope, some that we've run into were unintended, for example, extra executions of monitors and some false alerts when there were problems connecting to endpoints or there were issues with the application that sometimes resulted in false positives. We had a few issues with the way time zones were configured when the system time differed from the time indicated during the monitoring, but those were just little things that weren't too bad. As far as the limitations of Micro Focus SiteScope, the types of scripting files that can be executed are rather limited unless you go to some third-party plugins. These are the areas for improvement in the solution.
ROBERT-CHRISTIAN - PeerSpot reviewer
Has many predefined correlation rules and is brilliant for investigation and log analysis
It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool has capabilities other than managing web-based applications, like URL Monitor and EPI Script. It is also easy to use the tool."
"There's no agent you need installed on the servers. In our environment, we have some servers out of our control so we cannot manage them. We use SiteScope to monitor the availability, the resources on the servers, etc. This allows us to do this job without installing agents so there's no need to take care of anything on the server."
"Simplest tool for monitoring servers, web content, databases and other hardware. Its dashboard is really good."
"The URL monitoring is excellent."
"The product's ability to monitor systems and applications and send alerts and create support tickets are the most valuable features of the product."
"The product's readymade templates are perfect. It supports us a lot when we don't have much experience with the product. The templates offers us direction to proceed."
"It's easy to template standard monitoring configurations, and automate monitoring configuration."
"For the system environment, SiteScope can be useful."
"Speeds up root cause analysis and can help identify issues that your organization never realized were occurring."
"The most valuable features include agility and Splunk Enterprise Security's ability to quickly search for alerted items, as well as the capacity to create custom alerts using the SQL language employed by Splunk."
"Splunk's strength lies in its single-page view."
"The correlation search functions that generate all the notables are valuable. That can get pretty complicated, and it handles that pretty well."
"It provides logs in one place, so they are easy to find. It collects the logs from multiple places, then you have just one place where you see the whole flow from the front-end to the back-end."
"We saw the granularity that we could get from Splunk far exceeded what we already had. We had the ability to have our security team really focus on the platform and stay within the platform, but they could correlate with a variety of other stakeholders, and our stakeholders were growing."
"Splunk Enterprise Security helped improve our organization’s ability to ingest and normalize data."
"We are using Microsoft 365 and we're using the Exchange Mail Service. It's good for monitoring that in particular."
 

Cons

"It could be more reliable using a database repository instead of a log repository."
"It may lack some features other products in the category have like more detailed transaction tracking."
"They have not kept up with browser security requirements or advances in GUIs, they switched to a corruptible database architecture instead of text config files."
"You can use OpenText SiteScope for small or middle environments. But if you want to monitor a large environment, it is not scalable. If you can monitor a large environment with OpenText SiteScope, it can be a valuable product."
"While working with OpenText, I noticed sometimes teams refuse intervention due to compliance issues."
"In terms of issues with Micro Focus SiteScope, some that we've run into were unintended, for example, extra executions of monitors and some false alerts when there were problems connecting to endpoints or there were issues with the application that sometimes resulted in false positives. We had a few issues with the way time zones were configured when the system time differed from the time indicated during the monitoring, but those were just little things that weren't too bad. As far as the limitations of Micro Focus SiteScope, the types of scripting files that can be executed are rather limited unless you go to some third-party plugins. These are the areas for improvement in the solution."
"It should improve its integrations with various tools, especially service management tools."
"The graphs and dashboard in the solution are areas that need improvement."
"The product is relatively expensive."
"One issue is that we are getting a lot of false positives. We are trying to reduce them by customizing the default rules, changing thresholds, and using white-listing and black-listing. It's getting better and better as a result. But they need to build components that would reduce the false positives."
"The integration with all our tool sets felt like we were reinventing the wheel, which was a pain point for us."
"They could offer pre-built search queries for everyday use cases like brute force attacks, DDoS attacks, and other security threats."
"It needs to improve the way to install third-party apps and enable installation without logging into splunk.com."
"The configuration could be better."
"While scheduled reports can be embedded, Splunk dashboard can not be embedded directly without enabling cross origin."
"The Splunk platform is not unified. We have all of these different tools and they feel a bit disjointed."
 

Pricing and Cost Advice

"The pricing or licensing cost for Micro Focus SiteScope is often bundled with other things, so the cost for each individual would be difficult to calculate. Pricing could be $2,000,000 a year. My company pays for technical support because it's part of the contract with Micro Focus SiteScope. You buy the licenses, but you're also paying for the support. With Nagios, it's much more bare-bones as far as paying for licenses and the software itself, and my company didn't have to use as much Nagios support yet in one or two years because there weren't too many problems using Nagios, and it's much more cost-effective, so that's one of the reasons why my company is migrating to Nagios from Micro Focus SiteScope."
"SiteScope licensing can be node based-or monitor-based. I would recommend for node-based licensing."
"It is expensive. I don't like its licensing. I don't like anything where you have to license it by individual licenses. I'm not a fan of that, but that's just me."
"Depending on your requirements, there are two licensing models available. A simple point model, or an endpoint model."
"When Micro Focus Voltage SiteScope has introduced approximately eight years ago and there was not very much competition making the price high. However, when comparing the price of Micro Focus Voltage SiteScope now to other tools, they should reduce the price. It is similar to a legacy tool at this point."
"You have to pay for their "solution templates". Other tools do not charge you for knowledge-based monitoring bundles."
"I rate the solution's pricing a six out of ten on a scale where one is cheap and ten is expensive."
"The product's pricing should be lower since there are many open-source products that can do the same job with better user interfaces. The tool's pricing is yearly and you need to pay for support."
"The pricing can be better. We are already considering Elastic because Splunk is too expensive. You have to pay based on per-day ingestion. There should be a more flexible model for the use cases where one day you have a huge amount, and on other days, it is quite less."
"This product could use better pricing in general."
"Splunk Enterprise Security is a worthwhile investment given the comprehensive range of features it offers."
"Personnel costs are saved by not having to involve the domain developers from multiple teams when tracing a problem that spans multiple platforms."
"The pricing of Splunk Enterprise Security is high."
"It can be cost-prohibitive when you start to scale and have terabytes of data. Its cost model is based on how much data it processes a day. If they're able to create scaled-down niche or custom package offerings, it may help with the cost. Instead of the full-blown features, if they can narrow the scope where it can only be used for a specific purpose, it would kind of create that market for the product, and it may help with the costing. When you start using it as a central aggregator and you're pumping tons of logs at it, pretty soon, you'll start hitting your cap on what it can process a day. Once you've got that, you're kind of defeating the purpose because you're going to have to scale back."
"Splunk is not a cheap solution and the license is billed annually."
"Regarding the product's pricing, I think it has always been difficult to have a conversation with Splunk."
report
Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.
851,604 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
34%
Manufacturing Company
13%
Computer Software Company
11%
Government
6%
Financial Services Firm
15%
Computer Software Company
15%
Manufacturing Company
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Micro Focus Voltage SiteScope?
The most valuable feature of SiteScope is its infrastructure monitoring.
What is your experience regarding pricing and costs for Micro Focus Voltage SiteScope?
The licensing scheme for Micro Focus tools is reasonable, and more affordable. It's seen as medium or de-receivable.
What needs improvement with Micro Focus Voltage SiteScope?
While working with OpenText, I noticed sometimes teams refuse intervention due to compliance issues. Overcoming control restrictions for different applications could be improved.
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

Micro Focus SiteScope, HPE SiteScope, SiteScope
No data available
 

Overview

 

Sample Customers

Vodafone Ireland, Kuveyt Turk Participation Bank
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about OpenText SiteScope vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
851,604 professionals have used our research since 2012.