Try our new research platform with insights from 80,000+ expert users

Splunk Cloud Platform vs Wazuh comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.0
Users find Splunk Cloud beneficial for cost savings, quick issue resolution, improved visibility, and notable ROI, despite some drawbacks.
Sentiment score
3.7
Wazuh offers cost-effective security, reducing detection to an hour and response to two days, benefiting small businesses.
Splunk Cloud Platform has impacted operational costs; it's a bit expensive, but it provides value for money.
Business General Manager at Mutex Systems
I have seen value in security cost savings with Wazuh, as using proprietary EDR versions could save us substantial money.
Security Consultant at ebenezer.okoh@agorasecurity.it
 

Customer Service

Sentiment score
5.7
Splunk Cloud Platform's support is inconsistent, with premium users satisfied but others experiencing delays and varying response quality.
Sentiment score
3.5
Users generally praise Wazuh's support, highlighting strong customer service and useful community resources, despite occasional delays in response times.
Premium support is costly and may not always provide a satisfactory experience.
Sr Manager at Continued
They responded quickly, which was crucial as I was on a time constraint.
Cyber Security Software Engineer at a tech services company with 11-50 employees
We use the open-source version of Wazuh, which does not provide paid support.
Tech Lead at a tech vendor with 201-500 employees
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
Student at Dakota State University
 

Scalability Issues

Sentiment score
7.3
Splunk Cloud Platform impresses with scalability but faces cost concerns, praised for adaptability and easy resource expansion.
Sentiment score
6.7
Wazuh is scalable and flexible, but deployment complexity and technical expertise are needed for handling large data sets.
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Security Operations Center Analyst at mailbox.org
Currently, I don't see any limitations in terms of scalability as Wazuh can still connect many endpoints.
Security Consultant at ebenezer.okoh@agorasecurity.it
Scalability depends on the configuration and the infrastructure resources like compute and memory we allocate.
Tech Lead at a tech vendor with 201-500 employees
 

Stability Issues

Sentiment score
7.9
Splunk Cloud Platform is praised for 99.9% availability, minimal issues, and quick resolution, ensuring high user-rated stability.
Sentiment score
6.2
Wazuh is generally stable, though updates may cause issues; proper maintenance and installation minimize potential disruptions.
The stability of Wazuh is strong, with no issues stemming from the solution itself.
Tech Lead at a tech vendor with 201-500 employees
The stability of Wazuh is largely dependent on maintenance.
Security Operations Center Analyst at mailbox.org
The indexer frequently times out, requiring system restarts.
Cyber Security Software Engineer at a tech services company with 11-50 employees
 

Room For Improvement

Splunk Cloud users face high costs, limited training, integration challenges, insufficient documentation, performance issues, and complex setup.
Wazuh needs user interface improvements, scalability, integration, enhanced cloud security, better documentation, and reduced resource consumption for effectiveness.
Splunk Cloud Platform needs improvement in its security offerings, specifically in cybersecurity.
Sr Manager at Continued
Integration is a bit difficult due to the coding required for the integrations.
Business General Manager at Mutex Systems
Machine learning is needed along with understanding user behavior and behavioral patterns.
Engineer - Information Security at N-Able (Pvt) Ltd
The integration modules are insufficiently developed, necessitating the creation of custom integration solutions using tools like Logstash and PubSub.
Tech Lead at a tech vendor with 201-500 employees
I think Wazuh should improve by introducing AI functionalities, as it would be beneficial to see AI incorporated in the threat hunting and detection functionalities.
Security Consultant at ebenezer.okoh@agorasecurity.it
 

Setup Cost

Splunk Cloud Platform's high cost and complex licensing challenge small organizations and complicate budgeting due to unbundled features.
Wazuh is a cost-effective open-source platform with optional managed services and support, emphasizing affordability for enterprises.
Splunk Cloud is considered too expensive, with its two product offerings both being costly.
Sr Manager at Continued
If I were to rate the price for the product from 1 to 10, I would rate it nine.
Business General Manager at Mutex Systems
Wazuh is completely free of charge.
Security Consultant at ebenezer.okoh@agorasecurity.it
I would definitely recommend Wazuh, especially considering Fortinet's licensing model which is confusing and overpriced in my opinion.
Engineer - Information Security at N-Able (Pvt) Ltd
Totaling around two lakh Indian rupees per month.
Tech Lead at a tech vendor with 201-500 employees
 

Valuable Features

Splunk Cloud Platform offers advanced search, dashboards, real-time analysis, AI insights, multi-cloud monitoring, and reduces maintenance workload.
Wazuh offers cost-effective, flexible security solutions with features like SIEM, EDR, and compliance management for diverse environments.
The most valuable feature of Splunk Cloud Platform is its robustness and ability to ingest logs.
Sr Manager at Continued
The real-time search capability of this product enhances operational decision-making.
Business General Manager at Mutex Systems
Wazuh is a SIEM tool that is highly customizable and versatile.
Security Operations Center Analyst at mailbox.org
The system allows us to monitor endpoints effectively and collect security data that can be utilized across other platforms such as SOAR.
Security Consultant at ebenezer.okoh@agorasecurity.it
With this open source tool, organizations can establish their own customized setup.
Cyber Security Software Engineer at a tech services company with 11-50 employees
 

Categories and Ranking

Splunk Cloud Platform
Average Rating
8.2
Reviews Sentiment
6.0
Number of Reviews
58
Ranking in other categories
Data Visualization (3rd), IT Alerting and Incident Management (2nd)
Wazuh
Average Rating
7.4
Reviews Sentiment
6.1
Number of Reviews
50
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (2nd), Extended Detection and Response (XDR) (5th)
 

Mindshare comparison

While both are Systems Management solutions, they serve different purposes. Splunk Cloud Platform is designed for Data Visualization and holds a mindshare of 1.0%, up 0.4% compared to last year.
Wazuh, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.3% mindshare, down 15.3% since last year.
Data Visualization Market Share Distribution
ProductMarket Share (%)
Splunk Cloud Platform1.0%
Tableau Enterprise11.3%
Qlik Sense5.6%
Other82.1%
Data Visualization
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Wazuh7.3%
Splunk Enterprise Security7.4%
IBM Security QRadar5.6%
Other79.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

JA
Sr Manager at Continued
Needs better cybersecurity features but offers robust log ingestion
Splunk Cloud Platform needs improvement in its security offerings, specifically in cybersecurity. It has not kept pace with competitors over recent years, and integration with the Cisco ecosystem after Cisco's acquisition of Splunk has also been slow. The product should incorporate more readily available features, especially in security monitoring. The federated search feature is costly. Extracting meaningful insights beyond essential log data proves challenging due to the product's reliance on manual processes. Users must manually configure detections, develop logic for insights, and manage dashboards. While the product boasts numerous out-of-the-box capabilities, these often require extensive modification to align with specific user needs, limiting their practical applicability. Splunk Cloud Platform doesn't inherently provide visibility as a standalone product. It's a platform for building custom visibility solutions. We need to feed it data and then write logic to define what insights we want to extract. While pre-built solutions might be available in the marketplace, Splunk doesn't offer out-of-the-box visibility. If we know our requirements, we can utilize code and research to create custom dashboards, but it requires effort and expertise. The pre-built reports in Splunk Cloud Platform are generic and require manual adjustments to extract specific, granular information, which requires the user to be knowledgeable.
RS
Engineer - Information Security at N-Able (Pvt) Ltd
Has faced limitations in AI capabilities and pricing flexibility
Pricing-wise, Wazuh stands out, along with deployment flexibility and its documentation which is extremely good in comparison to Forti. The community support is also incredible. They have helped quite a bit because previously, we had a separate tool and management dashboard to do our compliance. With Wazuh, we receive that information without having to do anything extra. We just set up the SIEM and all of that information was automatically populated. The dashboards are very easy to understand and very quick with no lag or delay. I have experienced delays on Forti's dashboards, but not with Wazuh. Wazuh is quite good. In comparison to Forti, they are quite similar. They are very good at detection.
report
Use our free recommendation engine to learn which Data Visualization solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
12%
Manufacturing Company
9%
Performing Arts
5%
Computer Software Company
12%
Comms Service Provider
11%
University
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise6
Large Enterprise42
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise15
Large Enterprise8
 

Questions from the Community

What do you like most about Splunk Cloud Platform?
Splunk has sped up our response and reduced the time we spend manually monitoring any logs for ticketing tools or servers. It saves us around two hours daily.
What is your experience regarding pricing and costs for Splunk Cloud Platform?
If I were to rate the price for the product from 1 to 10, I would rate it nine.
What needs improvement with Splunk Cloud Platform?
The disadvantage of Splunk Cloud Platform is that its integration process should be improved. The challenges I have encountered while integrating Splunk Cloud Platform include that integration is a...
What do you like most about Wazuh?
Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diverse client environments. Its integration capabilities with SOAR, cloud platforms,...
What needs improvement with Wazuh?
Regarding compliance, I find it not stable. I do not recommend it for that purpose. It can comply with Wazuh NCA, which we have here in Saudi Arabia. Wazuh NCA has many frameworks starting with ECC...
What is your primary use case for Wazuh?
I have been working with Wazuh for two years, and I can explain how I use Wazuh. I did not use Wazuh as a SIEM solution. I use Wazuh as a tool for services we provide. This service is called compro...
 

Also Known As

No data available
Wazuh All-In-One Deployment
 

Overview

 

Sample Customers

Mindtouch
Information Not Available
Find out what your peers are saying about Splunk Cloud Platform vs. Wazuh and other solutions. Updated: March 2023.
881,082 professionals have used our research since 2012.