Try our new research platform with insights from 80,000+ expert users

Splunk Enterprise Platform vs Splunk ITSI (IT Service Intelligence) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.2
Splunk Enterprise enhances security and performance, reduces troubleshooting time, and improves productivity with efficient data management and powerful search capabilities.
Sentiment score
6.2
Splunk ITSI enhances efficiency, reducing resource costs by 35%, improves incident resolution time, and boosts business resilience.
Splunk Enterprise Platform saves approximately 20 to 30 percent of my time without having to perform different actions separately.
Manager Recruitment at tata elxsi
We estimate a 30 to 35 percent saving on resource costs and around 25 to 30 percent savings on inventory expenses, all credited to utilizing Splunk ITSI (IT Service Intelligence) effectively.
SIEM Splunk Engineer/Architect at Cepheid
Risks can mean that if one failure happens, it can result in risks in hundreds of thousands of USD.
Technology And Digitization Lead at JLL
It has saved me a lot of money and a lot of time.
IT Associate at Accenture
 

Customer Service

Sentiment score
6.6
Splunk Enterprise Platform has mixed support satisfaction, with users relying on community resources and varying in rating support effectiveness.
Sentiment score
6.6
Splunk ITSI's customer support is valued for effectiveness but criticized for slow response times and regional support issues.
It is crucial for anyone looking to deploy Splunk Enterprise Platform to first certify for their courses, such as the Splunk Administrator and the Power User Administrator certifications, which address all troubleshooting queries.
SOC A2 at Innodata-ISOGEN
When we encounter issues, we utilize the Splunk community, which I believe showcases a big advantage of Splunk due to its strong community support.
Security Consultant at ITSEC Asia
I have no problem with the technical support provided by Splunk Enterprise Platform at all.
Security Consultant at a tech vendor with 5,001-10,000 employees
The technical support is excellent, and I would rate it at ten.
Senior consultant at a tech services company with 51-200 employees
We typically have weekly calls with the technical staff, and whenever we encounter issues, they usually reply with solutions within one or two days.
Senior Consultant at a consultancy with 10,001+ employees
I would rate Splunk ITSI (IT Service Intelligence) support at nine or 9.5 because it is a highly effective and handy tool.
Splunk Developer ( Training & Enablement) at DXC Technology
 

Scalability Issues

Sentiment score
7.7
Splunk Enterprise Platform is scalable, integrates well, supports cloud transitions, and distributed deployment for efficient data management.
Sentiment score
7.7
Splunk ITSI efficiently manages data growth with high scalability, supporting large volumes, despite cost and hardware challenges.
Splunk allows for scalability, as you can start with an all-in-one instance and, as your deployment grows, split it into distributed deployment, such as separating the search head and indexers.
Security Consultant at ITSEC Asia
Some products can automatically scale, but Splunk requires manual configuration changes to achieve scale, which is slightly outdated compared to modern technologies.
Consultant at Artifield
If the server is down, I can upgrade the server resources or create a new node for performance optimization.
SOC A2 at Innodata-ISOGEN
Splunk is highly scalable, with the ability to expand efficiently.
Senior consultant at a tech services company with 51-200 employees
When we create Glass Tables containing many searches, the Glass Tables sometimes fail due to memory constraints, and we receive error pages.
Senior Consultant at a consultancy with 10,001+ employees
Splunk ITSI (IT Service Intelligence) scalability allows us to predict analytics such as service degradation and perform root cause analysis through metrics, logs, and traces.
Sr. Technical Manager at Vodafone
 

Stability Issues

Sentiment score
8.2
Splunk Enterprise is praised for stability, ease of use, security, and performance, with strong support in complex environments.
Sentiment score
7.7
Splunk ITSI offers strong stability and reliability, with minor issues typically related to hardware or configuration rather than software.
It requires managing configuration files and processing operations manually, limiting its auto-scaling capabilities.
Consultant at Artifield
Splunk Enterprise Platform is stable when not integrating or adding new devices continuously.
SOC A2 at Innodata-ISOGEN
It was straightforward for me and my team, with no complexities involved.
Senior Manager at Bank of America
The setup, however, must be done correctly as incorrect deployment can lead to issues.
Senior consultant at a tech services company with 51-200 employees
Splunk ITSI (IT Service Intelligence) fails if you do not have good hardware requirements.
Senior Consultant at a consultancy with 10,001+ employees
I would rate the stability of Splunk ITSI (IT Service Intelligence) as a perfect ten; it is an extremely stable tool.
Splunk Developer ( Training & Enablement) at DXC Technology
 

Room For Improvement

Users seek enhanced support, lower costs, integration ease, advanced automation, AI capabilities, better dashboards, and improved permissions.
Splunk ITSI requires better integration, predictive analytics, UI improvements, easier installation, automation, AI observability, training resources, and documentation.
The deep learning capabilities need enhancing, especially on Splunk Cloud, where customers find it challenging to use deep learning tools without setting up backend computing resources.
Consultant at Artifield
It is complex for inexperienced cybersecurity engineers and requires experienced personnel to handle it effectively.
Regional Director at iSecureMind
The cost is the most significant area for improvement in Splunk Enterprise Platform, as it is quite expensive, causing many clients to differ due to this reason.
SOC A2 at Innodata-ISOGEN
I would appreciate additional features in the next release of Splunk ITSI (IT Service Intelligence) such as cloud infrastructure monitoring including CICDs, Kubernetes, and similar technologies.
Director at Techpace
On-cloud upgrades are easy, but on-premises upgrades are very painful.
Technology And Digitization Lead at JLL
If Splunk ITSI (IT Service Intelligence) could handle real-time call-outs automatically—not just incident creation—this would reduce our dependency on PagerDuty and consolidate processes within Splunk ITSI (IT Service Intelligence).
Monitoring Dev Ops Engineer at Centrica
 

Setup Cost

Splunk Enterprise is costly for small businesses, with mixed reviews on value but potential benefits for larger organizations.
Splunk ITSI is pricey, tied to data volume, but valued for capabilities; Cisco acquisition may impact pricing strategies.
The pricing model is based on ingesting data sizes, not user count, and includes a free tier for up to 500 MB of daily data.
Consultant at Artifield
Splunk Enterprise Platform is expensive.
Regional Director at iSecureMind
Regarding pricing, I remember that Splunk is generally more expensive than SIEMs such as Microsoft Sentinel and Securonix, while it is also pricier than Elastic Security.
Security Consultant at ITSEC Asia
Splunk ITSI tends to be more expensive compared to some open-source solutions.
Senior consultant at a tech services company with 51-200 employees
I believe the pricing is based on daily volume ingestion.
Senior Consultant at a consultancy with 10,001+ employees
The pricing reflects usage levels, and compared to others in the market, Splunk ITSI (IT Service Intelligence) provides a reasonable solution.
Works at a tech services company with 1,001-5,000 employees
 

Valuable Features

Splunk Enterprise provides customizable dashboards for efficient data analysis, advanced threat detection, and seamless integration with IT systems.
Splunk ITSI enhances operational efficiency with intelligent alerting, customizable dashboards, event correlation, predictive analytics, and integration capabilities.
Splunk Enterprise Platform also has its own Phantom as a SOAR, which is much more refined and gives more accurate results than any other AI integrated SIM tool.
SOC A2 at Innodata-ISOGEN
The anomaly detection is very good for live production data. Whenever an anomaly comes in an application, it automatically resolves and just gives the notification.
Technical Lead at a financial services firm with 10,001+ employees
Splunk Enterprise Platform will create an incident and detect this as a credential compromise because we have a successful login from another location.
Cybersecurity Team Leader at EMAK For Computer Manufacturing (ECM)
The predictive analysis can give you proactive information about potential bottlenecks that can occur on applications, desk, storage, SQL servers, databases, or other systems.
Director at Techpace
One valuable feature is the scheduled maintenance window provided by Splunk ITSI (IT Service Intelligence) because Splunk does not offer this scheduling maintenance feature in the core product, but Splunk ITSI (IT Service Intelligence) helps us with these maintenance reports.
Senior Consultant at a consultancy with 10,001+ employees
The most beneficial aspect for me is that it is AI-enabled, providing us with very good analytics.
Technology And Digitization Lead at JLL
 

Categories and Ranking

Splunk Enterprise Platform
Ranking in IT Alerting and Incident Management
5th
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
39
Ranking in other categories
Data Visualization (6th)
Splunk ITSI (IT Service Int...
Ranking in IT Alerting and Incident Management
3rd
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
61
Ranking in other categories
Application Performance Monitoring (APM) and Observability (11th)
 

Mindshare comparison

As of March 2026, in the IT Alerting and Incident Management category, the mindshare of Splunk Enterprise Platform is 2.5%, up from 1.4% compared to the previous year. The mindshare of Splunk ITSI (IT Service Intelligence) is 1.9%, down from 4.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Alerting and Incident Management Mindshare Distribution
ProductMindshare (%)
Splunk ITSI (IT Service Intelligence)1.9%
Splunk Enterprise Platform2.5%
Other95.6%
IT Alerting and Incident Management
 

Featured Reviews

FK
SOC A2 at Innodata-ISOGEN
Has streamlined data integration and enabled real-time dashboard visualizations through a powerful search engine
Splunk Enterprise Platform has a vast and versatile powerful search engine with which I can handle all queries, and creating use cases and the search and dashboard is the main selling point, allowing me to visualize live dashboards. The platform has a powerful search engine, allowing the integration of custom AI such as ChatGPT. Splunk Enterprise Platform also has its own Phantom as a SOAR, which is much more refined and gives more accurate results than any other AI integrated SIM tool. In anomaly detection, I can live track anomalies and change the registry. Splunk Enterprise Platform serves as a time-saving solution because integrating other sources such as Syslog or router switch firewall is much easier.
DS
Senior Consultant at a consultancy with 10,001+ employees
Service health has been monitored and visual insights support proactive telecom operations
The installation process is the first aspect I dislike about Splunk ITSI (IT Service Intelligence). If you do not configure it correctly, you will encounter issues in the search head. Because we use a distributed environment where each component has its own specific roles, installation is critical and requires careful attention. Splunk ITSI (IT Service Intelligence) is built with many applications. It is a compressed file, and when you extract the Splunk ITSI (IT Service Intelligence) app, you receive approximately 19 apps. Some applications, add-ons, and packages must be installed on specific components. If you do not configure an application correctly, it will not work. Sometimes we encounter issues during installation because of this complexity. I believe the installation process should be more uniform, meaning it could be deployed across all components to avoid post-installation issues. Sometimes after installation, you receive errors, and users cannot access Splunk ITSI (IT Service Intelligence). We have experienced this type of issue due to installation errors. I believe there is currently room for improvement regarding scalability. When we create Glass Tables containing many searches, the Glass Tables sometimes fail due to memory constraints, and we receive error pages. Splunk ITSI (IT Service Intelligence) should have a lightweight version to address these concerns. I would rate current scalability as medium.
report
Use our free recommendation engine to learn which IT Alerting and Incident Management solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Healthcare Company
11%
Hospitality Company
11%
Insurance Company
10%
Manufacturing Company
7%
Financial Services Firm
16%
Manufacturing Company
10%
Computer Software Company
7%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise2
Large Enterprise26
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise10
Large Enterprise43
 

Questions from the Community

What do you like most about Splunk Enterprise Platform?
The most valuable features of the solution are the load balancing technique, the forwarding technique, and SSL certification.
What needs improvement with Splunk Enterprise Platform?
I think the machine learning toolkit is fine, but when I talk about threat intelligence, it is not that effective. Since recently, I think Splunk Enterprise Platform has acquired Cisco, which has a...
What is your primary use case for Splunk Enterprise Platform?
The most valuable feature I have found so far is the correlation rule. That seems to be very valuable for us. I can create any alert using the correlation rule, which seems to be interesting for me...
What is your experience regarding pricing and costs for Splunk ITSI (IT Service Intelligence)?
Regarding pricing, since Splunk ITSI (IT Service Intelligence) is a flavor of Splunk, there are no fixed prices as it depends on data volume. It is indeed a premium app within Splunk. The pricing r...
What needs improvement with Splunk ITSI (IT Service Intelligence)?
As per my analysis of Splunk ITSI (IT Service Intelligence), I do not see much room for improvement. My experience as a mid-level user suggests that deep knowledge is helpful to maximize the tool's...
 

Overview

 

Sample Customers

Information Not Available
TransUnion, Cox Automotive, Carnival Cruises, Leidos, Econocom, National Ignition Factory, Entrust Datacard, Molina Healthcare, United States Census Bureau
Find out what your peers are saying about Splunk Enterprise Platform vs. Splunk ITSI (IT Service Intelligence) and other solutions. Updated: March 2026.
884,873 professionals have used our research since 2012.