Try our new research platform with insights from 80,000+ expert users

Splunk Enterprise Security vs VMware Aria Operations for Applications comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
375
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
VMware Aria Operations for ...
Average Rating
8.0
Reviews Sentiment
6.3
Number of Reviews
14
Ranking in other categories
Application Performance Monitoring (APM) and Observability (20th), IT Infrastructure Monitoring (17th), Container Monitoring (6th), Cloud Monitoring Software (15th)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. Splunk Enterprise Security is designed for Security Information and Event Management (SIEM) and holds a mindshare of 7.1%, down 9.8% compared to last year.
VMware Aria Operations for Applications, on the other hand, focuses on Cloud Monitoring Software, holds 2.1% mindshare, up 1.4% since last year.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security7.1%
Wazuh6.4%
IBM Security QRadar5.4%
Other81.1%
Security Information and Event Management (SIEM)
Cloud Monitoring Software Market Share Distribution
ProductMarket Share (%)
VMware Aria Operations for Applications2.1%
Zabbix9.6%
Datadog6.5%
Other81.8%
Cloud Monitoring Software
 

Featured Reviews

reviewer1469784 - PeerSpot reviewer
Senior Manager at a financial services firm with 10,001+ employees
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.
AS
Consultant at HCLTech
Automation and insightful diagnostics elevate operations while improvements are welcome
The new version 8.18 has brought significant improvements. The main purpose of using this tool is having a single console to manage all entities. The cloud integration capabilities, including private, public, and hybrid, are already well-implemented. The ability to manage multiple vCenters across different geographical locations is very effective. The new Skyline health feature and certificate and licensing management are particularly useful improvements. The dashboard's overview tab provides comprehensive information about current vCenter status, resizable amounts, reclamation opportunities, anomalies, diagnostics, licensing, and certificates. However, there is room for improvement in application analysis. The current functionality lacks detailed monitoring at the kernel level, focusing mainly on CPU, memory, and storage matrices. Enhanced application monitoring capabilities, including tracking downtime for specific types of applications such as transactional or e-commerce applications, would be beneficial.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Splunk is extremely flexible, which allows us to create custom visualizations along with other customizations."
"The integration and plugin availability are nice, and the AI module is also great."
"Splunk Enterprise Security is doing its job in helping improve my organization's business resilience."
"It's basically one of the best SIEM products on the market."
"We have a one stop dashboard for health of some of our services where you can click in and it takes you to other dashboards that have custom near real-time metrics that show the application's health."
"The correlation searches (properly configured) populate the Incident Management dashboard and provide me a quick birds-eye view of my most important concerns."
"It is very scalable."
"The ability to identify risks as they come in is quite good."
"For us, the ease of deployment in combination with TMZ was the most important part because we don't have to manually deploy a complex monitoring solution. We can more or less do that with the click of a button, and we are not dependent on the developers to provide us with all the necessary features and functions to make that work. We can just deploy it on a workload cluster and monitor at least a good part of the workload. If we want to go into detail, we clearly need to make changes, but for a good part of application monitoring, it gives us good insights."
"People are very pleased with the implementation."
"This solution allows me to have true visibility for any metrics when it comes to my cloud, and private."
"It significantly improves application performance management by offering recommendations for resource allocation to avoid wastage or overcommitment."
"No issues with stability."
"Tanzu itself, integrated with multiple solutions, bestows support and security upon a container platform, especially when it comes to managing open-source container platforms such as Kubernetes."
"The solution provides single-console management for multiple VMware environments and cloud integrations, whether hybrid, private, or public cloud."
"I gladly recommend VMware Aria Operations for Applications because it is cost effective and has commendable AI response capabilities."
 

Cons

"While Splunk Enterprise Security is powerful, it presents significant complexity for users, as it's not particularly user-friendly for beginners."
"Splunk Enterprise Security is complicated in terms of developing specific cybersecurity use cases."
"Splunk could enhance its services by providing more comprehensive professional assistance aimed at optimizing our investment."
"Endpoint access is the only issue I can think to mention, even though the endpoint access we have with Cisco is fine."
"​On the technical side, it would be nice to see aspects of the recent acquisition of Phantom make it into the core Splunk Enterprise, not just become a part of the premium Enterprise Security.​"
"The solution's case management system could be further improved to make it easier for analysts to manage cases."
"Missing capability for audio/video and image processing."
"Splunk Enterprise Security would benefit from a more robust rule engine to reduce false positives."
"It could use a URL document server. Everything in the market is moving towards automation and everybody's looking for the single click operations as well relational data locality."
"In the new version, I would love to see more prediction capabilities. It would be great if one could see the alerts get a little more enriched with information and become more human-friendly instead of the technical stuff that they put in there. I think those would be really awesome outcomes to get."
"The return on investment is best suited for organizations that do not have the resources for a dedicated VM environment team. However, the cost of the product doesn't show significant benefits."
"The solution could be expensive, which might be a limiting factor."
"The implementation is a long process that should be improved."
"The solution could be expensive, which might be a limiting factor."
"The initial setup should be easier and more seamless."
"They could make it more easy to plug-in data so that a nontechnical person will be able to use it, like accountants or finance people. That way they don't have to ask us."
 

Pricing and Cost Advice

"It is a bit costly."
"I am not personally involved with the pricing of the solution."
"Splunk has always been on the expensive side."
"The pricing is a little bit on the higher side, but looking at what Splunk provides us, it is reasonable."
"Splunk Enterprise becomes extremely expensive after the 20GB/month license."
"Splunk Enterprise Security is not a cheap product, but I think it is worth every dollar that you pay."
"Splunk licensing model might seem expensive but with all the gain in functionalities you will have compared to traditional SIEM solutions I think it’s worth the price."
"Splunk Enterprise Security is a bit expensive overall, but it provides good value."
"Different locations require different setups. In your terms, around 300 to around 400K USD."
"The licensing costs are very high, particularly when you consider that we have to purchase a level 1 license for every integration, such as the load balancer, HAProxy, and the MSSP. And if you want to use vSAN, that's another license. Then, of course, Tanzu Observability has its own separate license."
"I don't have the details. In our case, there is a mixture in place. We have production usage, and we are also doing training for VMware. So, we also have a training instance. It is worth the money you would spend on it. That's because if you were to build all of this yourself by using some of the open source tools, then you would need a lot of time."
"I would rate the pricing as three out of five."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
10%
Manufacturing Company
9%
Government
6%
Financial Services Firm
12%
Manufacturing Company
11%
Government
8%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business109
Midsize Enterprise50
Large Enterprise264
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise10
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
What is your experience regarding pricing and costs for VMware Tanzu Observability by Wavefront?
The solution includes cost drivers that can be configured according to your environment. You can input server-wise, CPU-wise, storage, and memory costs per hour or day. Once cost drivers are provid...
What needs improvement with VMware Tanzu Observability by Wavefront?
The new version 8.18 has brought significant improvements. The main purpose of using this tool is having a single console to manage all entities. The cloud integration capabilities, including priva...
What is your primary use case for VMware Tanzu Observability by Wavefront?
I have been involved in several projects where I had to implement automation and monitoring alerting. I performed automation using VMware Aria Operations for Applications. There is an automation ta...
 

Also Known As

No data available
Tanzu Observability, Wavefront, Wavefront by VMware, VMware Tanzu Observability
 

Overview

 

Sample Customers

Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
1. Atlassian 2. Cisco 3. Databricks 4. DigitalOcean 5. Equinix 6. Fidelity Investments 7. Google 8. Hewlett Packard Enterprise 9. Honeywell 10. IBM 11. Intel 12. JetBlue Airways 13. LinkedIn 14. Lyft 15. Mastercard 16. Microsoft 17. MongoDB 18. Netflix 19. Nvidia 20. Oracle 21. PayPal 22. Pinterest 23. Qualcomm 24. Red Hat 25. Salesforce 26. SAP 27. Spotify 28. Square 29. TMobile 30. Twitter 31. Uber 32. VMware
Find out what your peers are saying about Splunk Enterprise Security vs. VMware Aria Operations for Applications and other solutions. Updated: May 2023.
881,733 professionals have used our research since 2012.