No more typing reviews! Try our Samantha, our new voice AI agent.

Splunk Observability Cloud vs ThreatSync NDR comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 18, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Splunk Observability Cloud
Ranking in Network Monitoring Software
5th
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
106
Ranking in other categories
Application Performance Monitoring (APM) and Observability (5th), IT Infrastructure Monitoring (2nd), Cloud Monitoring Software (2nd), Container Management (10th), Digital Experience Monitoring (DEM) (3rd)
ThreatSync NDR
Ranking in Network Monitoring Software
55th
Average Rating
8.6
Reviews Sentiment
8.7
Number of Reviews
2
Ranking in other categories
Network Detection and Response (NDR) (18th)
 

Mindshare comparison

As of November 2026, in the Network Monitoring Software category, the mindshare of Splunk Observability Cloud is 1.6%, up from 1.3% compared to the previous year. The mindshare of ThreatSync NDR is 0.3%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Monitoring Software Mindshare Distribution
ProductMindshare (%)
Splunk Observability Cloud1.6%
ThreatSync NDR0.3%
Other98.1%
Network Monitoring Software
 

Featured Reviews

PK
Project Manager at AGRICULTURE SKILL COUNCIL OF INDIA (ASCI)
Unified observability has improved real-time governance and now drives data-led decisions
Log Observer Connect is embedded here, but we are facing some delays in centralized log collection and analysis, which can be further fastened. We are collecting all the data metrics and decision-making insights, but all these data-driven decisions coming from different applications are not connected somewhere. A consolidated form or correlation of these insights is not happening between each other due to which we feel we are missing something significant. Some generalized feedback includes that predictive alerts or alarms which can be integrated with AI-driven alarms and alerting features should be established so that there is AI-driven intelligence and anomaly detection happening with a complete systematic process in service delivery. Application dependencies are huge, and business and operational dashboards should be improved. Right now there are very interactive custom dashboards, and every now and then, the personalization of enhancements keeps happening. KPI monitoring, executive reporting, and analytics have definitely been introduced to a great extent. There are few things in cloud-native monitoring, such as integration with AWS and Azure, where we sometimes do face lags. Those things can definitely be improved upon. I have used Datadog and Dynatrace before using Splunk Observability Cloud. Datadog was definitely recommended by most of our peers because of its very strong comprehensive observability and very strong and unique dashboard systems. Dynatrace was also very good because they have offered a lot of AI-driven analysis methods and processes, which was helping our organization a lot. Since our organization has a very strong IT ecosystem for agriculture, very different kinds of customized things are required.
RickyMakkar - PeerSpot reviewer
Senior Network Security Consultant at NTT DATA
Unified monitoring has improved hybrid visibility and automates threat detection across our network
There are definitely areas for improvements in ThreatSync NDR, as no product is perfect. Its effectiveness depends on proper network visibility, so if important traffic segments are not mirrored or monitored, detection may be incomplete. Regarding improvements needed, ThreatSync NDR can definitely work on the user interface because it is currently a bit complex, and security teams sometimes find it unfamiliar with the behavioral analytics. If they can make it more user-friendly, that would help. Regarding ThreatSync NDR's AI capabilities, I think its governance and security are not fully enabled. While AI-assisted threat detections are there, it still requires significant improvements. However, the positive aspect is that it has significantly reduced the manual tasks and work of the security personnel.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution overall is very valuable for me."
"Splunk Observability Cloud has optimized our solutions and helped us understand the metrics."
"Splunk Observability Cloud has impacted my organization positively by allowing management access to the logs, dashboards, and metrics they need to operate a high functioning team and product."
"Splunk Observability Cloud has positively impacted my organization by allowing us to have visibility into the environment."
"Splunk Infrastructure Monitoring reduces our mean time to resolve. We are more proactive than reactive."
"The best feature of this product is the latency and processing of all the telemetry that is being received, which gives full visibility at the right time."
"The Add data feature lets you gather any type of log and easily analyze it, which is easier than using other solutions like ArcSight or Elasticsearch, and we can use these logs with our data processes to explain our situation."
"After moving to Splunk Observability Cloud, it is almost zero downtime."
"ThreatSync NDR is a strong addition to our company's security architecture."
"Implementing ThreatSync+ NDR has influenced our business significantly as it provides enhanced security and saves several hours daily by eliminating manual log reviews."
 

Cons

"The security could be better."
"The RUM part of Splunk Observability Cloud can be improved significantly."
"I would like to see a very detailed tutorial about it and how any newcomer can be able to use it."
"One thing I recently ran into was that the logs on the server most often get Gzipped after they have been rotated. We found that we were not monitoring some of the things, so we had to go back and pull them in. Right now, it pulls one at a time, untars it, or unzips it, so I cannot look at the entire history. There can be an improvement in that area."
"Regarding dashboard customization, while Splunk has many dashboard building options, customers sometimes need to create specific dashboards, particularly for applicative metrics such as Java and process terms. These categories of dashboards would be very helpful for customers."
"Splunk could be better integrated with configuration manager solutions so we can automatically resolve issues without human interference."
"The price of this solution is very high and can be improved."
"I've only experienced downtime, crashes, or performance issues when it isn't configured correctly."
"After using ThreatSync+ NDR for about a year, areas for improvement include the ability to pull logs from other vendors using an API."
"There are definitely areas for improvements in ThreatSync NDR, as no product is perfect. Its effectiveness depends on proper network visibility, so if important traffic segments are not mirrored or monitored, detection may be incomplete."
 

Pricing and Cost Advice

"The solution's pricing is costly."
"I am not in that circle, but we are currently licensing based on our queries. That is working out for us. Previously, it was by volume of data, and now, we can store as much data as we want."
"I would rate the price of Splunk Infrastructure Monitoring as an eight out of ten, with ten being the most expensive."
"The price of Splunk APM is less than some of its competitors."
"The pricing is reasonable."
"Splunk Infrastructure Monitoring is an expensive solution."
"The product is a bit expensive considering the competition but the company may negotiate the price."
"The solution's pricing is competitive. I rate the solution's pricing a seven out of ten. The price of the solution could be cheaper."
Information not available
report
Use our free recommendation engine to learn which Network Monitoring Software solutions are best for your needs.
920,574 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
9%
Outsourcing Company
8%
Construction Company
7%
Comms Service Provider
19%
Construction Company
13%
Outsourcing Company
12%
University
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise9
Large Enterprise70
No data available
 

Questions from the Community

What needs improvement with SignalFx?
Regarding dashboard customization, while Splunk has many dashboard building options, customers sometimes need to create specific dashboards, particularly for applicative metrics such as Java and pr...
What is your primary use case for SignalFx?
The solution involves observability in general, such as Application Performance Monitoring, and generally addresses digital applications, web applications, sites, and mobile applications. I worked ...
What advice do you have for others considering SignalFx?
We're a customer and end-user. Currently, in France, we cannot use the artificial intelligence option. While this option is enabled for the United States and many countries, it's not yet available ...
What needs improvement with ThreatSync+ NDR?
There are definitely areas for improvements in ThreatSync NDR, as no product is perfect. Its effectiveness depends on proper network visibility, so if important traffic segments are not mirrored or...
What is your primary use case for ThreatSync+ NDR?
I use ThreatSync NDR for monitoring across our hybrid and cloud infrastructure. For monitoring in our hybrid and cloud infrastructure using ThreatSync NDR, we investigate indicators such as IP addr...
What advice do you have for others considering ThreatSync+ NDR?
If I am evaluating an NDR solution for medium to large enterprises, especially with our experience using it with our WatchGuard security products, ThreatSync NDR delivers strong visibility, intelli...
 

Also Known As

Splunk Infrastructure Monitoring, Splunk Real User Monitoring (RUM), Splunk Synthetic Monitoring
No data available
 

Overview

 

Sample Customers

Sunrun, Yelp, Onshape, Tapjoy, Symphony Commerce, Chairish, Clever, Grovo, Bazaar Voice, Zenefits, Avalara
Information Not Available
Find out what your peers are saying about Splunk Observability Cloud vs. ThreatSync NDR and other solutions. Updated: November 2026.
920,574 professionals have used our research since 2012.