We performed a comparison between Prometheus and Splunk Enterprise Security based on real PeerSpot user reviews.
Find out in this report how the two Application Performance Monitoring (APM) and Observability solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It is a stable solution...Based on the feedback I have received from my colleagues in our company's IT department, the setup phase of the solution is relatively easy."
"The solution can be deployed in thirty minutes."
"The most valuable feature is that we can receive information in different formats."
"The scalability of Prometheus is very good."
"It is a scalable solution."
"The dashboard is very valuable."
"It is an efficient solution."
"The most valuable features of Prometheus are the many functions available. The functions are helpful for understanding the behavior of applications and infrastructure."
"The most valuable features of Splunk Enterprise Security are its high-performance data collection, flexible query language, and its versatility across the organization."
"I like the ease with which dashboards can be created."
"It has virtual visualization, and other products do not."
"Great platform with user-friendly interface and GUI."
"Positive features include replication capabilities, software development kits, and the architecture."
"Its usability is the best part. It is easy for our developers to use if they want to search their logs, etc."
"Splunk Enterprise Security is able to process a huge amount of data without any issues."
"Splunk is quite flexible for our customers. Splunk does not filter from a specific lock, you can define it later."
"Prometheus' UI color can improve. Using the Prometheus UI for configuration or analyzing queries is a horrible experience."
"The solution has shortcomings regarding security monitoring-oriented features to support custom use cases, like out-of-the-box test scenarios and threat-related use cases of its users."
"The product must improve its documentation."
"The scalability must be improved."
"Prometheus can definitely improve its visualization. For example, the matrices represented in Prometheus do not have a very good visualization on their dashboard."
"If you are not quite technical, it can be pretty hard to understand the way it works and how to query data in Prometheus."
"The UI and GUI are areas of concern in the product."
"Prometheus requires improvement on the query side."
"The solution could use a different licensing model."
"They can incorporate the SOAR solution within the actual product so that we do not require two different products, two different installations, and two different pricing methods. In regards to UBA, I am familiar with the UBA that existed two years ago. I am not updated about it today, but two years ago, UBA required such an amount of data that from a cost perspective, it was not worth it. When you compare it to what you get out of the box with Microsoft Sentinel without additional costs, there is no match."
"Splunk's ability to analyze malicious activities scores an 8 out of 10, but there's room for improvement. By analyzing emerging patterns, Splunk could identify and predict potential threats more effectively."
"Splunk is query-based, which is not the case with most cybersecurity tools. It is based on search queries and can be difficult to use. It would be good if they can make it easier to understand how to create search queries. They can improve the knowledge base for better understanding. To create your dashboard, you need to have a search query. We have multiple firewalls in our company, and we need a dashboard for them. It would be helpful if a default firewall dashboard is included in Splunk to make monitoring easier. If a dashboard is available for a security device, the operation part will be more efficient. We won't have to follow a manual process for this."
"Not even Splunk's support guy, who came to our firm, could help with defining proper role management."
"Enterprise security: Splunk must work on clarifying the solution to customers and explain how to gain more from it."
"For on-premise, it's more about optimization. With such a heavy byte scale of data that we are operating on, the search for disparate data sometimes takes about a minute. This is understandable considering the amount of data that we are pumping into it. The only optimization that I recommend is better sharding, when it comes to Splunk, so that data retrieval can be faster."
"The training was mostly sales-focused, like how to monitor your sales. It was hard to then come back from doing the training and try to switch it to a cybersecurity focus because all the training we did was sales oriented. The basic training didn't really touch on any kind of cybersecurity use cases or anything like that. That would have been great to see in the training."
Prometheus is ranked 9th in Application Performance Monitoring (APM) and Observability with 32 reviews while Splunk Enterprise Security is ranked 1st in Security Information and Event Management (SIEM) with 246 reviews. Prometheus is rated 8.4, while Splunk Enterprise Security is rated 8.4. The top reviewer of Prometheus writes "A very flexible open box that can be used vastly to do anything you need". On the other hand, the top reviewer of Splunk Enterprise Security writes "It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query ". Prometheus is most compared with Azure Monitor, New Relic, Dynatrace, Sentry and AWS X-Ray, whereas Splunk Enterprise Security is most compared with Wazuh, IBM Security QRadar, Dynatrace, Elastic Security and Microsoft Sentinel. See our Prometheus vs. Splunk Enterprise Security report.
We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
