No more typing reviews! Try our Samantha, our new voice AI agent.

Datameer vs Splunk Enterprise Security comparison

Why PeerSpot?

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Datameer
Average Rating
7.2
Number of Reviews
4
Ranking in other categories
BI on Hadoop (3rd)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
468
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

Datameer and Splunk Enterprise Security aren’t in the same category and serve different purposes. Datameer is designed for BI on Hadoop and holds a mindshare of 15.0%, up 8.1% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 8.2% mindshare, down 9.1% since last year.
BI on Hadoop Mindshare Distribution
ProductMindshare (%)
Datameer15.0%
AtScale Adaptive Analytics (A3)24.2%
JethroData15.8%
Other45.0%
BI on Hadoop
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security8.2%
IBM Security QRadar5.6%
Wazuh3.8%
Other82.4%
Security Information and Event Management (SIEM)
 

Featured Reviews

it_user357459 - PeerSpot reviewer
Hadoop Developer at a tech services company with 10,001+ employees
It helps to onboard and enrich data quickly as it does not involve writing scripts or queries, but the transformation functions can be more mature.
The most valuable feature are the data transformation functions in the workbook It helps to onboard and enrich data quickly as it does not involve writing scripts or queries. Maintenance is easy. We would like to have more inbuilt connections to different types of sources. The transformation…
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature are the data transformation functions in the workbook."
"Datameer has around 400 inbuilt functions that are very useful for any beginner and also it has a good visualization which helps end user to see that how the trend is showing."
"Customer Service: It's very good."
"The built-in smart analytic tools are the most valuable features for me."
"Speeds up root cause analysis and can help identify issues that your organization never realized were occurring."
"We were able to create a catalog of dashboards and have a holistic view at all levels. We could understand our business much better. Real-time errors, which were buried in emails before now, surfaced up on dashboards."
"It helped us consolidate all our solutions into an easy tool to use for various employees."
"One of the best features Splunk Enterprise Security offers is integrating everything into one platform."
"The advantages of Splunk over its competitors include the unified platform which includes everything from security to logging."
"It provides logs in one place, so they are easy to find. It collects the logs from multiple places, then you have just one place where you see the whole flow from the front-end to the back-end."
"The tool helps with advanced reports and keeps the system scalable and flexible. It provides a clear picture of the current status of any incidents. As a CISO, I see a lot of potential for future innovation, which is interesting. I've noticed better performance, especially with the reports."
"Splunk Enterprise Security has reduced the team's average mean time to resolve by about 70%, with resolution times dropping from between 20 minutes to about an hour to just under 10 minutes using Agentic AI together with Splunk Enterprise Security."
 

Cons

"It needs better integration with other enterprise technologies out of the box."
"Although this tool is very good, it has some limitations that I think could be removed in later versions."
"It is a good tool from an analysis perspective, but is not suitable for IT."
"When I run the single license on my MacBook Pro, the memory space can be an issue."
"The biggest problem is data compression. Splunk is an outstanding product, but it is a resource hog. There should be better data compression for being able to maintain our data repositories. We end up having to buy lots of additional storage just to house our Splunk data. This is my only complaint about it."
"We would like more integrations with other cloud products, not just AWS, e.g., Azure."
"Their sales support and tech support are really bad. They take really long to respond."
"The GUI can be improved to include some of the capabilities that other BI solutions have."
"DMC should be a little more intuitive with better dashboarding. Seeing the cause of data flow can be tough to track down."
"Splunk's ability to analyze malicious activities scores an 8 out of 10, but there's room for improvement. By analyzing emerging patterns, Splunk could identify and predict potential threats more effectively."
"Their technical support sucks."
"Pricing is certainly an area that could use improvement. While some vendors may offer lower prices, the value we receive here truly sets this solution apart."
 

Pricing and Cost Advice

Information not available
"As a team, we prefer the old pricing model with a perpetual license. We are still evaluating the whole subscription-based model."
"Splunk Enterprise Security is cheaper than competitors, but I do not know whether it is just our contract."
"It is a bit costly."
"The pricing depends on the bandwidth of an organization and is good compared to some SIEM tools. IBM, for example, is quite costly. But Microsoft Sentinel is notably cheaper."
"The pricing of Splunk Enterprise Security is high."
"Splunk Enterprise Security's pricing is competitive."
"I work on the technical side, so I don't know precise figures. However, I know that Splunk is a premium product, so it's somewhat costly. Still, you get a lot of unique features for the money."
"It can be cost-prohibitive when you start to scale and have terabytes of data. Its cost model is based on how much data it processes a day. If they're able to create scaled-down niche or custom package offerings, it may help with the cost. Instead of the full-blown features, if they can narrow the scope where it can only be used for a specific purpose, it would kind of create that market for the product, and it may help with the costing. When you start using it as a central aggregator and you're pumping tons of logs at it, pretty soon, you'll start hitting your cap on what it can process a day. Once you've got that, you're kind of defeating the purpose because you're going to have to scale back."
report
Use our free recommendation engine to learn which BI on Hadoop solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
No data available
Outsourcing Company
12%
Financial Services Firm
11%
Manufacturing Company
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business135
Midsize Enterprise74
Large Enterprise320
 

Questions from the Community

Ask a question
Earn 20 points
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Trustev, DetroitCrime Commission, Sears, Visa, citi, vivint, workday, Kabam, USA Olympic Team, CDW, BT, at&t, Bank of America, NetApp., expresso
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.