No more typing reviews! Try our Samantha, our new voice AI agent.

Panther vs Splunk Enterprise Security comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Panther
Ranking in Security Information and Event Management (SIEM)
36th
Average Rating
8.0
Reviews Sentiment
7.1
Number of Reviews
4
Ranking in other categories
AI Data Analysis (29th)
Splunk Enterprise Security
Ranking in Security Information and Event Management (SIEM)
1st
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
467
Ranking in other categories
Log Management (1st), IT Operations Analytics (1st)
 

Mindshare comparison

As of October 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Panther is 1.0%, up from 0.4% compared to the previous year. The mindshare of Splunk Enterprise Security is 8.0%, down from 9.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security8.0%
Panther1.0%
Other91.0%
Security Information and Event Management (SIEM)
 

Featured Reviews

Narendran Nair - PeerSpot reviewer
Product Security Engineer at Infoblox
AI triage has streamlined real-time alert monitoring and has improved on-call incident response
The best features Panther offers are AI Triage, the ability to comment on our activities, and seamless integration with other communication sources such as PagerDuty, Microsoft Teams, and potentially Slack, showcasing the flexibility we have in using this tool. The most valuable feature for my team is definitely AI Triage, which helps save a lot of time by eliminating the need for manual research regarding patterns that may be repeated, making our work easier and more efficient. Panther has positively impacted my organization as it serves as one of the main sources for triaging real-time incidents. Panther definitely plays a key role in the work that we do. Specific outcomes that show how Panther has helped our organization include saving a lot of time, especially since the AI Triage feature reduces the necessity to reach out to others for clarity, which it occasionally accomplishes on its own. To be honest, it does lack some aspects. For example, if it could access our organizational knowledge, including the Jira database, it might better analyze incidents and determine whether they are false positives or not by using more contextual data.
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Panther positively impacts my organization as it is the first point of response for any incident, giving a reviewer full clarity about what is happening, how it is happening, and where it is happening."
"The AI Triage feature saves a considerable amount of time, and if it were to incorporate organizational knowledge, it could provide finer-tuned results."
"I find Panther's detection capabilities and integrations to be highly valuable."
"We have seen a return on investment measured primarily through SOC efficiency and productivity improvements, with teams observing a twenty to thirty-five percent improvement in investigation efficiency depending on the environment and product maturity."
"An example of how these features benefited my organization is that the mean time to detect compromised accounts from the time that we're able to detect that account and then launch some automation to actually disable the account and work with the end user to fix the issue has gone from taking a couple of days to literally taking two to three minutes."
"The best feature I've seen is the ability to easily change the query based on the dashboard or based on the chart we have to create, allowing any value or metric we want to add to that particular chart while keeping the rest of the dashboard settings intact."
"The most valuable feature of Splunk is security information and event management (SIEM), and the solution is easy to use, has useful reports, and a good interface."
"The end-to-end visibility into our environment that Splunk provides is impressive. We just need to use it better."
"Splunk has a single purpose in life: ingest machine data and help analyze and visualize that data."
"Splunk has significantly helped with aggregation and correlation of critical logs, and not having to grep on each individual server has made everyone more efficient."
"It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query on Splunk. The resolution time is about the same, but it took longer to discover the issue with ArcSight. Our previous solution took about an hour or more, but Splunk can do it within a few minutes or an hour at most."
"Splunk Enterprise Security is a standard solution providing good customer service and partnership."
 

Cons

"The solution could be improved by providing more built-in integrations, which would reduce the need for me to build them myself."
"The user experience could be improved because whenever I want to investigate the data, too much data is shown in the UI."
"Regarding Panther's accuracy and reliability of output, I would rate it at 70 percent since, at times, it identifies findings as valid when they may actually be false positives, which we have experienced in a few cases."
"The only improvement I am expecting is the cost of the licensing. Clients are going to other solutions just because of the cost."
"At Splunk .conf24, I saw a demo for Splunk Enterprise Security 8. All the things that they have done in Splunk Enterprise Security 8 are what it can be better at."
"Regarding areas of Splunk Enterprise Security that I think could be improved or enhanced, I am continuously getting the task of upgrading the system. For example, we have multiple heavy forwarders, and every time we upgrade the system, there should be some issue after an upgrade."
"We manage alert fatigue multiple times, as false positive alerts are triggered frequently, sometimes 200 to 300 alerts."
"The solution's automation could be improved."
"Splunk Enterprise Security would benefit from a more robust rule engine to reduce false positives."
"Its user interface for everything other than the charts can be improved."
"My company could benefit from doing more Splunk training with Splunk consultants teaching us how to use it."
 

Pricing and Cost Advice

Information not available
"Splunk Enterprise becomes extremely expensive after the 20GB/month license."
"Its pricing model can be improved."
"Splunk is costly but it’s worth it due to the high-end features."
"While Splunk is more expensive than other solutions, we would still choose it because of its capabilities."
"There is an annual license required to use this solution."
"It is a bit costly."
"It is a pretty high cost solution, but if your organization has the funds, it can bring many benefits."
"It is expensive, but it is a good tool. It is worth the cost."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Manufacturing Company
15%
Construction Company
13%
Financial Services Firm
8%
Comms Service Provider
8%
Outsourcing Company
12%
Financial Services Firm
12%
Manufacturing Company
8%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business135
Midsize Enterprise74
Large Enterprise318
 

Questions from the Community

What is your experience regarding pricing and costs for Panther?
I am not aware of the pricing, setup cost, and licensing details, as I handle the usage of Panther and not the setup process.
What needs improvement with Panther?
The user experience could be improved because whenever I want to investigate the data, too much data is shown in the UI. I understand Panther wants to show everything, but the UX can be improved by...
What is your primary use case for Panther?
My main use case for Panther is as a SIEM solution. I use Panther as a SIEM solution in my day-to-day work by integrating it with GuardDuty and CloudTrail and a couple of other product-related log ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Docker, Loom, Discord, Dropbox, HubSpot, Asana, GoFundMe, Zapier, Benchling, JupiterOne, Jumio, Bitstamp, Intercom, Randori, and Cedar
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Panther vs. Splunk Enterprise Security and other solutions. Updated: September 2026.
917,433 professionals have used our research since 2012.