Splunk Enterprise - Présentation
Description du logiciel Splunk Enterprise
Splunk Enterprise est une plateforme basée sur le cloud conçue pour aider les entreprises à gérer et à analyser les big data et les données machine. Les fonctionnalités clés comprennent la visualisation des données, les métriques de performance, la collecte de données, la recherche en temps réel, l'indexation, le suivi des KPI, le reporting et la surveillance.
L'application permet aux responsables de créer des tableaux de bord personnalisés, d'ajouter des visualisations, d'ajuster les composants de l'interface et de les convertir en formulaires. Splunk Enterprise aide les administrateurs à effectuer une surveillance continue des évènements opérationnels pour détecter les vulnérabilités et recevoir des alertes déclenchées par des évènements en temps réel. Grâce à sa fonctionnalité de gestion de la charge de travail, les utilisateurs peuvent réserver des capacités de stockage des ressources du système pour l'importation/l'ingestion de données de tâches prioritaires. Splunk Enterprise permet également aux membres de l'équipe de détecter les anomalies système et d'effectuer une mise en cluster de données pour filtrer les données corrompues.
Splunk Enterprise offre une intégration à diverses plateformes tierces, notamment Microsoft Excel, Tableau, Okta, PingFerderate, Azure AD, CA SiteMinder, OneLogin et Optimal IdM. La solution convient aux entreprises de secteurs tels que l'aérospatiale, les communications, la santé, la manufacture, la finance, l'énergie et les services publics.
Splunk Enterprise - Présentation
Prix
Types de licence
Splunk Enterprise - Fonctionnalités
Captures d'écran
Splunk Enterprise - Avis
Splunk Enterprise - Avis
Offers more than you think
We've used the software to detect layer 7 attacks, unearth issues we didn't realize were happening and gives us end to end insight into our stack.
Best tool for Distributed logs data analysis
We have several micro-services deployed in production which require to lookup application access as well as server logs and analyze data for their usage. We created several reports/charts for visualization. We use splunk as security logs tool to see the firewall traffic, tracing any vulnerable access, any database related crash ..etc.
It helps easily to find issue and fixed quickly by black listed in system.
Spunk Review
Splunk is a great solution for SIEM and also for monitoring your infrastructure
We needed a way to monitor our internal environment and start to be more proactive with issues, so we started sending all of our logs to Splunk and we we able to get insights we did not know we needed. It is a great solution and they are constantly innovating.
Splunk review
Overall, it is a very good monitoring tool for an support team and developers for doing root cause analysis.
Comparatif avec les logiciels similaires : note globale
Comparer avec les alternatives
Offers more than you think
Avantages
The system is highly intuitive to use. It is faster than other solutions I've used on the market and has a huge library of 3rd party plugins to get more from the system. It is easy to create scheduled searches, dashboards, reports etc. but there are a number of additional plugins (at an extra cost) to help with security, single pane of glass and metric collection.
Inconvénients
It offers challenges for a decentralized working model. Where Splunk is centrally managed, it is easy to ensure that best practices are maintained. Where the system is opened up for an entire department to utilize and on-board their logs, it becomes more difficult. However, with some creative thinking and good process, this issue can be overcome.
Best tool for Distributed logs data analysis
We have several micro-services deployed in production which require to lookup application access as well as server logs and analyze data for their usage. We created several reports/charts for visualization. We use splunk as security logs tool to see the firewall traffic, tracing any vulnerable access, any database related crash ..etc.
It helps easily to find issue and fixed quickly by black listed in system.
Avantages
Splunk Enterprise is best tool to analyze the data based on different visualization. It help us to lookup distributed logs for micro-services . It enables field based lookup. For complex logging, we can use search query using expression. We can create multiple reports/charts for visualization such as a pie or bar chart for our data. Best feature what i like , We can visualize our search results and share them with others using dashboard panels. If Already have a dashboard, we can add a new panel from a report, clone from another dashboard, or add a prebuilt panel. Fully customization available. Interfaces is very flexible. We export it in different formats, or refresh it to visualize the newest data. Online Support is available through different community.
Inconvénients
Search query builder is fully based on technical. for Non technical users, its really difficult to lookup logs. Sometimes, error thrown by query builder is more difficult to understand. Deep Learning is required to use splunk for production data. For Large application installation, it need to manage more.
Spunk Review
Avantages
It allows me to bring a lot of information into one friendly view. It's a great security audit tool.
Inconvénients
It has limited functionality. It is a very memory intensive system. It does not integrate with Lennox.
Splunk is a great solution for SIEM and also for monitoring your infrastructure
We needed a way to monitor our internal environment and start to be more proactive with issues, so we started sending all of our logs to Splunk and we we able to get insights we did not know we needed. It is a great solution and they are constantly innovating.
Avantages
Splunk makes it easy to search through various data including logs. In the past I have had to pour through logs in order to find the one lines among the 100 of thousands of lines. Splunk allows me to search through those logs in a matter of seconds vs the hours it used to take.
Inconvénients
Most of enterprise setup is done through the command line. It would be nice to have cluster configuration (index creation) as part of the UI.
Splunk review
Overall, it is a very good monitoring tool for an support team and developers for doing root cause analysis.
Avantages
Splunk Visually represents the logs mainly from production servers in the web UI .
People who Usually has no access to logs in production servers, will access the logs through splunk UI with very simplified and friendly search query.
It has lot of features like you can query for particular date and time range with specific characters. The search engine is very fast which will bring the query response effectively.
we can access all types of logs including XML and JSON.
we can create a custom dashboard with custom query for each projects and can relatively trigger the email to the support team in case of any issues.
This tool is boon for production support team in any enterprise company.
Inconvénients
Licensing cost is quite higher for enterprise usage.
Query response time will be slow when you are searching for relatively longer history(Eg. 3 months old data)
Comparatif avec les logiciels similaires : recommandation utilisateur
Comparer avec les alternatives
Splunk Enterprise - Prix
Splunk Enterprise - Prix
Comparatif avec les logiciels similaires : rapport qualité-prix
Comparer avec les alternatives
Splunk Enterprise - Fonctionnalités
Splunk Enterprise - Fonctionnalités
Comparatif avec les logiciels similaires : note sur les fonctionnalités
Comparer avec les alternatives
Catégories
Catégories
Vidéos et tutoriels
Vidéos et tutoriels
Splunk Enterprise - FAQ
Splunk Enterprise - FAQ
Voici quelques-unes des questions fréquentes sur Splunk Enterprise.
Q. Quels sont les types de licence disponibles pour Splunk Enterprise ?
Types de licences disponibles pour Splunk Enterprise :
À partir de: 225,00 $US/mois
Type de licence: Abonnement
Essai gratuit: Disponible
Q. Quelles sont les principales fonctionnalités du logiciel Splunk Enterprise ?
Nous n'avons pas d'informations sur les fonctionnalités de Splunk Enterprise.
Q. Qui utilise Splunk Enterprise ?
Utilisateurs habituels du logiciel Splunk Enterprise :
Grandes entreprises, Entreprises de taille moyenne
Q. Dans quelles langues Splunk Enterprise est-il disponible ?
Langues dans lesquelles Splunk Enterprise est disponible :
chinois (simplifié), chinois (traditionnel), anglais, français, allemand, italien, japonais, coréen, portugais, russe, espagnol
Q. Quels sont les types de licence disponibles pour Splunk Enterprise ?
Types de licences disponibles pour Splunk Enterprise:
Abonnement
Q. Splunk Enterprise prend-il en charge les appareils mobiles ?
Appareils pris en charge par Splunk Enterprise :
Android, iPhone, iPad
Q. Avec quelles applications Splunk Enterprise peut-il s'intégrer ?
Applications s'intégrant à Splunk Enterprise :
BlueJeans, Google Cloud Platform, Infocyte, Microsoft Excel, Okta, OneLogin, Tableau
Q. Quelles sont les ressources d'aide disponibles pour Splunk Enterprise ?
Ressources d'aide disponibles pour Splunk Enterprise :
FAQ, Base de connaissances, Support en ligne, Support téléphonique, Tutoriels vidéo
We've used the software to detect layer 7 attacks, unearth issues we didn't realize were happening and gives us end to end insight into our stack.