Splunk Enterprise - Présentation
Description du logiciel Splunk Enterprise
Splunk Enterprise est une plateforme basée sur le cloud conçue pour aider les entreprises à gérer et à analyser les big data et les données machine. Les fonctionnalités clés comprennent la visualisation des données, les métriques de performance, la collecte de données, la recherche en temps réel, l'indexation, le suivi des KPI, le reporting et la surveillance.
L'application permet aux responsables de créer des tableaux de bord personnalisés, d'ajouter des visualisations, d'ajuster les composants de l'interface et de les convertir en formulaires. Splunk Enterprise aide les administrateurs à effectuer une surveillance continue des évènements opérationnels pour détecter les vulnérabilités et recevoir des alertes déclenchées par des évènements en temps réel. Grâce à sa fonctionnalité de gestion de la charge de travail, les utilisateurs peuvent réserver des capacités de stockage des ressources du système pour l'importation/l'ingestion de données de tâches prioritaires. Splunk Enterprise permet également aux membres de l'équipe de détecter les anomalies système et d'effectuer une mise en cluster de données pour filtrer les données corrompues.
Splunk Enterprise offre une intégration à diverses plateformes tierces, notamment Microsoft Excel, Tableau, Okta, PingFerderate, Azure AD, CA SiteMinder, OneLogin et Optimal IdM. La solution convient aux entreprises de secteurs tels que l'aérospatiale, les communications, la santé, la manufacture, la finance, l'énergie et les services publics.
Splunk Enterprise - Présentation
Prix
Types de licence
Splunk Enterprise - Fonctionnalités
Médias
Splunk Enterprise - Avis
Splunk Enterprise - Avis
Offers more than you think
We've used the software to detect layer 7 attacks, unearth issues we didn't realize were happening and gives us end to end insight into our stack.
Splunk is a great solution for SIEM and also for monitoring your infrastructure
We needed a way to monitor our internal environment and start to be more proactive with issues, so we started sending all of our logs to Splunk and we we able to get insights we did not know we needed. It is a great solution and they are constantly innovating.
Doing setup redundant servers without Splunk
Saved my a$$ many times. In a multi-server environment, if you don't have Splunk or something like it, it will be a nightmare to try and coordinate the various log files involved.
Spunk Review
A tool which is one for all
Splunk has made me realize the ability to correlate different data from different realms altogether and generate valuable insights.
Comparatif des alternatives : note globale
Comparer avec les alternatives
Offers more than you think
Avantages
The system is highly intuitive to use. It is faster than other solutions I've used on the market and has a huge library of 3rd party plugins to get more from the system. It is easy to create scheduled searches, dashboards, reports etc. but there are a number of additional plugins (at an extra cost) to help with security, single pane of glass and metric collection.
Inconvénients
It offers challenges for a decentralized working model. Where Splunk is centrally managed, it is easy to ensure that best practices are maintained. Where the system is opened up for an entire department to utilize and on-board their logs, it becomes more difficult. However, with some creative thinking and good process, this issue can be overcome.
Splunk is a great solution for SIEM and also for monitoring your infrastructure
We needed a way to monitor our internal environment and start to be more proactive with issues, so we started sending all of our logs to Splunk and we we able to get insights we did not know we needed. It is a great solution and they are constantly innovating.
Avantages
Splunk makes it easy to search through various data including logs. In the past I have had to pour through logs in order to find the one lines among the 100 of thousands of lines. Splunk allows me to search through those logs in a matter of seconds vs the hours it used to take.
Inconvénients
Most of enterprise setup is done through the command line. It would be nice to have cluster configuration (index creation) as part of the UI.
Doing setup redundant servers without Splunk
Saved my a$$ many times. In a multi-server environment, if you don't have Splunk or something like it, it will be a nightmare to try and coordinate the various log files involved.
Avantages
Several of our applications are distributed across multiple systems. It is the same software running on each server but doing the same job for different users. Each server would generate its own log files. When things went wrong, we used Splunk to be able to see what was going on on each server. Click a few buttons and you get two logs from two different servers listed together coordinated by time. But that leads you to discover that the issue came from a separate upstream or downstream server, then bring in those logs too . . . all coordinated by time. Don't get me wrong, the IT guys love these tools for their own enterprise reasons, but as a server stack developer, this was a resource I used OFTEN.
Inconvénients
I never fully grokked their SQL like language. I could do basic things daily without issue. However, I often had to hit the documentation to do anything more than a simple "find this" query.
Spunk Review
Avantages
It allows me to bring a lot of information into one friendly view. It's a great security audit tool.
Inconvénients
It has limited functionality. It is a very memory intensive system. It does not integrate with Lennox.
A tool which is one for all
Splunk has made me realize the ability to correlate different data from different realms altogether and generate valuable insights.
Avantages
The ability to use this software for security operations, data analysis, creating dashboards, generating tickets and everything else
Inconvénients
Splunk uses its own SPL, which is not very easy to learn. However, there are lots of documentation that Splunk provides to its customers. There is paid training available which is useful for beginners to learn.
Comparatif des alternatives : recommandation utilisateur
Comparer avec les alternatives
Splunk Enterprise - Prix
Splunk Enterprise - Prix
Comparatif des alternatives : rapport qualité-prix
Comparer avec les alternatives
Splunk Enterprise - Fonctionnalités
Splunk Enterprise - Fonctionnalités
Comparatif des alternatives : note sur les fonctionnalités
Comparer avec les alternatives
Catégories
Catégories
Splunk Enterprise - FAQ
Splunk Enterprise - FAQ
Voici quelques-unes des questions fréquentes sur Splunk Enterprise.
Q. Quels sont les types de licence disponibles pour Splunk Enterprise ?
Types de licences disponibles pour Splunk Enterprise :
À partir de: 225,00 $US/mois
Type de licence: Abonnement
Essai gratuit: Disponible
Q. Quelles sont les principales fonctionnalités du logiciel Splunk Enterprise ?
Nous n'avons pas d'informations sur les fonctionnalités de Splunk Enterprise.
Q. Qui utilise Splunk Enterprise ?
Utilisateurs habituels du logiciel Splunk Enterprise :
Grandes entreprises, Entreprises de taille moyenne
Q. Dans quelles langues Splunk Enterprise est-il disponible ?
Langues dans lesquelles Splunk Enterprise est disponible :
allemand, anglais, chinois (simplifié), chinois (traditionnel), coréen, espagnol, français, italien, japonais, portugais, russe
Q. Splunk Enterprise prend-il en charge les appareils mobiles ?
Appareils pris en charge par Splunk Enterprise :
Android, iPhone, iPad
Q. Avec quelles applications Splunk Enterprise peut-il s'intégrer ?
Applications s'intégrant à Splunk Enterprise :
BlueJeans, CyberOne, Google Cloud Platform, Infocyte, Keeper for Business, Malwarebytes, Prophaze WAF, SecureONE, Threat Detection Marketplace, VaultCore
Q. Quelles sont les ressources d'aide disponibles pour Splunk Enterprise ?
Ressources d'aide disponibles pour Splunk Enterprise :
Support téléphonique, Support en ligne, FAQ, Base de connaissances, Tutoriels vidéo
We've used the software to detect layer 7 attacks, unearth issues we didn't realize were happening and gives us end to end insight into our stack.