Cisco ThousandEyes empowers organizations to assure every digital experience across every network, everywhere, every time.
N/A
Splunk Enterprise
Score 8.5 out of 10
N/A
Splunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.
It is a similar product to Cisco ThousandEyes. Both solutions give good network monitoring and traffic analysis. But Cisco ThousandEyes works better with Cisco devices and has real-time alerts that are very useful. It also helps to see network problems faster and make …
This technology helps us and our customers understand the value and importance of our business. Not only for our business but also for Cisco business. We are developing a lot of apps in .net so we will like to have support for that in Cisco products that we and our customers …
We did briefly look into DynaTrace, but it was too much product for what we needed though and was much more expensive then just adding the licensing to our Cisco existing licenses.
Juniper RPM offers device config level sla testing in the service stream layer. Whilst this is good and is monitorable via snmp, the config can be fiddly and needs a Juniper device at the other end as a reply point
Cisco ThousandEyes has a great "macro" view and gui allowing easy to understand metrics. It also makes it easy to run synthetic application tests to measure reachability between two endpoints.
Kentik Synthetics is a newer competitor of Cisco ThousandEyes. Both do very similar things but Cisco ThousandEyes currently is the more mature platform. However, the pricing of Synthetics is very attractive. It does not have the robustness of Cisco ThousandEyes or the …
Connected directly to the switch. Other vendors all seem to be add-ons. They claim they are different, but I don't know why I would go spend additional money for another product.
Omnibus was a Linux based tool. Not very easy to sue. End user needs to know Linux commands. Splunk Enterprise is more flexible and ease to use. Splunk Enterprise can generate reports, graphs, data visualization, data validation and much more. Use friendly query language and …
A lot of products have natively inside their own dashboards and or their own logging repositories. And each one is difficult to learn or they're too complex or they're not verbose in the sense that they're not easy to mine the data that you're looking for. So that could be …
Elastic and it's a little bit more cumbersome and a little bit more time consuming. Using Splunk is much easier flow and quicker to utilize to get to the root of a problem.
Cost was major factor which made us choose Splunk Enterprisek. Splunk Enterprise is versatile tool which further helped us to make our decision. Apart from that Managment wish to use something robust hence Splunk Enterprise became there first choice.
Splunk Enterprise is honestly the first tool we used and we cant realistically switch. We have not done any in depth studies or comparisons. We know there are alternatives and we would probably switch if one of them was much more economically viable, but right now we are happy …
Splunk is easy to use , the User interface is quite easy and the components or functionality speak for themselves. The ease with you can search and from there fine tune your search functionality. Also the admin console is quite simple to use, you can find the functionality at …
We had an old version of QRadar before Splunk. It was difficult to customize and difficult to pull in our data sources. It wound up being neglected and not providing value for us as an institution. We have also looked into other things like AlienVault but in general, the …
LogRhythm is a great SIEM Tool. But Splunk Enterprise is so much more than that. [It's] a Security Analytics Tool with no limitation. It depends on [organization's] size, budget[,] and also what exactly they are looking for.
We reviewed a number of different platforms and found Splunk to be the more mature product across the board. Splunk is the market leader and the rest of the industry chances them. We needed a platform from a company with the resources to continue development and meet new …
Splunk is a better solution for log analyzing based on the complexity of data it can collect, analyze and store. Dynatrace is just in the beginning stage of collecting logs but this tool is good for user application monitoring. So they are different products and it may not be …
We originally used Kiwi Syslog but this was not able to keep up with the level of logs that were being sent to it. Also Kiwi does not allow you to search through logs, create alerts, etc. or any of the other features Splunk has. It is purely just a web GUI for syslog.
All the logs from those security devices or systems are pumping to the Splunk Enterprise and being correlated by the Enterprise Security. However, there are some difficulties in tuning the Data Model, which results in a lot of false positive. This could occur due to the lack of …
The Solarwinds SIEM solutions are much more bare-bones and don't offer as many features as Splunk Enterprise. Still, they are also infinitely more affordable and provide precisely what's required for small to medium environments. Implementation is straight forward even for …
Splunk Light is lighter and less flexible compared to Splunk Cloud and Splunk Enterprise. However, it is also the most effective option for new or small organizations with a tight budget. Both Splunk Light and Splunk Enterprise are deployed on-premise while Splunk Cloud, as the …
Splunk is easier to setup compare to ELK. It has better support, well-documented information plus the Splunk database which has an addon that built by them or the other users to help to improve the experience with Splunk. However, ELK is open-source and it is free. At the end …
Splunk is a very useful, lightweight and simple tool to analyze logs. As a computer science student who loves coding, it is much more convenient to use. I can build custom queries for myself or a subset of the users. The language is much simpler than SQL and is much faster as …
Splunk is the most intelligent tool I have ever worked on. It gives you hands-on experience on how logs actually look like. You can go through entire organization data at once using this tool. Also, by the use of data models, it's become so easy to use and work on.
More features and easy to manage once configured and setup correctly. Stronger correlation engine compared to other products. Easily integrates with ServiceNow for ticket creation, automation, and building workflows. Helps in AiOPS more, as compared to other tools. Provides …
We selected Splunk Light because people in our company had previous experience with it, the solution appeared to check all of our boxes, and the support structure gave Splunk a significant edge over open source solutions like the ELK stack.
As a service provider that is in multiple datacenters it's a great tool to use and leverage. Alot of smaller providers are only using NMS nodes that are hosted in their HQ or in spots that aren't where their content is hosted. Being able to run tests directly from your datacenters (between them or to the content provider itself) gives more accurate results. The downside is if you have no server infrastructure you'll have to install servers/machines to utilize it.
Pros: Splunk is very well suited if you have multiple log sources of related data. All of them can be correlated and tasks can be automated based on the requirement. Other than alerts, Splunk can also run a specific script of your choice, based on some defined conditions. Cons: If you have a few logs but a large number of log sources, Splunk can be very expensive.
Agent to Agent testing. Full round trip test. Have a customer using a Server Side API that is having an issue. Loan a Nuc, or have them install the ThousandEyes agent in their network. You'll find the issue guaranteed.
Device Layer vision - ability to see from the server, through the Firewall, switches Proxy and internet. Measure jitter, latency, response time, load time and see the path your packet takes.
Share your tests live. Provide the customer a link to a live test, they can see what you do, review your metrics and verify your tests. They can also use it as a tool to better their service. Build the trust and stickiness with your customers' most difficult users - the IT Operations team.
Validate your QOS and routes for VOIP, video conferences, and data traffic. Highly flexible and configurable complete with transaction-based testing, custom headers, calls and tools to mimic any scenario you need.
We have the product, we have a fair amount of wireless issues. You have to go through so many hoops, links and selections that I would think would've been impossible. Maybe if you have a specialized engineer, you would be able to use the thousandeyes product to troubleshoot a problem. But if I want to share with our knock, for example, would be very challenging because there is so many paths that you have to go and there is so many assumptions you have to do to actually find the root cause of the problem. What I would expect is maybe what they can do is implementing some AI today on this product to give some hints, "hey, this might be the problem because the data is there but it's difficult to find." We need an easier way to find how we can use the platform to point out where's the root cause of those problems.
Even though there is a search tool as a help function, you still have to read through many documentation to find the answers you're looking for and sometimes you don't find it. The help function in Splunk could be improved to be more intuitive or have a built-in help per report, panel or dashboard.
Creating a Splunk dashboard is rather straightforward however, customization is not. Splunk could be improved to provide more tools or features for customization such as adding colors and font options for text and graphs or graphics.
My dashboard has a lot of useful information and I want the important panels and reports at the top but there is no easy way to do this. Perhaps Splunk could be improved to allow features such as adding URL links to other dashboards or some other clever way to emphasize the important data in my dashboard without compromising space.
We will definitely renew and maybe even extend our usage of ThousandEyes. We have been using ThousandEyes now for a couple of years and it has shown us major benefits. With the new options it offers for SD-WAN for us it is a no brainer to renew our current licenses
We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.
There is definitely a learning curve to ThousandEyes, but once you understand how the client deployment works and how to set up monitoring, things go pretty smoothly. I think the initial setting up of clients on endpoints can be a little tricky though.
Splunk Enterprise has plenty of storage space for security logs and can search and correlate suspicious activities up to 30+ days back. Splunk Enterprise can integrate with a ticketing system to track threats and correlate with IoC between security events. Splunk Enterprise can provide reports of account lockouts. Splunk Enterprise can consolidate multiple security alerts into one entry with a number showing how many events occurred.
You have online support from the tool itself 24/7 and they are very responsive. We also have a specific account manager and specific engineer assigned to help us with very specific questions for our environment. The level of response to our requirements is always super high. We have requested specific features to be added and these have been developed and introduced very quick tot he product (within weeks). Their DevOps and agile approach seems to pay off.
Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.
Our Cisco reps actually had someone teach us a few things about the functionality of ThousandEyes, and it helped a lot. The training was good and we had follow-up assistance as well when we had questions about the monitoring and reporting functions. Overall, we were satisfied with the training and support.
The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.
Our implementation was pretty straightforward, with some issues loading clients on endpoints. We didn't have any notable issues, and I don't really have any additional insights.
It is a similar product to Cisco ThousandEyes. Both solutions give good network monitoring and traffic analysis. But Cisco ThousandEyes works better with Cisco devices and has real-time alerts that are very useful. It also helps to see network problems faster and make troubleshooting easier. Cisco ThousandEyes is also better for checking SaaS and cloud apps like Azure, AWS, Webex, etc. It has endpoint agents that show network quality directly from user devices. The web interface is simple to use, so the learning curve is not too steep. Also, it has many monitoring points around the world, making it easy to check performance outside the company network.
A lot of products have natively inside their own dashboards and or their own logging repositories. And each one is difficult to learn or they're too complex or they're not verbose in the sense that they're not easy to mine the data that you're looking for. So that could be anything from the native logging that you find in other Cisco products. It's easier to use Splunk to draw the data that you're looking for as opposed to going to the individual's products themselves to get the logs that you're looking for.
I think this product would be infinitely scalable since it's all cloud hosted and can support thousands of endpoints if needed. We are only using it for a limited number of endpoints, so we never really considered scalability.
ThousandEyes has helped us quickly isolate issues on some high-profile (within the organization) incidents and whether the network (internally or on the Internet) is at fault. If it is, it becomes easier to see the "where" of the issues quicker so we can move onto what the issue is faster. In the case of non-network related issues, it helps us get the appropriate teams or individuals involved sooner.
Splunk has allowed developers to diagnose production issues when access of control was taken away from them to be allowed to view items in production environments and I believe that is invaluable.
At times some developers weren't super happy about using it, but it was more of the fact that they were used to having production access and not creating their splunk queries to get information.
Going one place to view logs was very beneficial to have.
