Microsoft Sentinel vs. Splunk Enterprise

Microsoft Sentinel

102 Reviews and Ratings

Splunk Enterprise

476 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Microsoft Sentinel	Score8.7 out of 10	N/A	Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.	$2.46 per GB ingested
Splunk Enterprise	Score8.5 out of 10	N/A	Splunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.	N/A

Pricing

Microsoft Sentinel

Splunk Enterprise

Azure Sentinel: $2.46
per GB ingested
100 GB per day: $123.00
per day
200 GB per day: $221.40
per day
300 GB per day: $319.80
per day
400 GB per day: $410.00
per day
500 GB per day: $492.00
per day
More than 500 GB per day: $492.00 + $98.40
per day/plus each additional 100 GB increment

No answers on this topic

Pricing Offerings
Microsoft Sentinel	Splunk Enterprise
Free Trial
Yes	Yes
Free/Freemium Version
No	Yes
Premium Consulting/Integration Services
No	No

No setup fee

No setup fee

—

—

Community Pulse
Key User Insights
	Microsoft Sentinel	Splunk Enterprise
Considered Both Products	Microsoft Verified User Chose Microsoft Sentinel Prior to using Sentinel, we were using Splunk specifically Splunk Enterprise Security and Splunk Cloud, so their on-prem and their cloud-based products. We switched originally for cost reasons, specifically cost control, but I have found that the ability to create reports, the … Incentivized Helpful? Verified User Chose Microsoft Sentinel Well before there was Microsoft Sentinel, you had other competing products like ArcSight or Splunk, et cetera. I think they have their own qualities, but the Microsoft integration story is really why we're using it. Incentivized Helpful? Verified User Chose Microsoft Sentinel Well, we didn't select, we selected Sentinel for our Azure stuff, our Microsoft stuff, but we do use a different SIEM for the other stuff still. Incentivized Helpful? Verified User Chose Microsoft Sentinel As mentioned, the product was part of the purchase of several Microsoft Suites that we did earlier last year and with 200 licenses included, we can exclude those from the other SIEM and SOAR product, it just work well with the Microsoft's environment that we partially have Is … Incentivized Helpful? Verified User Chose Microsoft Sentinel Microsoft Sentinel really goes the extra mile when it comes to an SIEM that slowly improves toward a proper SOAR, this may be the best selling point of the entire solution. Highly scalable, cloud-based, and nearly perfect when dealing with Microsoft-based infrastructures, … Incentivized Helpful? Verified User Chose Microsoft Sentinel As the vast majority of our users have Windows machine and uses all 365 cloud features, we finally decided not to implement any 3rd party security solutions on desktops/laptops in order to keep our infrastructure simple. In this case, Microsoft Sentinel is the best way to … Incentivized Helpful? Mohamad Islam Hamadieh SOC Engineer in Engineering at Dell technology (Computer & Network Security, 10,001+ employees) Chose Microsoft Sentinel Microsoft Sentinel feels on another different level from these solutions , all in the cloud . No need for troubleshooting , deployment or upgrades. Constant updates from the vendor and good support Incentivized Helpful? Verified User Chose Microsoft Sentinel Microsoft Sentinel excels in cloud-native scalability, Microsoft ecosystem integration, and AI-driven threat detection with UEBA and Fusion rules, offering faster deployment and lower costs (48% cheaper per Forrester) than Splunk, QRadar, Exabeam, SentinelOne, Securonix, and … Incentivized Helpful?	Cisco Verified User Chose Splunk Enterprise While both are market-leading SIEM platforms, they cater to different environments and organization priorities. The choice often comes down to a company's existing infrastructure, integration needs, and long-term security strategy. Deployment and architecture - Splunk offeres … Incentivized Helpful?
	Would buy again
	No answers on this topic	No answers on this topic
	Delivers good value for the price
	No answers on this topic	No answers on this topic
	Happy with the feature set
	No answers on this topic	No answers on this topic
	Lived up to sales and marketing promises
	No answers on this topic	No answers on this topic
	Implementation went as expected
No answers on this topic	No answers on this topic

Features

Microsoft Sentinel

Splunk Enterprise

Comparison of Security Information and Event Management (SIEM) features of Microsoft Sentinel and Splunk Enterprise
Feature	Microsoft Sentinel 7.3 24 Ratings	Splunk Enterprise 7.1 56 Ratings
Centralized event and log data collection	8.324 Ratings	9.055 Ratings
Correlation	7.224 Ratings	9.054 Ratings
Event and log normalization/management	6.924 Ratings	9.555 Ratings
Deployment flexibility	7.522 Ratings	7.050 Ratings
Integration with Identity and Access Management Tools	6.422 Ratings	6.051 Ratings
Custom dashboards and workspaces	7.524 Ratings	5.956 Ratings
Host and network-based intrusion detection	5.020 Ratings	4.939 Ratings
Data integration/API management	6.522 Ratings	8.06 Ratings
Behavioral analytics and baselining	6.920 Ratings	5.96 Ratings
Rules-based and algorithmic detection thresholds	7.922 Ratings	7.56 Ratings
Response orchestration and automation	7.221 Ratings	7.05 Ratings
Reporting and compliance management	9.04 Ratings	6.46 Ratings
Incident indexing/searching	8.622 Ratings	6.57 Ratings

User Ratings
	Microsoft Sentinel	Splunk Enterprise
Likelihood to Recommend	8.6 (43 ratings)	7.8 (73 ratings)
Likelihood to Renew	8.2 (1 ratings)	10.0 (17 ratings)
Usability	7.3 (4 ratings)	8.2 (6 ratings)
Availability	- (0 ratings)	10.0 (1 ratings)
Support Rating	8.0 (3 ratings)	8.4 (17 ratings)
Online Training	- (0 ratings)	8.0 (1 ratings)
Implementation Rating	- (0 ratings)	9.0 (2 ratings)
Product Scalability	- (0 ratings)	9.1 (1 ratings)
Professional Services	5.0 (1 ratings)	- (0 ratings)