Microsoft Sentinel vs. Splunk Enterprise Security

Microsoft Sentinel

102 Reviews and Ratings

Splunk Enterprise Security

253 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Microsoft Sentinel	Score8.7 out of 10	N/A	Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.	$2.46 per GB ingested
Splunk Enterprise Security	Score9.7 out of 10	N/A	Splunk Enterprise Security is an analytics-driven SIEM that helps to combat threats with actionable intelligence and advanced analytics at scale.	N/A

Pricing

Microsoft Sentinel

Splunk Enterprise Security

Azure Sentinel: $2.46
per GB ingested
100 GB per day: $123.00
per day
200 GB per day: $221.40
per day
300 GB per day: $319.80
per day
400 GB per day: $410.00
per day
500 GB per day: $492.00
per day
More than 500 GB per day: $492.00 + $98.40
per day/plus each additional 100 GB increment

No answers on this topic

Pricing Offerings
Microsoft Sentinel	Splunk Enterprise Security
Free Trial
Yes	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

No setup fee

No setup fee

—

—

Community Pulse
Key User Insights
	Microsoft Sentinel	Splunk Enterprise Security
Considered Both Products	Microsoft Verified User Chose Microsoft Sentinel Prior to using Sentinel, we were using Splunk specifically Splunk Enterprise Security and Splunk Cloud, so their on-prem and their cloud-based products. We switched originally for cost reasons, specifically cost control, but I have found that the ability to create reports, the … Incentivized Helpful? Verified User Chose Microsoft Sentinel As the vast majority of our users have Windows machine and uses all 365 cloud features, we finally decided not to implement any 3rd party security solutions on desktops/laptops in order to keep our infrastructure simple. In this case, Microsoft Sentinel is the best way to … Incentivized Helpful? Mohamad Islam Hamadieh SOC Engineer in Engineering at Dell technology (Computer & Network Security, 10,001+ employees) Chose Microsoft Sentinel Microsoft Sentinel feels on another different level from these solutions , all in the cloud . No need for troubleshooting , deployment or upgrades. Constant updates from the vendor and good support Incentivized Helpful? Verified User Chose Microsoft Sentinel Microsoft Sentinel excels in cloud-native scalability, Microsoft ecosystem integration, and AI-driven threat detection with UEBA and Fusion rules, offering faster deployment and lower costs (48% cheaper per Forrester) than Splunk, QRadar, Exabeam, SentinelOne, Securonix, and … Incentivized Helpful?	Cisco Verified User Chose Splunk Enterprise Security I did not choose this product. Overall although I like ES, I think Sentinel in certain ways is the superior product. The Kusto Query language is a lot easier to use. For instance anything that requires manual parsing in query can be more difficult with this product. Also some … Incentivized Helpful? Verified User Chose Splunk Enterprise Security Using Splunk Enterprise Security allows the combination of security data sources from any number of services or products, giving analysts a single view of the entire security footprint throughout the organization and correlating events across services that may otherwise be … Incentivized Helpful? Cole Ballen Security Engineer in Information Technology at Fulminous (Information Technology & Services, 51-200 employees) Chose Splunk Enterprise Security In our tests, Sentinel came really close. It was even easier to deploy for cloud native environments. However, once we started integrating OT logs and custom threat intel feeds, the performance and correlation didn't scale as efficiently. Incentivized Helpful?
	Would buy again
	No answers on this topic	No answers on this topic
	Delivers good value for the price
	No answers on this topic	No answers on this topic
	Happy with the feature set
	No answers on this topic	No answers on this topic
	Lived up to sales and marketing promises
	No answers on this topic	No answers on this topic
	Implementation went as expected
No answers on this topic	No answers on this topic

Features

Microsoft Sentinel

Splunk Enterprise Security

Comparison of Security Information and Event Management (SIEM) features of Microsoft Sentinel and Splunk Enterprise Security
Feature	Microsoft Sentinel 7.3 24 Ratings	Splunk Enterprise Security 8.4 102 Ratings
Centralized event and log data collection	8.324 Ratings	9.3100 Ratings
Correlation	7.224 Ratings	8.699 Ratings
Event and log normalization/management	6.924 Ratings	8.5100 Ratings
Deployment flexibility	7.522 Ratings	8.3101 Ratings
Integration with Identity and Access Management Tools	6.422 Ratings	7.896 Ratings
Custom dashboards and workspaces	7.524 Ratings	9.2102 Ratings
Host and network-based intrusion detection	5.020 Ratings	7.996 Ratings
Data integration/API management	6.522 Ratings	8.498 Ratings
Behavioral analytics and baselining	6.920 Ratings	7.795 Ratings
Rules-based and algorithmic detection thresholds	7.922 Ratings	8.596 Ratings
Response orchestration and automation	7.221 Ratings	7.087 Ratings
Reporting and compliance management	9.04 Ratings	8.695 Ratings
Incident indexing/searching	8.622 Ratings	9.2101 Ratings

User Ratings
	Microsoft Sentinel	Splunk Enterprise Security
Likelihood to Recommend	8.6 (43 ratings)	8.9 (103 ratings)
Likelihood to Renew	8.2 (1 ratings)	9.0 (3 ratings)
Usability	7.3 (4 ratings)	7.5 (2 ratings)
Availability	- (0 ratings)	9.1 (1 ratings)
Performance	- (0 ratings)	8.2 (1 ratings)
Support Rating	8.0 (3 ratings)	6.6 (6 ratings)
In-Person Training	- (0 ratings)	9.1 (1 ratings)
Online Training	- (0 ratings)	8.2 (1 ratings)
Implementation Rating	- (0 ratings)	9.1 (1 ratings)
Configurability	- (0 ratings)	7.3 (1 ratings)
Contract Terms and Pricing Model	- (0 ratings)	7.3 (1 ratings)
Ease of integration	- (0 ratings)	6.4 (1 ratings)
Product Scalability	- (0 ratings)	9.3 (100 ratings)
Professional Services	5.0 (1 ratings)	9.1 (1 ratings)
Vendor post-sale	- (0 ratings)	8.2 (1 ratings)
Vendor pre-sale	- (0 ratings)	8.2 (1 ratings)