Splunk Enterprise Security vs. Splunk SOAR

Splunk Enterprise Security

253 Reviews and Ratings

Splunk SOAR

84 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Splunk Enterprise Security	Score9.7 out of 10	N/A	Splunk Enterprise Security is an analytics-driven SIEM that helps to combat threats with actionable intelligence and advanced analytics at scale.	N/A
Splunk SOAR	Score9 out of 10	N/A	Splunk now offers a security orchestration, automation, and response (SOAR) platform via its acquisition of Phantom. Splunk Security Orchestration and Automation (Splunk SOAR) provides playbook automation and is available as a standalone solution.	N/A

Pricing

Splunk Enterprise Security

Splunk SOAR

No answers on this topic

No answers on this topic

Pricing Offerings
Splunk Enterprise Security	Splunk SOAR
Free Trial
No	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

No setup fee

No setup fee

—

—

Community Pulse
Key User Insights
	Splunk Enterprise Security	Splunk SOAR
Considered Both Products	Cisco Jacob Gonzales IDS/SIEM Engineering Supervisor in Information Technology at Criterion Systems (Information Technology & Services, 1001-5000 employees) Chose Splunk Enterprise Security Splunk Enterprise Security allows for data normalization that does not compare to other SIEMs such as QRadar or Trustwave. QRadar requires custom dsm parsers before the data can be onboarded. I appreciate that Splunk Enterprise Security can ingest any source of data and … Incentivized Helpful? Verified User Chose Splunk Enterprise Security Splunk Enterprise Security is overall a better choice due to multiple factors. It can be easily deployed in any type of environment, whether you are looking for On-Premise or Cloud hosting. It scales amazingly well and it is very intuitive to use. It has a strong community, … Incentivized Helpful?	Cisco Verified User Chose Splunk SOAR Splunk SOAR is one of the more easier to use SOAR products because it gives you the ability to basically write a python script directly as a playbook rather than having to have logic steps built for each decision and only run one thing at a time. I have had previous SOAR … Incentivized Helpful? Giuseppe Cusello GRC Director in Professional Services at Cyber Partners S.p.A. (Information Technology & Services, 11-50 employees) Chose Splunk SOAR We are a Splunk Partner and I know Splunk Phantom, for this reason we usually propose it, but I don't deeply know other competitor products. Incentivized Helpful? Julie Pierce SOC Engineer in Information Technology at Quantum Flairs (Information Technology Services, 51-200 employees) Chose Splunk SOAR Splunk SOAR has multi vendor friendly design that suits our MSP model. Qradar on the other hand has deployment complexity and dependency on IBM's Qradar, which is less appealing for us since our clients run everything from Sentinel to elastic Incentivized Helpful?
	Would buy again
	No answers on this topic	No answers on this topic
	Delivers good value for the price
	No answers on this topic	No answers on this topic
	Happy with the feature set
	No answers on this topic	No answers on this topic
	Lived up to sales and marketing promises
	No answers on this topic	No answers on this topic
	Implementation went as expected
No answers on this topic	No answers on this topic

Features

Splunk Enterprise Security

Splunk SOAR

Comparison of Security Information and Event Management (SIEM) features of Splunk Enterprise Security and Splunk SOAR
Feature	Splunk Enterprise Security 8.4 102 Ratings	Splunk SOAR - Ratings
Centralized event and log data collection	9.3100 Ratings	00 Ratings
Correlation	8.699 Ratings	00 Ratings
Event and log normalization/management	8.5100 Ratings	00 Ratings
Deployment flexibility	8.3101 Ratings	00 Ratings
Integration with Identity and Access Management Tools	7.896 Ratings	00 Ratings
Custom dashboards and workspaces	9.2102 Ratings	00 Ratings
Host and network-based intrusion detection	7.996 Ratings	00 Ratings
Data integration/API management	8.498 Ratings	00 Ratings
Behavioral analytics and baselining	7.795 Ratings	00 Ratings
Rules-based and algorithmic detection thresholds	8.596 Ratings	00 Ratings
Response orchestration and automation	7.087 Ratings	00 Ratings
Reporting and compliance management	8.695 Ratings	00 Ratings
Incident indexing/searching	9.2101 Ratings	00 Ratings

User Ratings
	Splunk Enterprise Security	Splunk SOAR
Likelihood to Recommend	8.9 (103 ratings)	8.1 (40 ratings)
Likelihood to Renew	9.0 (3 ratings)	7.5 (3 ratings)
Usability	7.5 (2 ratings)	8.2 (1 ratings)
Availability	9.1 (1 ratings)	- (0 ratings)
Performance	8.2 (1 ratings)	8.2 (40 ratings)
Support Rating	6.6 (6 ratings)	8.2 (1 ratings)
In-Person Training	9.1 (1 ratings)	- (0 ratings)
Online Training	8.2 (1 ratings)	8.2 (1 ratings)
Implementation Rating	9.1 (1 ratings)	8.2 (1 ratings)
Configurability	7.3 (1 ratings)	8.2 (1 ratings)
Contract Terms and Pricing Model	7.3 (1 ratings)	- (0 ratings)
Ease of integration	6.4 (1 ratings)	- (0 ratings)
Product Scalability	9.3 (100 ratings)	8.2 (1 ratings)
Professional Services	9.1 (1 ratings)	- (0 ratings)
Vendor post-sale	8.2 (1 ratings)	- (0 ratings)
Vendor pre-sale	8.2 (1 ratings)	- (0 ratings)