レビュー募集中！Splunk SOARを紹介・競合製品の評判をユーザーレビュー・口コミで紹介

What do you dislike about the product?

since I am beginner I cannot comment on this. However I am going to start evaluatioin on this on my free time becaus splunk is essential for us and it is alreay there so using SOAR I am trying to value add

What do you like best about the product?

splunk useful tool to move the logs to single space and analyse digitalize like SOAR will provide seamless automation with logs and you can create a runbook

What do you dislike about the product?

nothing so far, some plugins are still little complicated to configure

What do you like best about the product?

the automated playbook makes the life little bit easier on job.

What do you dislike about the product?

Integration is quite easy within the Splunk ecosystem but integration with other tools outside Splunk Ecospace is a little tedious job to do and also the documentation is not as reach as it should be.

What do you like best about the product?

The Splunk SOAR is quite a capable SOAR platform from Splunk. What I liked most is the level of automation that can be achieved with Splunk SOAR. Also, this
tool is good for both the users who know python and who do not. Most of the automation can be achieved without any coding effort but if SOAR engineer is having python knowledge
a lot of custom automation can be achieved.

Recommendations to others considering the product:

I would recommend to do POC with Splunk and Cortex XDR and then decide which one you want to use.

What do you dislike about the product?

Little expensive, and API and third-party applications integration have room to improve.

What do you like best about the product?

It is a flexible product with many essential and useful features, which along with outstanding customer support, brings the SOC environment to the next level.
The no-code approach to integrations and the ease of setting up playbooks make it stand out.

What do you dislike about the product?

GUI logic not intuitive. You need to understand the logic before you can use it successfully. Sometime it is too security word focused.

What do you like best about the product?

Easy to use GUI , you can have with you own add-ons, Many integrations in existing solutions and tools.It is a great orchestration toll which can be used for any kind of orchestration not only security.

Recommendations to others considering the product:

automation and orchestration will be key for the future. Phantom is a great solution to get there.

What do you dislike about the product?

Expensive, as it logs size based, more you index more money you have to spend, should be lower in price, there is less to dislike about this product, its all win win for us.

What do you like best about the product?

It holds nerve center of the security ecosystem, giving teams the insight to quickly detect
and respond to internal and external attacks, simplify threat management minimizing risk, A great product to use for security any organization at any level.

Recommendations to others considering the product:

Splunk Enterprise Security is the nerve center of the security ecosystem, giving teams the insight to quickly detect and respond to internal and external attacks, simplify threat management minimizing risk.