G2 Vendor Directory

Splunk Enterprise Security

by Cisco

250

Reviews

4.3

Star rating

#6

Rank in AI SOC Agents

Pros and cons

Pros

  • Ease of Use
  • Easy Integrations
  • Threat Detection
  • Features
  • Dashboard Usability
  • User Interface

Cons

  • Expensive
  • Complex Setup
  • Integration Issues
  • Resource Management
  • Complex Implementation
  • Training Required

Traffic & LLM citations

Monthly G2.com page views and citations by AI answer engines for Splunk Enterprise Security.

Page views and citations · Splunk Enterprise Security

Source: G2 review data

Winning from

Based on reviewers who said they switched from another product.

Losing to

Based on reviewers of other products who said they switched from Splunk Enterprise Security.

Key stats

-66.7%

51

Enterprise

3

Adoption by company size

SegmentShare of reviews
Small Business11.6%
Mid-Market29.6%
Enterprise58.8%

Quarterly history

QuarterReviewsStar rating
2024 Q424.8
2025 Q214.5
2025 Q314.0
2025 Q415.0
2026 Q114.5
2026 Q234.5
2026 Q314.5

Satisfaction ratings

Ease of Use8.4
Ease of Setup8.1
Quality of Support8.8
Meets Requirements9.0

What reviewers say

RBA in Splunk ES our Game-Changer for Cutting Alert Noise

4.0

“RBA has been the biggest game-changer for our team. Before using it, our Tier 1 analysts spent hours chasing individual low-fidelity alerts. With RBA, Splunk ES attributes risk scores to users and systems (risk objects) based on cumulative behaviors mapped to MITRE ATT&CK. It onl”

Security Architet

Simple, Easy-to-Use UI That Brings Everything Together in One Place

4.5

“Splunk provides a very simple user interface, and it’s easy to use for daily BAU activities. I used a different solution before where we had to log in to ESM and the logger separately, but Splunk brings everything together in one place.”

Assistant System Engineer

Powerful Threat Detection and Investigation with Splunk Enterprise Security

5.0

“What I like best about Splunk Enterprise Security is its powerful threat detection and investigation capabilities. It provides a centralized view of security events from multiple sources, making it easier to monitor and analyze security incidents. The correlation searches, custom”

SOC Analyst Trainee