topic Is there a "Splunk Enterprise" vs "Splunk Security" comparable list? in Splunk Search

Is there a "Splunk Enterprise" vs "Splunk Security" comparable list?

indeed_2000 — Mon, 05 Jun 2023 14:28:47 GMT

Hi Is there any feature or ability exist in "Splunk Enterprise" that does not exist in "Splunk Security"? Any cheat sheet or comparable list? Thanks

Re: "Splunk Enterprise" vs "Splunk Security" comparable list

gcusello — Sat, 03 Jun 2023 08:00:53 GMT

Hi @indeed_2000,

what do you mean with "Splunk Security"?

are you meaning "Splunk Enterprise Security"?

If yes, they are two different things:

Splunk Enterprise is the log management platform (very briefly!).

Splunk Enterprise Security is a Premium App (not free), that works on Splunk Enterprise (or Splunk Cloud), that gives the feature of a SIEM, and it's one of the best in this market section (Gartner, Forrester and others sources).

In other words, if you need a SIEM, you have to but both Splunk Enterprise and Splunk Enterprise Security.

Ciao.

Giuseppe

Re: "Splunk Enterprise" vs "Splunk Security" comparable list

PickleRick — Sat, 03 Jun 2023 11:03:25 GMT

One more thing - you can have Splunk Enterprise Security on your on-premise Splunk Enterprise installation or in Splunk Cloud.