Cost is not addressed here. The question of "could it" seems narrow and the real question is "should it" replace Netcool. I wonder if the answers thus far come from folks who are inclined to use Splunk for everything . . .
To me it seems like I am creating a lot of stuff that exists out-of-the-box with Netcool. And then I have to maintain it . . . and figure out (although it may be trivial) how to digest SNMP and NetFlow, and integrate all the other inbound messages I process with Omnibus into Splunk. Then I have to create a dashboard and all of the other "right-click" functionality that's built into the Web GUI. And then I have to create an separate infrastructure to get syslog data from all the appliances, routers, switches . . .
Has anyone done this because it makes financial sense?
Just because it's possible doesn't mean it's a good idea.
... View more