{"id":5889,"date":"2018-10-05T00:00:00","date_gmt":"2018-10-05T00:00:00","guid":{"rendered":"https:\/\/www.esecurityplanet.com\/2018\/10\/05\/splunk-enterprise-security-es-siem-product-overview-and-insight\/"},"modified":"2023-05-19T18:40:33","modified_gmt":"2023-05-19T18:40:33","slug":"splunk-enterprise-security-es","status":"publish","type":"post","link":"https:\/\/www.esecurityplanet.com\/products\/splunk-enterprise-security-es\/","title":{"rendered":"Splunk Enterprise Security Review: SIEM Product Features & Pricing"},"content":{"rendered":"
\n
\n
\n
\n
\n
\n
\n

Splunk’s SIEM system is highly rated and popular, but licensing costs may push it beyond the reach of some SMEs. It is best for larger, well staffed IT organizations willing to pay the price for high security effectiveness. Gartner has rated it as a Leader in its SIEM Magic Quadrant for the last several years and it continues to rate as one of our <\/span>top SIEM products<\/a>.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

Splunk was founded in 2002 and went public in 2012. Currently, 40 percent of the company’s business comes from security. Splunk ES is used with its core Splunk Enterprise product, which can search, monitor and analyze any machine data to provide insight.<\/p>\n

What Is Splunk ES?<\/h2>\n

Splunk’s flagship SIEM technology, Enterprise Security (ES), shows Splunk’s origins in analytics. It integrates with the company’s User Behavior Analytics (UBA)<\/a>, Machine Learning toolkit and Phantom Security Orchestration Automation and Response (SOAR)<\/a>. Splunk Enterprise Security supports all basic and advanced SIEM features, as well as tool orchestration and automation across the security and IT ecosystem, and analytics with machine learning-based anomaly and threat detection. Splunk ES is an analytics-driven SIEM that enables security teams to detect, investigate and respond to internal and external attacks, and to simplify threat management. It centralizes and aggregates all security-relevant events as they’re generated from their source. In addition, it supports a variety of reception\/collection mechanisms, and provides ad hoc searching and reporting for breach analysis.<\/p>\n

In recent months, the company has introduced additional features such as:<\/p>\n