ELK Stack vs Splunk for Your Advise?

Elastic Community and Ecosystem
1

Would you please share your take on Splunk vs ELK Stack?

Thanks in advance + Happy Labor Day w/e

– Henry

2

They're both great tools that can happily exist side-by-side.

What do you want to know exactly?

3

Tks Mark for your kindly replay,

I wish to know for a huge hospital group, which solution will be a better
fit?

Cheers + Happy Labor Day w/e

Henry

4

That's not really something anyone can answer without understanding more about your requirements.

1 Like
5

Ha-ha Mark,

Whom should I reach out to discuss in more detail?

Tks by Henry

6

You can ask for community opinions here, or I can put you in touch with our Solution Architect team if you'd like.

7

Sure Mark,

Please put me in touch with your Solution Architect team.

Tks by Henry

8

Hi Henry,

You'll find there are lots and lots of factors involved in deciding here.
For example:

  • Which one are you after: Cloud or On Premises solution
  • Are you going to index/search only things like app and server logs or also other business information
  • Do you need user management, access control, etc.
  • Do you want to manage the underlying infrastructure and ELK on it, or do you want to just call somebody when things break
  • How much data are you dealing with (think volume discounts)
  • ...

Some options:

  • Splunk - very powerful, mainly on premises solution, expensive and, if all you want is "supergrep" really too expensive for that use case
  • DIY ELK - no license fees, but you'll end up spending $ on building various features, either right away if you already know you need N features or incrementally and over time as users start demanding features that ELK doesn't have.
  • DIY ELK v2 - same as above + consulting/support from Elastic or Sematext to avoid mistakes, help with scaling, provide production support, etc.
  • Hosted/Cloud ELK (e.g. our Logsene - http://sematext.com/logsene ) - this means you don't need to buy/maintain the hardware or manage Elasticsearch part of ELK.
  • On Premises ELK (but a version comes with a number of enterprise features, not the bare-bones DIY ELK - see Logsene again)
  • Other hosted solutions - Logentries, Loggly, etc.

I hope this helps.

Otis

Monitoring * Alerting * Anomaly Detection * Centralized Log Management
Solr & Elasticsearch Support * http://sematext.com/
tel: +1 347 480 1610 fax: +1 718 679 9190

1 Like
9

Saluting Otis for your sound advice!

Henry