# ELK Stack vs Splunk for Your Advise?

**URL:** <https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716>\
**Category:** Elastic Community and Ecosystem\
**Created:** [September 5, 2015, 2:13pm UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716 "2015-09-05T14:13:01Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Henry\_Pan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/henry_pan/32/1489_2.png) [@Henry\_Pan](https://discuss.elastic.co/u/Henry_Pan)\
**Post date:** [September 5, 2015, 2:13pm UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716/1 "2015-09-05T14:13:01Z")

</div>

Would you please share your take on Splunk vs ELK Stack?

Thanks in advance + Happy Labor Day w/e

– Henry

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 5, 2015, 11:28pm UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716/2 "2015-09-05T23:28:58Z")

</div>

They're both great tools that can happily exist side-by-side.

What do you want to know exactly?

---

<div class="post-metadata">

**Author:** ![Henry\_Pan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/henry_pan/32/1489_2.png) [@Henry\_Pan](https://discuss.elastic.co/u/Henry_Pan)\
**Post date:** [September 5, 2015, 11:48pm UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716/3 "2015-09-05T23:48:37Z")

</div>

Tks Mark for your kindly replay,

I wish to know for a huge hospital group, which solution will be a better  
fit?

Cheers + Happy Labor Day w/e

Henry

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 5, 2015, 11:55pm UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716/4 "2015-09-05T23:55:44Z")

</div>

That's not really something anyone can answer without understanding more about your requirements.

---

<div class="post-metadata">

**Author:** ![Henry\_Pan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/henry_pan/32/1489_2.png) [@Henry\_Pan](https://discuss.elastic.co/u/Henry_Pan)\
**Post date:** [September 6, 2015, 12:09am UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716/5 "2015-09-06T00:09:19Z")

</div>

Ha-ha Mark,

Whom should I reach out to discuss in more detail?

Tks by Henry

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 6, 2015, 12:11am UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716/6 "2015-09-06T00:11:55Z")

</div>

You can ask for community opinions here, or I can put you in touch with our Solution Architect team if you'd like.

---

<div class="post-metadata">

**Author:** ![Henry\_Pan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/henry_pan/32/1489_2.png) [@Henry\_Pan](https://discuss.elastic.co/u/Henry_Pan)\
**Post date:** [September 6, 2015, 12:42am UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716/7 "2015-09-06T00:42:53Z")

</div>

Sure Mark,

Please put me in touch with your Solution Architect team.

Tks by Henry

---

<div class="post-metadata">

**Author:** ![otisg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/otisg/32/492_2.png) [@otisg](https://discuss.elastic.co/u/otisg)\
**Post date:** [September 6, 2015, 3:15pm UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716/8 "2015-09-06T15:15:33Z")

</div>

Hi Henry,

You'll find there are lots and lots of factors involved in deciding here.  
For example:

- Which one are you after: Cloud or On Premises solution
- Are you going to index/search only things like app and server logs or also other business information
- Do you need user management, access control, etc.
- Do you want to manage the underlying infrastructure and ELK on it, or do you want to just call somebody when things break
- How much data are you dealing with (think volume discounts)
- ...

Some options:

- Splunk - very powerful, mainly on premises solution, expensive and, if all you want is "supergrep" _really_ too expensive for that use case
- DIY ELK - no license fees, but you'll end up spending $ on building various features, either right away if you already know you need N features or incrementally and over time as users start demanding features that ELK doesn't have.
- DIY ELK v2 - same as above + consulting/support from Elastic or Sematext to avoid mistakes, help with scaling, provide production support, etc.
- Hosted/Cloud ELK (e.g. our Logsene - [http://sematext.com/logsene](http://sematext.com/logsene) ) - this means you don't need to buy/maintain the hardware or manage Elasticsearch part of ELK.
- On Premises ELK (but a version comes with a number of enterprise features, not the bare-bones DIY ELK - see Logsene again)
- Other hosted solutions - Logentries, Loggly, etc.

I hope this helps.

## Otis

Monitoring \* Alerting \* Anomaly Detection \* Centralized Log Management  
Solr & Elasticsearch Support \* [http://sematext.com/](http://sematext.com/)  
tel: +1 347 480 1610 fax: +1 718 679 9190

---

<div class="post-metadata">

**Author:** ![Henry\_Pan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/henry_pan/32/1489_2.png) [@Henry\_Pan](https://discuss.elastic.co/u/Henry_Pan)\
**Post date:** [March 11, 2016, 4:19pm UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716/9 "2016-03-11T16:19:26Z")

</div>

Saluting Otis for your sound advice!

Henry

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:44pm UTC](https://discuss.elastic.co/t/elk-stack-vs-splunk-for-your-advise/28716/10 "2017-07-06T13:44:32Z")

</div>


