Get Advice Icon

Need advice about which tool to choose?Ask the StackShare community!

Sentry

14.6K
9.3K
+ 1
864
Splunk Cloud

167
438
+ 1
15
Add tool

Sentry vs Splunk Cloud: What are the differences?

Introduction

Sentry and Splunk Cloud are two popular platforms used for monitoring and managing software applications. While both platforms offer similar functionalities, they have key differences that set them apart from each other. In this article, we will discuss these differences in detail.

  1. Pricing Model: Sentry follows a usage-based pricing model, where users are charged based on the volume of data they send and the features they require. On the other hand, Splunk Cloud uses a subscription-based pricing model, which offers fixed pricing plans with different tiers based on data ingestion limits and additional features.

  2. Deployment Model: Sentry is primarily offered as a cloud-based solution, where the platform is hosted and managed by Sentry. It provides ease of use and eliminates the need for infrastructure management. In contrast, Splunk Cloud offers the flexibility of both cloud-based and on-premises deployments. Users can choose to host Splunk Cloud on their own infrastructure or leverage the cloud-hosted option provided by Splunk.

  3. Data Retention: Sentry provides a default data retention period of 90 days for event data, which can be extended up to 1 year with the purchase of additional data retention packs. Splunk Cloud, on the other hand, offers flexible data retention options based on the subscription tier chosen by the user. The retention period can range from 15 days to 5 years, depending on the selected plan.

  4. Ease of Integration: Sentry integrates seamlessly with a wide range of programming languages and frameworks, making it easier for developers to integrate error monitoring into their applications. Splunk Cloud offers extensive integration capabilities as well, but it requires more configuration and setup compared to Sentry.

  5. Advanced Analytics and Search Capabilities: Splunk Cloud offers powerful search and analytics capabilities, allowing users to explore and analyze their data using a query language called SPL (Splunk Processing Language). The platform also provides machine learning capabilities and pre-built dashboards for visualizing data. While Sentry offers basic search and filtering functionality, it does not provide the same level of advanced analytics and machine learning capabilities as Splunk Cloud.

  6. Focus on Application Performance Monitoring: Sentry focuses primarily on error monitoring and application performance monitoring (APM). It provides detailed insights into errors and performance issues, helping developers identify and troubleshoot issues quickly. Splunk Cloud, on the other hand, is a more comprehensive platform that offers a wide range of monitoring and analysis capabilities beyond just APM.

In summary, Sentry and Splunk Cloud differ in their pricing models, deployment options, data retention periods, ease of integration, analytics capabilities, and focus on application performance monitoring.

Advice on Sentry and Splunk Cloud
Jigar Shah
Security Software Engineer at Pinterest · | 8 upvotes · 161.4K views

We would like to detect unusual config changes that can potentially cause production outage.

Such as, SecurityGroup new allow/deny rule, AuthZ policy change, Secret key/certificate rotation, IP subnet add/drop. The problem is the source of all of these activities is different, i.e., AWS IAM, Amazon EC2, internal prod services, envoy sidecar, etc.

Which of the technology would be best suitable to detect only IMP events (not all activity) from various sources all workload running on AWS and also Splunk Cloud?

See more
Replies (5)
Nati Abebe
Recommends
on
AWS ConfigAWS Config

For continuous monitoring and detecting unusual configuration changes, I would suggest you look into AWS Config.

AWS Config enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. Here is a list of supported AWS resources types and resource relationships with AWS Config https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html

Also as of Nov, 2019 - AWS Config launches support for third-party resources. You can now publish the configuration of third-party resources, such as GitHub repositories, Microsoft Active Directory resources, or any on-premises server into AWS Config using the new API. Here is more detail: https://docs.aws.amazon.com/config/latest/developerguide/customresources.html

If you have multiple AWS Account in your organization and want to detect changes there: https://docs.aws.amazon.com/config/latest/developerguide/aggregate-data.html

Lastly, if you already use Splunk Cloud in your enterprise and are looking for a consolidated view then, AWS Config is supported by Splunk Cloud as per their documentation too. https://aws.amazon.com/marketplace/pp/Splunk-Inc-Splunk-Cloud/B06XK299KV https://aws.amazon.com/marketplace/pp/Splunk-Inc-Splunk-Cloud/B06XK299KV

See more
Isaac Povey
Casual Software Engineer at Skedulo · | 6 upvotes · 72.1K views
Recommends
on
TerraformTerraform

While it won't detect events as they happen a good stop gap would be to define your infrastructure config using terraform. You can then periodically run the terraform config against your environment and alert if there are any changes.

See more
Matthew Rothstein
Recommends
on
Security MonkeySecurity Monkey

Consider using a combination of Netflix Security Monkey and AWS Guard Duty.

You can achieve automated detection and alerting, as well as automated recovery based on policies with these tools.

For instance, you could detect SecurityGroup rule changes that allow unrestricted egress from EC2 instances and then revert those changes automatically.

It's unclear from your post whether you want to detect events within the Splunk Cloud infrastructure or if you want to detect events indicated in data going to Splunk using the Splunk capabilities. If the latter, then Splunk has extremely rich capabilities in their query language and integrated alerting functions. With Splunk you can also run arbitrary Python scripts in response to certain events, so what you can't analyze and alert on with native functionality or plugins, you could write code to achieve.

See more
Vijayanand Narayanasharma
DevOps/TechOps Consultant at Qantas Loyalty · | 3 upvotes · 63.1K views
Recommends
on
AWS CloudTrailAWS CloudTrail

Well there are clear advantages of using either tools, it all boils down to what exactly are you trying to achieve with this i.e do you want to proactive monitoring or do you want debug an incident/issue. Splunk definitely is superior in terms of proactively monitoring your logs for unusal events, but getting the cloudtrail logs across to splunk would require some not so straight forward setup (Splunk has a blueprint for this setup which uses AWS kinesis/Firehose). Cloudtrail on the other had is available out of the box from AWS, the setup is quite simple and straight forward. But analysing the log could require you setup Glue crawlers and you might have to use AWS Athena to run SQL Like query.

Refer: https://docs.aws.amazon.com/athena/latest/ug/cloudtrail-logs.html

In my personal experience the cost/effort involved in setting up splunk is not worth it for smaller workloads, whereas the AWS Cloudtrail/Glue/Athena would be less expensive setup(comparatively).

Alternatively you could look at something like sumologic, which has better integration with cloudtrail as opposed to splunk. Hope that helps.

See more
Recommends
on
AWS CloudTrailAWS CloudTrail

I'd recommend using CloudTrail, it helped me a lot. But depending on your situation I'd recommed building a custom solution(like aws amazon-ssm-agent) which on configuration change makes an API call and logs them in grafana or kibana.

See more
Decisions about Sentry and Splunk Cloud

I essentially inherited a Shopify theme that was originally created by an agency. After discovering a number of errors being thrown in the Dev Console just by scrolling through the website, I needed more visibility over any errors happening in the field. Having used both Sentry and TrackJS, I always got lost in the TrackJS interface, so I felt more comfortable introducing Sentry. The Sentry free tier is also very generous, although it turns out the theme threw over 15k errors in less than a week.

I highly recommend setting up error tracking from day one. Theoretically, you should never need to upgrade from the free tier if you're keeping on top of the errors...

See more
Manage your open source components, licenses, and vulnerabilities
Learn More
Pros of Sentry
Pros of Splunk Cloud
  • 238
    Consolidates similar errors and makes resolution easy
  • 121
    Email Notifications
  • 108
    Open source
  • 84
    Slack integration
  • 71
    Github integration
  • 49
    Easy
  • 44
    User-friendly interface
  • 28
    The most important tool we use in production
  • 18
    Hipchat integration
  • 17
    Heroku Integration
  • 15
    Good documentation
  • 14
    Free tier
  • 11
    Self-hosted
  • 9
    Easy setup
  • 7
    Realiable
  • 6
    Provides context, and great stack trace
  • 4
    Feedback form on error pages
  • 4
    Love it baby
  • 3
    Gitlab integration
  • 3
    Filter by custom tags
  • 3
    Super user friendly
  • 3
    Captures local variables at each frame in backtraces
  • 3
    Easy Integration
  • 1
    Performance measurements
  • 7
    More powerful & Integrates with on-prem & off-prem
  • 3
    Free
  • 3
    Powerful log analytics
  • 1
    Pci compliance
  • 1
    Production debugger

Sign up to add or upvote prosMake informed product decisions

Cons of Sentry
Cons of Splunk Cloud
  • 12
    Confusing UI
  • 4
    Bundle size
    Be the first to leave a con

    Sign up to add or upvote consMake informed product decisions

    1.9K
    3K
    1.5K
    123
    2.6K
    6
    - No public GitHub repository available -

    What is Sentry?

    Sentry’s Application Monitoring platform helps developers see performance issues, fix errors faster, and optimize their code health.

    What is Splunk Cloud?

    If you're looking for all the benefits of Splunk® Enterprise with all the benefits of software-as-a-service, then look no further. Splunk Cloud is backed by a 100% uptime SLA, scales to over 10TB/day, and offers a highly secure environment.

    Need advice about which tool to choose?Ask the StackShare community!

    What companies use Sentry?
    What companies use Splunk Cloud?
    Manage your open source components, licenses, and vulnerabilities
    Learn More

    Sign up to get full access to all the companiesMake informed product decisions

    What tools integrate with Sentry?
    What tools integrate with Splunk Cloud?

    Sign up to get full access to all the tool integrationsMake informed product decisions

    Blog Posts

    Oct 11 2019 at 2:36PM

    LogRocket

    JavaScriptReactAngularJS+8
    5
    2025
    JavaScriptGitHubNode.js+29
    14
    13678
    GitHubPythonReact+42
    49
    41013
    GitGitHubPython+22
    17
    14310
    What are some alternatives to Sentry and Splunk Cloud?
    Datadog
    Datadog is the leading service for cloud-scale monitoring. It is used by IT, operations, and development teams who build and operate applications that run on dynamic or hybrid cloud infrastructure. Start monitoring in minutes with Datadog!
    Rollbar
    Rollbar is the leading continuous code improvement platform that proactively discovers, predicts, and remediates errors with real-time AI-assisted workflows. With Rollbar, developers continually improve their code and constantly innovate ra
    Crashlytics
    Instead of just showing you the stack trace, Crashlytics performs deep analysis of each and every thread. We de-prioritize lines that don't matter while highlighting the interesting ones. This makes reading stack traces easier, faster, and far more useful! Crashlytics' intelligent grouping can take 50,000 crashes, distill them down to 20 unique issues, and then tell you which 3 are the most important to fix.
    Bugsnag
    Bugsnag captures errors from your web, mobile and back-end applications, providing instant visibility into user impact. Diagnostic data and tools are included to help your team prioritize, debug and fix exceptions fast.
    New Relic
    The world’s best software and DevOps teams rely on New Relic to move faster, make better decisions and create best-in-class digital experiences. If you run software, you need to run New Relic. More than 50% of the Fortune 100 do too.
    See all alternatives