Need advice about which tool to choose?Ask the StackShare community!

ELK

837
919
+ 1
21
Splunk

596
992
+ 1
20
Add tool

ELK vs Splunk: What are the differences?

What is ELK? The acronym for three open source projects: Elasticsearch, Logstash, and Kibana. It is the acronym for three open source projects: Elasticsearch, Logstash, and Kibana. Elasticsearch is a search and analytics engine. Logstash is a server‑side data processing pipeline that ingests data from multiple sources simultaneously, transforms it, and then sends it to a "stash" like Elasticsearch. Kibana lets users visualize data with charts and graphs in Elasticsearch.

What is Splunk? Search, monitor, analyze and visualize machine data. Splunk Inc. provides the leading platform for Operational Intelligence. Customers use Splunk to search, monitor, analyze and visualize machine data.

ELK and Splunk can be primarily classified as "Log Management" tools.

According to the StackShare community, ELK has a broader approval, being mentioned in 53 company stacks & 14 developers stacks; compared to Splunk, which is listed in 31 company stacks and 29 developer stacks.

Get Advice from developers at your company using StackShare Enterprise. Sign up for StackShare Enterprise.
Learn More
Pros of ELK
Pros of Splunk
  • 13
    Open source
  • 3
    Can run locally
  • 3
    Good for startups with monetary limitations
  • 1
    External Network Goes Down You Aren't Without Logging
  • 1
    Easy to setup
  • 0
    Json log supprt
  • 0
    Live logging
  • 3
    API for searching logs, running reports
  • 3
    Alert system based on custom query results
  • 2
    Dashboarding on any log contents
  • 2
    Custom log parsing as well as automatic parsing
  • 2
    Ability to style search results into reports
  • 2
    Query engine supports joining, aggregation, stats, etc
  • 2
    Splunk language supports string, date manip, math, etc
  • 2
    Rich GUI for searching live logs
  • 1
    Query any log as key-value pairs
  • 1
    Granular scheduling and time window support

Sign up to add or upvote prosMake informed product decisions

Cons of ELK
Cons of Splunk
  • 5
    Elastic Search is a resource hog
  • 3
    Logstash configuration is a pain
  • 1
    Bad for startups with personal limitations
  • 1
    Splunk query language rich so lots to learn

Sign up to add or upvote consMake informed product decisions

What is ELK?

It is the acronym for three open source projects: Elasticsearch, Logstash, and Kibana. Elasticsearch is a search and analytics engine. Logstash is a server‑side data processing pipeline that ingests data from multiple sources simultaneously, transforms it, and then sends it to a "stash" like Elasticsearch. Kibana lets users visualize data with charts and graphs in Elasticsearch.

What is Splunk?

It provides the leading platform for Operational Intelligence. Customers use it to search, monitor, analyze and visualize machine data.

Need advice about which tool to choose?Ask the StackShare community!

What companies use ELK?
What companies use Splunk?
See which teams inside your own company are using ELK or Splunk.
Sign up for StackShare EnterpriseLearn More

Sign up to get full access to all the companiesMake informed product decisions

What tools integrate with ELK?
What tools integrate with Splunk?

Sign up to get full access to all the tool integrationsMake informed product decisions

Blog Posts

Jul 9 2019 at 7:22PM

Blue Medora

DockerPostgreSQLNew Relic+8
11
2332
Jun 26 2018 at 3:26AM

Twilio SendGrid

GitHubDockerKafka+10
11
9938
What are some alternatives to ELK and Splunk?
Datadog
Datadog is the leading service for cloud-scale monitoring. It is used by IT, operations, and development teams who build and operate applications that run on dynamic or hybrid cloud infrastructure. Start monitoring in minutes with Datadog!
Graylog
Centralize and aggregate all your log files for 100% visibility. Use our powerful query language to search through terabytes of log data to discover and analyze important information.
Logstash
Logstash is a tool for managing events and logs. You can use it to collect logs, parse them, and store them for later use (like, for searching). If you store them in Elasticsearch, you can view and analyze them with Kibana.
Logback
It is intended as a successor to the popular log4j project. It is divided into three modules, logback-core, logback-classic and logback-access. The logback-core module lays the groundwork for the other two modules, logback-classic natively implements the SLF4J API so that you can readily switch back and forth between logback and other logging frameworks and logback-access module integrates with Servlet containers, such as Tomcat and Jetty, to provide HTTP-access log functionality.
SLF4J
It is a simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various logging frameworks allowing the end user to plug in the desired logging framework at deployment time.
See all alternatives