Splunk vs Splunk Cloud

Overview

Splunk Cloud

Stacks169

Followers438

Votes15

Splunk

Stacks772

Followers1.0K

Votes20

Splunk vs Splunk Cloud: What are the differences?

Differences between Splunk and Splunk Cloud

Splunk is a powerful software platform that provides real-time operational intelligence and log management solutions. On the other hand, Splunk Cloud is a cloud-based version of Splunk, providing the same functionality as Splunk but with the added benefit of being hosted on the cloud.

Installation and Infrastructure: Splunk requires a dedicated server infrastructure for installation and maintenance, whereas with Splunk Cloud, the infrastructure and maintenance are taken care of by Splunk as it is hosted on the cloud. This relieves the users from the burden of managing the server infrastructure themselves.
Scalability and Elasticity: Splunk's scalability depends on the server infrastructure it is installed on, and scaling up or down can be a complex process. On the other hand, Splunk Cloud offers easier scalability and elasticity, as it is hosted on the cloud. Users can quickly increase or decrease resources as needed to accommodate changes in data volume or workload.
Upgrades and Maintenance: Splunk users are responsible for managing upgrades and maintaining their installations, which requires planning and effort to ensure minimal downtime. In contrast, with Splunk Cloud, upgrades and maintenance are handled by Splunk, providing users with a hassle-free experience as updates and patches are automatically applied without disrupting service.
Data Security and Compliance: Splunk offers various security features, but the responsibility for securing the infrastructure and data rests with the users themselves. On the other hand, Splunk Cloud incorporates additional security measures to protect data stored in the cloud, relieving users of some security responsibilities. Splunk Cloud also provides options for compliance with industry-specific regulations.
Cost and Pricing Model: Splunk has a perpetual license model, where users pay for the software and infrastructure upfront. In contrast, Splunk Cloud follows a subscription-based pricing model, with users paying on a monthly or annual basis. Splunk Cloud provides flexibility in terms of scalability and cost, allowing users to adjust resources and costs based on their needs.
Deployment and Time-to-Value: Splunk's deployment can be time-consuming, involving infrastructure setup, configuration, and optimization. Splunk Cloud offers a faster time-to-value as it eliminates the need for infrastructure setup and allows users to start analyzing data and gaining insights almost immediately after signing up.

In summary, the key differences between Splunk and Splunk Cloud lie in the aspects of installation and infrastructure, scalability and elasticity, upgrades and maintenance, data security and compliance, cost and pricing model, and deployment time-to-value. Splunk Cloud, being a cloud-based solution, provides easier scalability, automatic upgrades, enhanced data security, flexible pricing, and faster deployment, making it a convenient option for organizations seeking a hassle-free way to harness the power of Splunk.

Share your Stack

Help developers discover the tools you use. Get visibility for your team's tech choices and contribute to the community's knowledge.

View Docs

CLI (Node.js)

Manual

Advice on Splunk Cloud, Splunk

Jigar

Security Software Engineer at Cisco

Jul 2, 2020

Needs adviceon

AWS IAM

Amazon EC2

Splunk Cloud

We would like to detect unusual config changes that can potentially cause production outage.

Such as, SecurityGroup new allow/deny rule, AuthZ policy change, Secret key/certificate rotation, IP subnet add/drop. The problem is the source of all of these activities is different, i.e., AWS IAM, Amazon EC2, internal prod services, envoy sidecar, etc.

Which of the technology would be best suitable to detect only IMP events (not all activity) from various sources all workload running on AWS and also Splunk Cloud?

168k views168k

Comments

Detailed Comparison

Splunk Cloud	Splunk
If you're looking for all the benefits of Splunk® Enterprise with all the benefits of software-as-a-service, then look no further. Splunk Cloud is backed by a 100% uptime SLA, scales to over 10TB/day, and offers a highly secure environment.	It provides the leading platform for Operational Intelligence. Customers use it to search, monitor, analyze and visualize machine data.
Splunk Cloud delivers all the features of award-winning Splunk® Enterprise, as a cloud-based service. The platform provides access to various apps and enables centralized visibility across cloud, hybrid and on-premises environments; Instant: Instant trial and instant conversion from POC to production; Secure: Completed SOC2 Type 2 Attestation. Dedicated cloud environments for each customer; Reliable: 100% uptime SLA. All the features of Splunk Enterprise, including apps, APIs, SDKs. 10TB+/day scalability and up to 10x bursting over licensed data volumes*; Hybrid: Centralized visibility across Splunk Cloud (SaaS) and Splunk Enterprise (software);	Predict and prevent problems with one unified monitoring experience; Streamline your entire security stack with Splunk as the nerve center; Detect, investigate and diagnose problems easily with end-to-end observability
Statistics
Stacks 169	Stacks 772
Followers 438	Followers 1.0K
Votes 15	Votes 20
Pros & Cons
Pros 7 More powerful & Integrates with on-prem & off-prem 3 Free 3 Powerful log analytics 1 Production debugger 1 Pci compliance	Pros 3 Alert system based on custom query results 3 API for searching logs, running reports 2 Ability to style search results into reports 2 Query engine supports joining, aggregation, stats, etc 2 Custom log parsing as well as automatic parsing Cons 1 Splunk query language rich so lots to learn
Integrations
AWS CloudFormation AWS CloudTrail	No integrations available

What are some alternatives to Splunk Cloud, Splunk?

New Relic

The world’s best software and DevOps teams rely on New Relic to move faster, make better decisions and create best-in-class digital experiences. If you run software, you need to run New Relic. More than 50% of the Fortune 100 do too.

Datadog

Datadog is the leading service for cloud-scale monitoring. It is used by IT, operations, and development teams who build and operate applications that run on dynamic or hybrid cloud infrastructure. Start monitoring in minutes with Datadog!

Papertrail

Papertrail helps detect, resolve, and avoid infrastructure problems using log messages. Papertrail's practicality comes from our own experience as sysadmins, developers, and entrepreneurs.

Logmatic

Get a clear overview of what is happening across your distributed environments, and spot the needle in the haystack in no time. Build dynamic analyses and identify improvements for your software, your user experience and your business.

Raygun

Raygun gives you a window into how users are really experiencing your software applications. Detect, diagnose and resolve issues that are affecting end users with greater speed and accuracy.

Loggly

It is a SaaS solution to manage your log data. There is nothing to install and updates are automatically applied to your Loggly subdomain.

Apache Spark

Spark is a fast and general processing engine compatible with Hadoop data. It can run in Hadoop clusters through YARN or Spark's standalone mode, and it can process data in HDFS, HBase, Cassandra, Hive, and any Hadoop InputFormat. It is designed to perform both batch processing (similar to MapReduce) and new workloads like streaming, interactive queries, and machine learning.

Logentries

Logentries makes machine-generated log data easily accessible to IT operations, development, and business analysis teams of all sizes. With the broadest platform support and an open API, Logentries brings the value of log-level data to any system, to any team member, and to a community of more than 25,000 worldwide users.

Logstash

Logstash is a tool for managing events and logs. You can use it to collect logs, parse them, and store them for later use (like, for searching). If you store them in Elasticsearch, you can view and analyze them with Kibana.

AppSignal

AppSignal gives you and your team alerts and detailed metrics about your Ruby, Node.js or Elixir application. Sensible pricing, no aggressive sales & support by developers.

Related Comparisons

Splunk vs Splunk Cloud: What are the differences?

Differences between Splunk and Splunk Cloud

Installation and Infrastructure: Splunk requires a dedicated server infrastructure for installation and maintenance, whereas with Splunk Cloud, the infrastructure and maintenance are taken care of by Splunk as it is hosted on the cloud. This relieves the users from the burden of managing the server infrastructure themselves.
Scalability and Elasticity: Splunk's scalability depends on the server infrastructure it is installed on, and scaling up or down can be a complex process. On the other hand, Splunk Cloud offers easier scalability and elasticity, as it is hosted on the cloud. Users can quickly increase or decrease resources as needed to accommodate changes in data volume or workload.
Upgrades and Maintenance: Splunk users are responsible for managing upgrades and maintaining their installations, which requires planning and effort to ensure minimal downtime. In contrast, with Splunk Cloud, upgrades and maintenance are handled by Splunk, providing users with a hassle-free experience as updates and patches are automatically applied without disrupting service.
Data Security and Compliance: Splunk offers various security features, but the responsibility for securing the infrastructure and data rests with the users themselves. On the other hand, Splunk Cloud incorporates additional security measures to protect data stored in the cloud, relieving users of some security responsibilities. Splunk Cloud also provides options for compliance with industry-specific regulations.
Cost and Pricing Model: Splunk has a perpetual license model, where users pay for the software and infrastructure upfront. In contrast, Splunk Cloud follows a subscription-based pricing model, with users paying on a monthly or annual basis. Splunk Cloud provides flexibility in terms of scalability and cost, allowing users to adjust resources and costs based on their needs.
Deployment and Time-to-Value: Splunk's deployment can be time-consuming, involving infrastructure setup, configuration, and optimization. Splunk Cloud offers a faster time-to-value as it eliminates the need for infrastructure setup and allows users to start analyzing data and gaining insights almost immediately after signing up.

Splunk vs Splunk Cloud

Overview

Splunk vs Splunk Cloud: What are the differences?