Splunk Enterprise

What do you like best?

The logs can be categorised based on the attributes for fine-tuning the issue encountered. The logs can also be filtered based on the timeframe, not only within the same day but across a wide variety of dates within 30 days.

What do you dislike?

As it loads data from the logs in real-time, the application becomes really slow. As the data is being linked directly fro the database and the local caching is not possible for this enormous amount of data, the user sometimes gets very confused whether the data is being fetched or the API failed, if a timely intimation or loader is placed in the front then it would have been really insightful.

Recommendations to others considering the product:

It is very useful and user friendly for debugging issues through the logs. I will recommend this to adopt for enterprises who want to make their developers' life easy and any non-coding person can also dive in and find the primary root cause before going for a fix.

What problems are you solving with the product? What benefits have you realized?

Any issues reported from the UI team, we resort to the logs via Splunk as the single source of truth. Whenever any bugs are reported, before diving into the code, which is written by someone may years back, it is really easy, helpful and quick to check the logs for diving in the issue and most of the time, a pattern is identified and it helps in finding the root cause from the code very easily and as a result, the resolution also comes out to be very fool-proof and sturdy.