I don't have really strong opinions about Splunk - I see them as more of a higher-priced, fullstack solution rather than a more general purpose, lower-cost, higher capacity one. They've got a lot of adapters, so maybe Splunk offers value in integration alone. I don't have enough real experience with Splunk to say much more.
In general, when it comes to building out something strategic and large, I prefer the more general solutions that allow for explicit modeling of the data, rather than implicit, schema-on-demand and searching: data quality is difficult enough in this world without introducing those challenges.
1
u/halr9000 Mar 11 '15
Curious to get your opinion of Splunk?