Need advice about which tool to choose?Ask the StackShare community!

ELK

729
752
+ 1
20
Splunk

519
828
+ 1
13
Add tool

ELK vs Splunk: What are the differences?

What is ELK? The acronym for three open source projects: Elasticsearch, Logstash, and Kibana. It is the acronym for three open source projects: Elasticsearch, Logstash, and Kibana. Elasticsearch is a search and analytics engine. Logstash is a server‑side data processing pipeline that ingests data from multiple sources simultaneously, transforms it, and then sends it to a "stash" like Elasticsearch. Kibana lets users visualize data with charts and graphs in Elasticsearch.

What is Splunk? Search, monitor, analyze and visualize machine data. Splunk Inc. provides the leading platform for Operational Intelligence. Customers use Splunk to search, monitor, analyze and visualize machine data.

ELK and Splunk can be primarily classified as "Log Management" tools.

According to the StackShare community, ELK has a broader approval, being mentioned in 53 company stacks & 14 developers stacks; compared to Splunk, which is listed in 31 company stacks and 29 developer stacks.

Get Advice from developers at your company using StackShare Enterprise. Sign up for StackShare Enterprise.
Learn More
Pros of ELK
Pros of Splunk
  • 13
    Open source
  • 3
    Good for startups with monetary limitations
  • 2
    Can run locally
  • 1
    Easy to setup
  • 1
    External Network Goes Down You Aren't Without Logging
  • 0
    Json log supprt
  • 0
    Live logging
  • 2
    Alert system based on custom query results
  • 2
    API for searching logs, running reports
  • 2
    Query engine supports joining, aggregation, stats, etc
  • 1
    Ability to style search results into reports
  • 1
    Query any log as key-value pairs
  • 1
    Splunk language supports string, date manip, math, etc
  • 1
    Granular scheduling and time window support
  • 1
    Custom log parsing as well as automatic parsing
  • 1
    Dashboarding on any log contents
  • 1
    Rich GUI for searching live logs

Sign up to add or upvote prosMake informed product decisions

Cons of ELK
Cons of Splunk
  • 4
    Elastic Search is a resource hog
  • 3
    Logstash configuration is a pain
  • 1
    Bad for startups with personal limitations
  • 1
    Splunk query language rich so lots to learn

Sign up to add or upvote consMake informed product decisions

What is ELK?

It is the acronym for three open source projects: Elasticsearch, Logstash, and Kibana. Elasticsearch is a search and analytics engine. Logstash is a server‑side data processing pipeline that ingests data from multiple sources simultaneously, transforms it, and then sends it to a "stash" like Elasticsearch. Kibana lets users visualize data with charts and graphs in Elasticsearch.

What is Splunk?

It provides the leading platform for Operational Intelligence. Customers use it to search, monitor, analyze and visualize machine data.

Need advice about which tool to choose?Ask the StackShare community!

Jobs that mention ELK and Splunk as a desired skillset
CBRE
United States of America Texas Richardson
CBRE
United Kingdom of Great Britain and Northern Ireland England Feltham
What companies use ELK?
What companies use Splunk?
See which teams inside your own company are using ELK or Splunk.
Sign up for StackShare EnterpriseLearn More

Sign up to get full access to all the companiesMake informed product decisions

What tools integrate with ELK?
What tools integrate with Splunk?

Sign up to get full access to all the tool integrationsMake informed product decisions

Blog Posts

Jul 9 2019 at 7:22PM

Blue Medora

DockerPostgreSQLNew Relic+8
11
1889
Jun 26 2018 at 3:26AM

Twilio SendGrid

GitHubDockerKafka+10
11
9505
What are some alternatives to ELK and Splunk?
Datadog
Datadog is the leading service for cloud-scale monitoring. It is used by IT, operations, and development teams who build and operate applications that run on dynamic or hybrid cloud infrastructure. Start monitoring in minutes with Datadog!
Graylog
Centralize and aggregate all your log files for 100% visibility. Use our powerful query language to search through terabytes of log data to discover and analyze important information.
Logstash
Logstash is a tool for managing events and logs. You can use it to collect logs, parse them, and store them for later use (like, for searching). If you store them in Elasticsearch, you can view and analyze them with Kibana.
Logback
It is intended as a successor to the popular log4j project. It is divided into three modules, logback-core, logback-classic and logback-access. The logback-core module lays the groundwork for the other two modules, logback-classic natively implements the SLF4J API so that you can readily switch back and forth between logback and other logging frameworks and logback-access module integrates with Servlet containers, such as Tomcat and Jetty, to provide HTTP-access log functionality.
SLF4J
It is a simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various logging frameworks allowing the end user to plug in the desired logging framework at deployment time.
See all alternatives