0

BackEnd Elasticsearch/Kibana vs Splunk

I have seen on your website that it is possible to use uberAgent with a Elasticsearch / Kibana as a backend.

What are the main advantages or disadvantages of this type of installation, compared it with Splunk?

2 comments

  • Avatar
    Dominik Britz Official comment

    Hi Edgar,

    Besides Splunk, uberAgent supports Elasticsearch and Azure Monitor as backends. The data uberAgent sends to these backends is exactly the same as it sends to Splunk. But, we do not ship any pre-built dashboards for other backends than Splunk.

  • 0
    Avatar
    Artur Bicki

    Hi Egdar,

    We are partner of Uberagent, also working with Splunk and providing own fork for ELK. So we have experience in above. Splunk app for UAgent is powerfull. Enable You to simply dive into all the metrics without the need of writing any query. Disadvantage, we all know ;) Splunk license.

    For ELK You get a stream of data that You can see in the discovery section of Kibana. All is parsed in the same way like in Splunk. Agent is also the same, so as Dominik wrote, You get the same content.

    If You want to have dashboards, You need to build that or work with companies like us. We have already gone though some installs with UAgent and ELK.

    In my opinion ELK is a better choice, because that kind of data are usually kept for a short time what matters reggarding ELK sizing and does not matter regarding splunk license.

    If needed You can contact us thought product page https://energylogserver.pl - if the moderator allows that link ;)

Please sign in to leave a comment.