Splunk vs. Elastic Search Comparison

Hi All,

Before I invest a lot of time integrating and building reports, I was curious what feedback the community has on the different options available for capturing logs and data related to my HA instance and displaying the data. At this time, I was considering Splunk, ELK, and Influx/Grafana (but there might be others).

Some of the considerations I was thinking about (but would welcome others) are:

  • Installation - setting up the LogStore, the hardware you may need to run for the LogStore
  • Configuration - integrating HA with the LogStore to feed it the data.
  • Building Reports - creating the reports in the
  • Integrating reports and alerts into HA frontend

Any thoughts on the experience you have with any of these types of tools?

Any thoughts or ideas?

I thought Splunk would be nice (since you can install locally). I spent a few hours on configuration and it seemed far too complicated for what I needed it for. The component also seemed to introduce stability issues, though I was never able to definitively confirm that (but when I removed the component, things became stable again).

Thanks for the reply @zacs