Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Splunk Enterprise Security by Splunk View product | TShark by Wireshark View product |
|---|---|---|
| Overview | ||
| What it is | Splunk Enterprise Security is an analytics-driven enterprise SIEM for flagship SIEM and risk-based alerting. See features and Security Analytics alternatives. | Evaluating TShark? See how this Network Security tool handles PCAP/PCAPNG parsing and automated packet dissection, where it fits best and which alternatives to compare. |
| Product type | Analytics-Driven Enterprise SIEM | Command-Line Network Protocol Analyzer & Packet Capture Tool |
| Best for | Cross-industry, Enterprise SOC, Banking, Government | Cross-industry, Cybersecurity Engineering, IT Operations, Academic, Technology, Cybersecurity Consulting, Government, Higher Education |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | Cloud |
| Deployment details | Cloud; On-premises; Cloud SaaS; On-premises software deployment | Command-Line Interface / Terminal Utility; Local CLI binary / Docker container |
| Data residency | Global; US; EU; APAC | Local workstation / Server filesystem |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: no |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | Enterprise SOCHybrid Multi-Cloud | Headless Linux serversTerminal environmentsVirtual machines |
| Compliance | SOC 2ISO 27001PCI DSSHIPAAFedRAMP | Open source baseline (GNU GPLv2) |
| Integrations & coverage | ||
| Integrations | Splunk EnterpriseSplunk CloudSplunk SOARServiceNowCrowdStrike | PythonBashPowerShellSnortSuricataELK StackZeek |
| Industries | Cross-industryEnterprise SOCBankingGovernment | Cross-industryCybersecurity EngineeringIT OperationsAcademicTechnologyCybersecurity Consulting+2 more |
| Regions | Global | Global |
| Vendor | ||
| Company | Splunk | Wireshark |
| Headquarters | San Francisco, California, USA | Global Open Source Project |
| Company size | 8,000+ | 1-10 |
| Founded | 2003 | 1998 |
Overview
What it is
Splunk Enterprise Security
Splunk Enterprise Security is an analytics-driven enterprise SIEM for flagship SIEM and risk-based alerting. See features and Security Analytics alternatives.TShark
Evaluating TShark? See how this Network Security tool handles PCAP/PCAPNG parsing and automated packet dissection, where it fits best and which alternatives to compare.Product type
Splunk Enterprise Security
Analytics-Driven Enterprise SIEMTShark
Command-Line Network Protocol Analyzer & Packet Capture ToolBest for
Splunk Enterprise Security
Cross-industry, Enterprise SOC, Banking, GovernmentTShark
Cross-industry, Cybersecurity Engineering, IT Operations, Academic, Technology, Cybersecurity Consulting, Government, Higher EducationPricing
Pricing model
Splunk Enterprise Security
Contact VendorTShark
Contact VendorFree trial
Splunk Enterprise Security
Free trial: yesTShark
Free trial: yesDeployment
Deployment options
Splunk Enterprise Security
TShark
Deployment details
Splunk Enterprise Security
Cloud; On-premises; Cloud SaaS; On-premises software deploymentTShark
Command-Line Interface / Terminal Utility; Local CLI binary / Docker containerData residency
Splunk Enterprise Security
Global; US; EU; APACTShark
Local workstation / Server filesystemKey features
What it offers
Splunk Enterprise Security
- Analytics-driven SIEM
- Risk-based alerting (RBA)
- MITRE ATT&CK correlation
- Threat intelligence sync
- Asset profiling
- Flagship SIEM
- Risk-based alerting
- Security threat investigation
TShark
- Live packet capture via libpcap/Npcap
- PCAP/PCAPNG parsing
- Wireshark display filter syntax
- JSON/CSV/XML structured output
- Automated packet dissection
- Scriptable headless operation
- Automated network packet analysis
- Headless network troubleshooting
Platform & access
API access
Splunk Enterprise Security
API access: yesTShark
API access: yesSingle sign-on (SSO)
Splunk Enterprise Security
SSO: yesTShark
SSO: noRole-based access (RBAC)
Splunk Enterprise Security
RBAC: yesTShark
RBAC: noMulti-tenant
Splunk Enterprise Security
Multi-tenant: yesTShark
Multi-tenant: noMobile app
Splunk Enterprise Security
Mobile app: yesTShark
Mobile app: noSupported platforms
Splunk Enterprise Security
TShark
Compliance
Splunk Enterprise Security
TShark
Integrations & coverage
Integrations
Splunk Enterprise Security
TShark
Industries
Splunk Enterprise Security
TShark
Regions
Splunk Enterprise Security
TShark
Vendor
Company
Splunk Enterprise Security
SplunkTShark
WiresharkHeadquarters
Splunk Enterprise Security
San Francisco, California, USATShark
Global Open Source ProjectCompany size
Splunk Enterprise Security
8,000+TShark
1-10Founded
Splunk Enterprise Security
2003TShark
1998