I didn't even evaluate Splunk. I am familiar with it and have played with it in the past. Way more manual work to setup and maintain than I am looking for. If LEM doesn't suite your needs the next best bet (based on my evaluations) is LogRythm; however, it really all depends on your needs.
↧