Security
Financial Services

Global leader in electronic funds transfer sector drops Splunk and picks Elastic for observability and security

More customer control over per TB cost

Elastic offers resource-based pricing versus ingest pricing with Splunk.

Flexibility in architectural design

Unlike Splunk, Elastic's flexible hot/warm/frozen architecture allows them to easily meet the retention rates of all business units across the organization.

One platform delivering many solutions

Elastic replaces a host of security and observability solutions, including Splunk and IBM QRadar.


Company Overview

This financial services corporation facilitates electronic funds transfers throughout the world, most commonly through branded credit cards, debit cards, and prepaid cards.

Why Elastic instead of Splunk?

Business units within the globally branded company were pushing for a switch to Elastic to reduce overall logging costs and replace existing security infrastructure.

  • Reduced costs. Increased ingest. With the switch to Elastic, the company could explore all of their data without worrying about a ~$150,000 per TB overage charge from Splunk.
  • Reduced MTTK. Increased performance and security. The company has reduced issue investigation and mitigation times, leading to better application health and performance while also strengthening security protocols across the enterprise.
  • Reduced complexity. Increased agility. By standardizing observability and security with Elastic, the company has simplified operations, provided a single holistic view of system health and security, and even rolled out additional Elastic features to solve organizational enterprise search needs.

Ready to start migrating from Splunk to the Elastic Stack? Learn more.