Earlier quoted context omitted.
Why is Splunk among the bests for you? What is the cheaper alternative?
For an on-prem general purpose logging server, it's fast and easy to maintain. The query engine supports fairly complex queries. Did I mention it's fast? Plus it's an industry standard so it's an easier sell in the enterprise. It's also actually not that expensive at low data volumes -- prices are comparable to Sumologic. Cheaper alternatives? You can roll your own logging server with fluentd and a database. Some fol…
Running and managing an ELK stack is just a hassle and a managing nightmare conpared to Splunk. Humio is a great alternative, if you need something cheaper, but you have to give up a lot of features.