New comment on reddit

I was there to implement Splunk – so don't know what the cost hiccups were, exactly, on Qradar … but they were able to get more data sources into Splunk faster and more flexibly than they'd been able to with Qradar

We had 90% of their initial use-cases done on day 2 … and I was there for a whole week 🙂

We were getting data into Splunk, and reporting & alerting on it within hours vs the days, weeks, or "never" option of getting it into Qradar