Suricata — #4 Alternative to Splunk
High-performance multi-threaded network IDS, IPS, and NSM packet inspection engine
Developed by the OISF, Suricata inspects multi-gigabit network traffic in real time for TLS anomalies, Emerging Threats signatures, and structured EVE JSON telemetry ready for any open SIEM.
License: GPL-2.0 · Pricing: Free & Open Source · Compare all Splunk alternatives · Official Website