Alienvault (now AT&T Cybersecurity) is really focused on the SIEM space and is only ok at that. While it has a lot of features, it's not very flexible. For exam

Alienvault (now AT&T Cybersecurity) is really focused on the SIEM space and is only ok at that. While it has a lot of features, it's not very flexible. For example, neither the vulnerability scanner nor the compliance scanner can send out alerts upon newly found vulnerabilities/compliance issues. My feeling is that if you're used to using most of Splunk's capabilities, Alienvault will be disappointing