Benchmark: Azure Sentinel vs. Splunk 10.0 vs. AWS Security Hub for SIEM in Multi-Cloud Environments

In a 12-week benchmark across 3 cloud providers, 1.2PB of security logs, and 14,000 EPS (events per second), Azure Sentinel outperformed Splunk 10.0 in query latency by 42% and AWS Security Hub in ingestion throughput by 3.1x, but Splunk still dominates high-fidelity custom rule authoring for on-pre