TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Logstash

    Score8 out of 10
    N/AN/AN/A

    Splunk Cloud Platform

    Score7.8 out of 10
    N/ASplunk Cloud Platform is a data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts.N/A
    Pricing
    LogstashSplunk Cloud Platform
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    LogstashSplunk Cloud Platform
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    LogstashSplunk Cloud Platform
    Considered Both Products
    Elastic
    No answer on this topic
    Cisco
    No answer on this topic
    Key User Insights
    Would buy again
    No answers on this topic
    100%
    Would buy again
    9 Answers
    Delivers good value for the price
    No answers on this topic
    88%
    Delivers good value for the price
    7 Answers
    Happy with the feature set
    No answers on this topic
    100%
    Happy with the feature set
    9 Answers
    Lived up to sales and marketing promises
    No answers on this topic
    88%
    Lived up to sales and marketing promises
    7 Answers
    Implementation went as expected
    No answers on this topic
    100%
    Implementation went as expected
    9 Answers
    Features
    LogstashSplunk Cloud Platform
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Logstash and Splunk Cloud Platform
    Feature
    Logstash
    -
    Ratings
    Splunk Cloud Platform
    9.0
    15 Ratings
    15% above category average
    Centralized event and log data collection00 Ratings9.015 Ratings
    Correlation00 Ratings9.715 Ratings
    Event and log normalization/management00 Ratings9.715 Ratings
    Deployment flexibility00 Ratings9.015 Ratings
    Integration with Identity and Access Management Tools00 Ratings9.313 Ratings
    Custom dashboards and workspaces00 Ratings9.715 Ratings
    Host and network-based intrusion detection00 Ratings8.613 Ratings
    Data integration/API management00 Ratings8.65 Ratings
    Behavioral analytics and baselining00 Ratings9.04 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings8.46 Ratings
    Response orchestration and automation00 Ratings8.04 Ratings
    Reporting and compliance management00 Ratings8.76 Ratings
    Incident indexing/searching00 Ratings9.36 Ratings
    Best Alternatives
    LogstashSplunk Cloud Platform
    Small Businesses
    SolarWinds Papertrail
    Score8.9 out of 10
    No answers on this topic
    Medium-sized Companies
    SolarWinds Kiwi Syslog Server
    Score7.5 out of 10
    IBM Security QRadar SIEM
    Score9 out of 10
    Enterprises
    SolarWinds Loggly
    Score5.1 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    LogstashSplunk Cloud Platform
    Likelihood to Recommend
    10.0
    (3 ratings)
    9.9
    (15 ratings)
    Usability
    -
    (0 ratings)
    8.0
    (1 ratings)
    Support Rating
    -
    (0 ratings)
    7.2
    (4 ratings)
    User Testimonials
    LogstashSplunk Cloud Platform
    Likelihood to Recommend
    Elastic
    Perfect for projects where Elasticsearch makes sense: if you decide to employ ES in a project, then you will almost inevitably use LogStash, and you should anyways. Such projects would include: 1. Data Science (reading, recording or measure web-based Analytics, Metrics) 2. Web Scraping (which was one of our earlier projects involving LogStash) 3. Syslog-ng Management: While I did point out that it can be a bit of an electric boo-ga-loo in finding an errant configuration item, it is still worth it to implement Syslog-ng management via LogStash: being able to fine-tune your log messages and then pipe them to other sources, depending on the data being read in, is incredibly powerful, and I would say is exemplar of what modern Computer Science looks like: Less Specialization in mathematics, and more specialization in storing and recording data (i.e. Less Engineering, and more Design).
    Incentivized
    Read full review
    Cisco
    Splunk is excellent when all your data is in one location. Its ability to correlate all that data is intuitive (once the hurdle of learning the query language is overcome). It is also easy to standardize the presentation of information to the company. When data is siloed/standalone, other systems can be cheaper and faster to implement.
    Incentivized
    Read full review
    Pros
    Elastic
    • Logstash design is definitely perfect for the use case of ELK. Logstash has "drivers" using which it can inject from virtually any source. This takes the headache from source to implement those "drivers" to store data to ES.
    • Logstash is fast, very fast. As per my observance, you don't need more than 1 or 2 servers for even big size projects.
    • Data in different shape, size, and formats? No worries, Logstash can handle it. It lets you write simple rules to programmatically take decisions real-time on data.
    • You can change your data on the fly! This is the CORE power of Logstash. The concept is similar to Kafka streams, the difference being the source and destination are application and ES respectively.
    Incentivized
    Read full review
    Cisco
    • This SIEM consolidates multiple data points and offers several features and benefits, creating custom dashboards and managing alert workflows.
    • Splunk Cloud provides a simple way to have a central monitoring and security solution. Though it does not have a huge learning curve, you should spend some time learning the basics.
    • Splunk Cloud enables me to create and schedule statistical reports on network use for Management.
    Incentivized
    Read full review
    Cons
    Elastic
    • It is heavy i.e., intensive as of now. Need to reduce overhead to save CPU/RAM consumption
    • Need to be more Kubernetes-friendly. Should support auto-scaling and K8s observability
    • Initial configuration is still complex. A seamless config procedure is still required
    Read full review
    Cisco
    • The SPL programming language that the queries are built in is not very intuitive.
    • There should be a better repository of pre-built queries for what I would think of as common Active Directory usage monitoring.
    • I would like to see more free training/familiarization information made available.
    Incentivized
    Read full review
    Likelihood to Renew
    Elastic
    No answers on this topic
    Cisco
    Ease of use and have all the features we need
    Incentivized
    Read full review
    Usability
    Elastic
    As I said earlier, for a production-grade OpenStack Telco cloud, Logstash brings high value in flexibility, compliance, and troubleshooting efficiency. However, this brings a higher infra & ops cost on resources, but that is not a problem in big datacenters because there is no resource crunch in terms of servers or CPU/RAM
    Read full review
    Cisco
    What it does well:
    - Powerful SPL query language for advanced users
    - Excellent visualization dashboards
    - Comprehensive documentation and community support
    Where it needs work:
    - Steep learning curve for SPL syntax
    - Non-Intuitive UI for beginners
    - Complex administration and data model configuration
    - Search performance degrades with poor query optimization
    Bottom line: Enterprise-grade tool requiring dedicated training investment. Best for teams with experienced analysts.
    Incentivized
    Read full review
    Support Rating
    Elastic
    No answers on this topic
    Cisco
    Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.
    Incentivized
    Read full review
    Alternatives Considered
    Elastic
    Logstash can be compared to other ETL frameworks or tools, but it is also complementary to several, for example, Kafka. I would not only suggest using Logstash when the rest of the ELK stack is available, but also for a self-hosted event collection pipeline for various searching systems such as Solr or Graylog, or even monitoring solutions built on top of Graphite or OpenTSDB.
    Incentivized
    Read full review
    Cisco
    Search Processing Language really is a game changer for writing easy-to-understand and maintainable queries on your data base logs. Once understood, setting up and validating a query can be done in no time- which leaves us the option to focus on more monitoring and improved services. We have no other tools that utilizes data this efficiently
    Incentivized
    Read full review
    Return on Investment
    Elastic
    • Positive: LogStash is OpenSource. While this should not be directly construed as Free, it's a great start towards Free. OpenSource means that while it's free to download, there are no regular patch schedules, no support from a company, no engineer you can get on the phone / email to solve a problem. You are your own Engineer. You are your own Phone Call. You are your own ticketing system.
    • Negative: Since Logstash's features are so extensive, you will often find yourself saying "I can just solve this problem better going further down / up the Stack!". This is not a BAD quality, necessarily and it really only depends on what Your Project's Aim is.
    • Positive: LogStash is a dream to configure and run. A few hours of work, and you are on your way to collecting and shipping logs to their required addresses!
    Incentivized
    Read full review
    Cisco
    • End-end visibility across your departmental silos
    • Strengthen the overall global monitoring posture
    • Move from Reactive to Proactive Monitoring
    • Highly secure environment at your finger-tips
    • Takes you away from managing infrastructure/administration, allows saving time & money. Reduce the overall TCO (Total Cost of Ownership)
    Incentivized
    Read full review
    ScreenShots