Elastic Security vs Security Onion comparison

Elastic Security
Read 58 Elastic Security reviews
  • 14,933 Views
  • 12,217 Comparison Views
86% willing to recommend
Security Onion
Read 3 Security Onion reviews
  • 3,694 Views
  • 3,173 Comparison Views
66% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between Elastic Security and Security Onion based on real PeerSpot user reviews.

Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Elastic Security vs. Security Onion Report (Updated: June 2024).
Buyer's Guide
Elastic Security vs. Security Onion
June 2024
Download the complete report
Helped 787,817 peers since 2012
 

Categories and Ranking

Elastic Security
Ranking in Log Management
5th
Average Rating
7.6
Number of Reviews
58
Ranking in other categories
Security Information and Event Management (SIEM) (5th), Endpoint Detection and Response (EDR) (16th), Security Orchestration Automation and Response (SOAR) (6th), Extended Detection and Response (XDR) (7th)
Security Onion
Ranking in Log Management
30th
Average Rating
7.6
Number of Reviews
3
Ranking in other categories
AWS Marketplace (1st)
 

Mindshare comparison

As of June 2024, in the Log Management category, the mindshare of Elastic Security is 9.0%, down from 10.2% compared to the previous year. The mindshare of Security Onion is 14.8%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
Unique Categories:
Security Information and Event Management (SIEM)
5.3%
Endpoint Detection and Response (EDR)
3.3%
AWS Marketplace
7.6%
 

Featured Reviews

Matthew DeGrandis - PeerSpot reviewer
Mar 9, 2023
It's helpful for looking at multiple data sources to find find patterns or anomalies
We primarily use Elastic Security as a log aggregator, so we use it like a SIEM. It ingests all our logs and reports on them in aggregate We've used Elastic Security to solve some challenges involving various data sources. Things were being logged, but they were scattered around the organization.…
Read full review
Jörg Kippe - PeerSpot reviewer
Jan 18, 2024
A mature and affordable solution that is easy to install and easy to update
The solution is used to learn how the tools work. It enables us to do consulting and demonstrate solutions. We develop attacks, detect them, and demonstrate how it works. The customers are interested in seeing how and what these tools can do We are only working with open-source products. The tool…
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The cost is reasonable. It's not overly pricey."
"One of the most valuable features of this solution is that it is more flexible than AlienVault."
"The stability of the solution is good."
"The most valuable feature is the ability to collect authentication information from service providers."
"The feature that we have found the most valuable is scalability."
"The most valuable feature is the search function, which allows me to go directly to the target to see the specific line a customer is searching for."
"The most valuable feature is the scalability. We are in Indonesia, more engineers understand Elastic Security here. So it is easier to scale and also develop. In features, the discovery to query all the logs is very important to us. It is very easy, especially with the query function and the feature to generate alerts and create tools. Sometimes we use the alert security dashboard to monitor our clients."
"Just the ability to do a lot more than just up-down is nice, which a lot of people take for granted."
More Elastic Security pros
"The most valuable feature of Security Onion for security monitoring is its ability to find infected ports."
"We use Security Onion for internal vulnerability assessment."
"Security Onion is the most mature solution in the market."
 

Cons

"Elastic Security has a steep learning curve, so it takes some time to tune it and set it up for your environment. There are some costs associated with logging things that don't have value. So you need to be cautious to only log things that make sense and keep them around for as long as you need. You shouldn't hold onto things just because you think you might need them."
"An area for improvement in Elastic Security is the pricing. It could be better. Right now, when you increase the volume of logs to be collected, the price also increases a lot."
"This solution cannot do predictive maintenance, so we have to build our own modules for doing it."
"One thing they could add is a quick step to enable users who don't have a solid background to build a dashboard and quickly search, without difficulty."
"With Elastic, you have to build the use cases for the specific requirement. Other products have a simple integration and more use cases to integrate out-of-the-box solutions for SIEM."
"Anything that supports high availability or ease of deployment in a highly available environment would help to improve this solution."
"In terms of what could be improved with Elastic, in some use cases, especially on the advanced level, they are not ready made, so you'll have to write some scripts."
"Elastic Security could improve the documentation. It would help if they were more simple and clean."
More Elastic Security cons
"Security Onion's user interface could be improved."
"The initial setup of the solution is a little bit difficult."
"The product is not easy to learn."
 

Pricing and Cost Advice

"It's a monthly cost with Elastic SIEM, but I am not sure of the exact cost."
"Its price is fine. Its licensing works on a yearly basis. We have to renew the license every year. I also have a good experience with Darktrace. When we buy Darktrace, we get training free of cost, which is not there in Elastic. We have to pay extra for training. There is certainly room for improvement."
"We use the open-source version, so there is no charge for this solution."
"It is easy to deploy, easy to use, and you get everything you need to become operational with it, and have nothing further to pay unless you want the OLED plugin."
"Elastic Security is free to use."
"When compared to other products, the price is average or on the low side."
"Affordable but with additional costs"
"The licensing cost of Elastic Security is based on the daily ingestion rate. I can't recall the exact figure, but for 10GB of log action daily, it would cost around $20,000."
More Elastic Security pricing and cost advice
"Security Onion is an open-source solution."
"Security Onion is a free solution."
"It is an open-source solution."
report
See which vendors are best for you
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
See recommendations
787,817 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
10%
Government
9%
Comms Service Provider
6%
Computer Software Company
12%
Government
11%
Comms Service Provider
10%
University
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Datadog vs ELK: which one is good in terms of performance, cost and efficiency?
With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several times lately using the dashboards we have created with Datadog; they are very good c...
See all answers
What do you like most about Elastic Security?
Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it contains critical information. The reverse index allows fast data indexing because ...
See all answers
What is your experience regarding pricing and costs for Elastic Security?
Elastic Security is open-source. Unlike many older solutions where you must pay for data ingestion, Elastic allows you to ingest data freely. Being open source, you can set up a Kafka front door la...
See all answers
What do you like most about Security Onion?
The most valuable feature of Security Onion for security monitoring is its ability to find infected ports.
See all answers
What is your experience regarding pricing and costs for Security Onion?
Security Onion is an open-source solution. On a scale from one to ten, where ten is expensive and one is cheap, I rate the solution's pricing a six out of ten.
See all answers
What needs improvement with Security Onion?
The initial setup of the solution is a little bit difficult.
See all answers
 

Comparisons

Wazuh vs Elastic Security Logo
Wazuh vs Elastic Security
Compared 40% of the time
Splunk Enterprise Security vs Elastic Security Logo
Splunk Enterprise Security vs Elastic Security
Compared 8% of the time
Microsoft Sentinel vs Elastic Security Logo
Microsoft Sentinel vs Elastic Security
Compared 7% of the time
IBM Security QRadar vs Elastic Security Logo
IBM Security QRadar vs Elastic Security
Compared 5% of the time
Microsoft Defender for Endpoint vs Elastic Security Logo
Microsoft Defender for Endpoint vs Elastic Security
Compared 5% of the time
More Elastic Security Competitors
Wazuh vs Security Onion Logo
Wazuh vs Security Onion
Compared 66% of the time
Elastic Stack vs Security Onion Logo
Elastic Stack vs Security Onion
Compared 13% of the time
TheHive vs Security Onion Logo
TheHive vs Security Onion
Compared 5% of the time
Splunk Enterprise Security vs Security Onion Logo
Splunk Enterprise Security vs Security Onion
Compared 5% of the time
Grafana Loki vs Security Onion Logo
Grafana Loki vs Security Onion
Compared 1% of the time
More Security Onion Competitors
 

Product Reports

Buyer's Guide
Elastic Security
June 2024
Elastic Security reportDownload Elastic Security product report
Buyer's Guide
Log Management
June 2024
Security Onion reportDownload Security Onion product report
 

Also Known As

Elastic SIEM, ELK Logstash
No data available
 

Learn More

Elastic
Security Onion Solutions, LLC
 

Overview

Elastic Security is a robust, open-source security solution designed to offer integrated threat prevention, detection, and response capabilities across an organization's entire digital estate. Part of the Elastic Stack (which includes Elasticsearch, Logstash, and Kibana), Elastic Security leverages the power of search, analytics, and data aggregation to provide real-time insight into threats and vulnerabilities. It is a comprehensive platform that supports a wide range of security needs, from endpoint protection to cloud and network security, making it a versatile choice for organizations looking to enhance their cybersecurity posture.


Elastic Security combines the features of a security information and event management (SIEM) system with endpoint protection, allowing organizations to detect, investigate, and respond to threats in real time. This unified approach helps reduce complexity and improve the efficiency of security operations.

Additional offerings and benefits:

  • The platform utilizes advanced analytics, machine learning algorithms, and anomaly detection to identify threats and suspicious activities.
  • It offers extensive integration options with other tools and platforms, facilitating a more cohesive and comprehensive security ecosystem.
  • With Kibana, users gain access to powerful visualization tools and dashboards that provide real-time insight into security data.

Finally, Elastic Security benefits from a global community of users who contribute to its threat intelligence, helping to enhance its detection capabilities. This collaborative approach ensures that the solution remains on the cutting edge of cybersecurity, with up-to-date information on the latest threats and vulnerabilities.

Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring, and log management. The easy-to-use Setup wizard allows you to build an army of distributed sensors for your enterprise in minutes!
Security Onion includes a native web interface with built-in tools analysts use to respond to alerts, hunt for evil, catalog evidence into cases, monitor grid performance, and much more. Additionally, third-party tools, such as Elasticsearch, Logstash, Kibana, Suricata, Zeek (formerly known as Bro), Wazuh, Stenographer, CyberChef, NetworkMiner, and many more are included.

 

Sample Customers

Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care
Information Not Available
Buyer's Guide
Elastic Security vs. Security Onion
June 2024
Free Report: Elastic Security vs. Security Onion
Find out what your peers are saying about Elastic Security vs. Security Onion and other solutions. Updated: June 2024.
DOWNLOAD NOW
787,817 professionals have used our research since 2012.
See our Elastic Security vs. Security Onion report.
See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.