Amazon OpenSearch Service vs LogRhythm SIEM comparison

Why PeerSpot?

Amazon Web Services (AWS) and Exabeam are both solutions in the Log Management category. Amazon Web Services (AWS) is ranked #17 with an average rating of 7.8, while Exabeam is ranked #15 with an average rating of 7.0. Amazon Web Services (AWS) holds a 1.2% mindshare in Log Management, compared to Exabeam’s 3.0% mindshare. Additionally, 92% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 89% of Exabeam users who would recommend it.

Amazon OpenSearch Service

Read 13 Amazon OpenSearch Service reviews

8,872 Views
4,436 Comparison Views

92% willing to recommend

LogRhythm SIEM

Read 176 LogRhythm SIEM reviews

19,571 Views
12,721 Comparison Views

89% willing to recommend

Amazon OpenSearch Service

LogRhythm SIEM

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 22, 2026

LogRhythm SIEM and Amazon OpenSearch Service compete in the cybersecurity and data analytics sector. LogRhythm seems to have the upper hand in security monitoring and threat response, while Amazon OpenSearch is strong in data search and analytics.

Features: LogRhythm SIEM features the AI Engine for enhanced threat intelligence, comprehensive log aggregation, and real-time monitoring, which are crucial for effective security management. Its ease of deployment and integrated modules are well-regarded for their user-friendly compliance and auditing reports. Amazon OpenSearch Service offers powerful search capabilities, scalability, and integrated analytics, supporting vast data searches and indexing. Its integration with AWS ensures seamless data handling and retrieval.

Room for Improvement: LogRhythm SIEM users seek better integration across platforms and more efficient log management, along with enhancements in File Integrity Monitoring and real-time customized reporting. Amazon OpenSearch Service has room for improvement in configuration flexibility, cost management, and simplification of complex setups, with added desires for Elasticache integration and stronger auto-scaling capabilities.

Ease of Deployment and Customer Service: LogRhythm SIEM is praised for deployment across on-premises and hybrid clouds, though extensive integration is often required. Its customer service and technical support are highly rated as responsive and knowledgeable. Conversely, Amazon OpenSearch Service simplifies deployment being cloud-based, which is appreciated despite some users indicating higher costs to resolve deeper technical issues.

Pricing and ROI: LogRhythm SIEM's pricing model suits larger enterprises, appearing costly but justifiable by its robust features ensuring security management and compliance. Users report a solid ROI with reduced detection and response times. Amazon OpenSearch Service is viewed as more cost-effective for smaller data volumes, employing a pay-as-you-go model that is advantageous for cloud environments but less so for larger datasets due to higher ongoing costs, offering substantial benefits per their pricing structure.

To learn more, read our detailed Amazon OpenSearch Service vs. LogRhythm SIEM Report (Updated: November 2026).

Buyer's Guide

Amazon OpenSearch Service vs. LogRhythm SIEM

November 2026

Download the complete report

Helped 921,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Amazon OpenSearch Service

Ranking in Log Management

17th

Average Rating

7.6

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (29th), Search as a Service (3rd)

LogRhythm SIEM

Ranking in Log Management

15th

Average Rating

8.2

Reviews Sentiment

6.4

Number of Reviews

176

Ranking in other categories

Security Information and Event Management (SIEM) (18th)

Mindshare comparison

As of November 2026, in the Log Management category, the mindshare of Amazon OpenSearch Service is 1.2%, down from 2.7% compared to the previous year. The mindshare of LogRhythm SIEM is 3.0%, up from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management Mindshare Distribution
Product	Mindshare (%)
LogRhythm SIEM	3.0%
Amazon OpenSearch Service	1.2%
Other	95.8%

Log Management

Featured Reviews

Md. Shahariar Hossen

Senior Software Engineer at Cefalo

Event tracking has become smoother and data analytics provide clear insights for user actions

Amazon OpenSearch Service is not providing the processing feature directly. From Amazon OpenSearch Service, we are actually maintaining the AWS SQS, the queue service, which is responsible for providing information about what data has to be modified. So using that SQS, we're actually providing it, but we're not directly using Amazon OpenSearch Service for keeping data to other data pipeline thing. So far we didn't use it for any machine learning purposes, but in future, we have plans to extend or implement this feature. Since AWS itself is secure and Amazon OpenSearch Service is a part of this entire ecosystem, it becomes much easier for security purposes. From the validation point of view, Amazon OpenSearch Service itself provides easy to communicate APIs and up-to-date documents, which is much beneficial. For example, if I'm missing anything, I can directly go and check the documentation. That is actually much easier. I would rate it as really good so far. It's much faster. For our local machine, we can also use a kind of replica of Amazon OpenSearch Service just for development purposes. That is another good feature. I would say for the encryption thing and also the user access control management, it's much faster. For some of these hashing algorithms, it also worked really well so far. To be honest, I didn't find any places where it can be improved. However, I think they could provide more abstraction. For example, still for searching, we have to write down the queries in a specific manner, such as for a specific JSON structure or in a specific way. Otherwise, they don't provide us the actual results. For at least this purpose, I think abstraction could be a bit easier or a bit improved. Other than that, right now there is the age of AI, so some kind of prompting could also work, but I'm not sure how it could be integrated. As a user, lower prices or reasonable pricing is always better. Those can be improved as well. However, it is good that most of the services including Amazon OpenSearch Service actually provide pay as you go pricing. So if there were a bit lower version or a bit less payment methodology, it might be much better.

Read full review

Rajin Sandira

Engineer Information Security at N-Able (Pvt) Ltd

Advanced threat detection has improved investigations but complexity and resource use need refinement

LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat better and more matured in Wazuh compared to LogRhythm SIEM. Additionally, the parsers that I write for LogRhythm SIEM tend to get quite complex for log parsing, while with Wazuh, I can achieve a similar parser with much less complexity. Those are some of the pain points that some of our customers have been expressing. If LogRhythm SIEM could make a lightweight version of their solution, that would be quite competitive because some of my customers have a very large need but refuse to go with LogRhythm SIEM due to its complexity and high resource intensity. Therefore, they have been moved to Wazuh, which I am deploying for them. Even though LogRhythm SIEM has extremely good capabilities, their resource utilization is too heavy for certain customers, so if they could make a separate, lightweight version, that would be quite beneficial.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"In case there is a failure, Elastic manages everything well, and there no major downtime."

"The initial set up is very easy...We really appreciate Amazon!"

"I would definitely recommend Amazon OpenSearch Service to other professionals due to its fast and reliable search capabilities."

"It's actually easier to collaborate since it is already deployed in the AWS cloud itself."

"Our customers have seen tangible benefits from Amazon OpenSearch Service, especially in terms of their applications running smoothly, so they do get a return on investment."

"The customer service is excellent, rated nine out of ten."

"The business analytics capabilities are the most important feature it provides."

"This service already sorts data like vectors. They have classified the storage pre-defined."

More Amazon OpenSearch Service pros

"The most valuable feature is that we can alternate incident automations."

"LogRhythm does a very good job of helping SOCs manage their workflows."

"The advanced intelligence engine, in fact the whole suite, is very powerful and as far as I’m concerned, it’s one of the best for security management."

"We really appreciate the new cloud functionality."

"Within three hours of installation of LogRhythm, we were pulling error reports that actually indicated we had a switch about to fail, and it saved us about ten thousand dollars of a potential failed switch."

"I have found the Advanced Intelligence Engine has provided the most value to us because we can customize alarms based on our requirements and have created hundreds of alarms that notify different people for different scenarios."

"Our security program's maturity has been transformational for my staff."

"The most valuable feature of LogRhythm for me is the ability to correlate logs throughout many different log sources."

More LogRhythm SIEM pros

Cons

"The configuration should be more straightforward because we had to select a lot of things."

"In terms of data handling capabilities with Amazon OpenSearch Service, they can be complex and managing data in comparison to other SIM solutions is a major drawback, as it is very hard to handle the data."

"We faced documentation challenges during integration after migrating from Elasticsearch to Amazon OpenSearch Service. Better documentation on integration, query handling, and a more user-friendly UI could enhance the product."

"I would say that, basically, the configuration part is an area with a shortcoming...Some upgradation is required on the configuration side so that we can get to use it."

"The price is fair yet leans towards the expensive side. I'd rate it five out of ten with respect to capabilities vs. cost."

"One glaring issue was with our mapping configuration as the system accepted the data we posted, but after a few months, when we attempted complex queries, we realized the date formatting had become problematic."

"Amazon Elasticsearch can improve the bullion in the near search and the ease of integration with Kibana. Additionally, there could be more flexibility in the configuration and documentation."

"One improvement I would like to see is support for auto-scaling."

More Amazon OpenSearch Service cons

"Stability is not great but I think that's our issue."

"The reporting engine is poor in comparison to other areas. It should be moved to the web interface to improve its functionality and usability."

"The main area of improvement is that the client must be installed on the computer for all of the functions to work."

"A month or two will go by and everything will be fine, and all of a sudden, something breaks."

"Ease and setup would be a major improvement because it took over a week to get it all up and running, and that didn't even count tweaking it and getting it all set up for my environment."

"LogRhythm SIEM needs improvement in data grouping and manipulation capabilities."

"We're still struggling to get a real return on it and finding something that isn't false noise."

"Only area I can think of to improve on is the proof reading and using the guides before releasing them. Out the the 20+ guides I used one had issues with wrong information in it."

More LogRhythm SIEM cons

Pricing and Cost Advice

"Compared to other cloud platforms, it is manageable and not very expensive."

"The solution is not expensive, but priced averagely, I will say."

"You only pay for what you use."

"There is a community edition available and the price of the commercial offering is reasonable."

"NextGen SIEM's pricing is moderate."

"It costs a great amount, but its pricing is competitive with some of the other vendors. For licensing and support, we pay about 20,000. There are no additional costs or anything like that."

"I have seen a measurable decrease in the mean time to detect and respond to threats. We went from not detecting them to detecting them. We can actually pick up what is anomalous in our network now."

"LogRhythm's licensing is based on MPS. There are some add-on features like advanced UEBA, the cloud component for advanced UEBA, and SIEM."

"Look closely at the cost of licensing of other products. This should include setups and the need for support services. I did a RFQ to 2 other vendors before choosing this product."

"On a scale of one to ten, where one is low, and ten is high, I rate the pricing between six and seven."

"I would recommend that whatever sales quotes to them upfront, they will probably go up. Because they are probably going to outgrow that very quickly or once they start getting everything into it, they are going to have to move up anyway."

"We did a five-year agreement. We pay close to a quarter of a million dollars for our solution."

More LogRhythm SIEM pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

921,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Manufacturing Company

10%

Computer Software Company

Outsourcing Company

Construction Company

11%

Financial Services Firm

10%

Outsourcing Company

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	2
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	38
Midsize Enterprise	39
Large Enterprise	83

Questions from the Community

What is your experience regarding pricing and costs for Amazon OpenSearch Service?

I would consider the pricing as a six based on how much data we are handling; if we handle minimal data, it's cheap, but for large data, it becomes costly. Our clients usually pay between $1,000 to...

See all answers

What needs improvement with Amazon OpenSearch Service?

See all answers

What is your primary use case for Amazon OpenSearch Service?

Amazon OpenSearch Service is a user-friendly version of Elasticsearch, as per my understanding. I have been using it for our volunteer management system where around 5,000 to 6,000 users are using ...

See all answers

What is the difference between log management and SIEM?

Rony, Daniel's answer is right on the money. There are many solutions for each in the market, a lot depends upon your ability to manage such tools and your budget. A small operation may be best s...

See all answers

What needs improvement with LogRhythm NextGen SIEM?

See all answers

What is your experience regarding pricing and costs for LogRhythm SIEM?

I find LogRhythm SIEM affordable, as it is a bit less costly than QRadar, although I have not been involved in negotiation charges; however, from the manager's approval, I see it as affordable.

See all answers

Comparisons

Azure AI Search vs Amazon OpenSearch Service

Compared 6% of the time

Grafana Loki vs Amazon OpenSearch Service

Compared 5% of the time

Grafana vs Amazon OpenSearch Service

Compared 4% of the time

Datadog vs Amazon OpenSearch Service

Compared 4% of the time

Amazon CloudWatch vs Amazon OpenSearch Service

Compared 4% of the time

More Amazon OpenSearch Service Competitors

Splunk Enterprise Security vs LogRhythm SIEM

Compared 7% of the time

IBM Security QRadar vs LogRhythm SIEM

Compared 7% of the time

Graylog Enterprise vs LogRhythm SIEM

Compared 3% of the time

LevelBlue USM Anywhere vs LogRhythm SIEM

Compared 3% of the time

Devo vs LogRhythm SIEM

Compared 3% of the time

More LogRhythm SIEM Competitors

Product Reports

Buyer's Guide

Amazon OpenSearch Service

November 2026

Download Amazon OpenSearch Service product report

Buyer's Guide

LogRhythm SIEM

October 2026

Download LogRhythm SIEM product report

Also Known As

Amazon Elasticsearch Service

LogRhythm NextGen SIEM, LogRhythm, LogRhythm Threat Lifecycle Management, LogRhythm TLM

Overview

Amazon OpenSearch Service offers efficient search capabilities with seamless AWS integration, JSON support, and versatile analytics dashboards. It is designed for ease of use, robust data processing, and consistent performance even during failures.

Amazon OpenSearch Service is valued for its flexibility in data analysis and seamless integration across AWS services. It supports fast data processing, retrieval, and business analytics with reliable dashboards for visual insights. Users appreciate its managed database features, hassle-free scaling, and integrated help guides which enhance its utility. The service is commonly used for indexing large datasets, especially application logs and event data, providing performance analysis, security monitoring, and infrastructure management. Users have noted room for improvement in integration with Kibana, cost management, and configuration flexibility, with calls for better documentation, enhanced data handling, and auto-scaling support.

What are the key features of Amazon OpenSearch Service?

Efficient Search Capabilities: Provides powerful search functionalities with versatile search grammar.
Scalability: Offers reliable scaling options suitable for dynamic workloads.
JSON Support: Facilitates streamlined data handling and processing.
Dashboards and Analytics: Delivers insightful data visualization through reliable dashboards.
Robust Performance: Ensures consistent performance with effective failure handling mechanisms.

What benefits or ROI considerations should users look for?

Ease of Use: Simplifies complex search and analytics tasks with user-friendly features.
Managed Services: Reduces management overhead with AWS-managed database features.
Integration: Enhances workflows through smooth AWS service compatibility.
Cost Management: Requires meticulous cost tracking, as charges can accrue during idle times.
Continuous Performance: Assures reliable operations with robust failure handling processes.

Amazon OpenSearch Service is implemented across industries for tasks such as ecommerce search, embedding management, and analytics. Companies leverage its capabilities for real-time performance analysis, customer behavior tracking, and displaying insights via visual dashboards. It supports debugging and security monitoring initiatives, enhancing infrastructure management and application logging tasks.

Amazon Web Services (AWS)

LogRhythm SIEM offers advanced threat intelligence, scalable deployment, and streamlined log management. It enhances security posture with AI-driven threat detection and comprehensive monitoring.

LogRhythm SIEM stands out for its AI-driven threat correlation, ease of log aggregation, and robust reporting. Offering real-time visibility and analytics through consistent navigation and dashboards, it integrates with security components for enhanced monitoring and response. Advanced threat intelligence and customizable alerts streamline processes and bolster security. While it faces challenges with log parsing, reporting, and dashboard intuitiveness, plans to enhance cloud integration and transition to Linux are noted.

What are the standout features?

AI Threat Correlation: Employs AI to correlate threats for efficient detection.
Log Aggregation: Simplifies the collection of logs from multiple sources.
Scalable Deployment: Offers flexible scaling to accommodate growth.
Robust Reporting: Provides detailed analysis for informed decisions.
Advanced Threat Intelligence: Engages cutting-edge techniques to assess threats.

What benefits and ROI can users expect?

Improved Security Posture: Enhanced threat detection and response.
Streamlined Processes: Automation leads to efficiency gains.
Comprehensive Compliance: Facilitates adherence to regulatory standards.
Centralized Log Management: Unified log overview aids in quick insights.

In industries like banking and finance, organizations utilize LogRhythm SIEM for centralized log management, security monitoring, and compliance. It helps detect insider threats, analyze server logs, correlate events, and monitor user behaviors. Appreciated for log ingestion and anomaly identification, it ensures robust cybersecurity and incident response by integrating data from multiple sources.

Exabeam

Sample Customers

VIDCOIN, Wyng, Yellow New Zealand, zipMoney, Cimri, Siemens, Unbabel

Macy's, NASA, Fujitsu, US Air Force, EY, Abbott, HD Supply, SAB Miller, UCLA, Raytheon, Amtrak, Cargill

Buyer's Guide

Amazon OpenSearch Service vs. LogRhythm SIEM

November 2026

Free Report: Amazon OpenSearch Service vs. LogRhythm SIEM

Find out what your peers are saying about Amazon OpenSearch Service vs. LogRhythm SIEM and other solutions. Updated: November 2026.

DOWNLOAD NOW

921,028 professionals have used our research since 2012.

See our Amazon OpenSearch Service vs. LogRhythm SIEM report.

See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.