Amazon OpenSearch Service vs NetWitness Platform comparison

Amazon OpenSearch Service vs. NetWitness Platform

Download the complete report

Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Amazon OpenSearch Service

Ranking in Log Management

30th

Average Rating

7.8

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (35th)

NetWitness Platform

Ranking in Log Management

22nd

Average Rating

7.4

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (22nd)

Mindshare comparison

As of May 2025, in the Log Management category, the mindshare of Amazon OpenSearch Service is 2.5%, up from 0.1% compared to the previous year. The mindshare of NetWitness Platform is 0.3%, down from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

VijayKumar27

Software Engineer at The American College

Effective as a vector store, serverless architecture but there aren't enough security features

The pricing aspect is a concern. The service is way too costly. For the past month, I used only 30 to 40 MB of data, and the cost was $500. AWS could improve pricing. Even being serverless, it incurs charges during idle times. For just holding data, you need to create a list. AWS should add an option to make data idle, so it won't include computing charges. They charge for OCU units based on the time the serverless solution is up, not on indexing or retrieval speed. Once the service starts, it starts getting billed. It would help if there were an option to limit computing. When using it as a database, storing data without frequent fetching would save computing costs.

Read full review

MdZaman

IT manager at a agriculture with 10,001+ employees

Really scalable for enterprise customers

The solution should have more integration capabilities with different platforms. The API is nearly open and scalable, so the solution can integrate with many platforms. The solution has more than 200 log sources in the scalability to support, but this is its limit. Installation is pretty easy. However, there are a couple of modules involved, so it is not as easy as it could be. We are talking about a distributed module, not a single-module type. This is what makes things a bit complex, instead of easier. I rate it as a seven out of ten on its installation and configuration capabilities.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I would definitely recommend Amazon OpenSearch Service to other professionals due to its fast and reliable search capabilities."

"Amazon OpenSearch Service provides a managed database solution, so we don't need to manage everything ourselves."

"The customer service is excellent, rated nine out of ten."

"Amazon OpenSearch Service has enhanced our organization's ability to store and search large amounts of data efficiently."

"This service already sorts data like vectors. They have classified the storage pre-defined."

"We retrieve historical data with just a click of a button to move it from cold to hot or warm because it's already stored in the backend storage"

"The business analytics capabilities are the most important feature it provides."

"The most valuable feature is the hunting ability to work in a CERT."

"NetWitness can be highly beneficial for incident detection and response."

"In my opinion, the solution's most valuable feature is its capacity to monitor network traffic, logs from devices within the network, and network captures. This capability extends beyond logs to include full network capturing."

"Setting up NetWitness is straightforward. There are multiple connectors, including standard and specialized connectors. One purpose of the connectors is the enhanced capability integrate the custom applications. NetWitness comes with E6 appliances and application images that we use for the initial configurations and for the OS stack information. From there, you can consider the correlation rules, integrate the different log sources, and easily create correlation rules and backlog reports."

"NetWitness Platform offers flexibility for deployment and robust integration capabilities."

"The most valuable feature is that we can create our own connectors for any application, and NetWitness provides the training and tools to do it."

"I can have enterprise security, email security, next generation firewall security log, HIDS and NIDS logs, etc. all on the same dashboard. It makes it easy to pinpoint or correlate our server to this. I can find out if there is lateral movement. This is the biggest advantage of this solution."

"The solution is really scalable for the high-end power, enterprise customer."

More NetWitness Platform pros

Cons

"It would be beneficial to have some level of customization available in the managed service, tailored to the specific use cases of the end users."

"The pricing aspect is a concern. The service is way too costly. For the past month, I used only 30 to 40 MB of data, and the cost was $500. AWS could improve pricing."

"One improvement I would like to see is support for auto-scaling."

"We faced documentation challenges during integration after migrating from Elasticsearch to Amazon OpenSearch Service. Better documentation on integration, query handling, and a more user-friendly UI could enhance the product."

"The price is fair yet leans towards the expensive side. I'd rate it five out of ten with respect to capabilities vs. cost."

"They can enhance data visualization."

"One improvement I would like to see is support for auto-scaling."

"More customizability is required, which is something that they need to improve on."

"Its technical support could be better."

"I believe that integrating the solution with other products such as Oracle would be beneficial."

"The multi-tenant capabilities are lagging compared to IBM QRadar."

"An area for improvement would be better automation and more inbuilt use cases."

"The system architecture is complex and sometimes it’s hard to troubleshoot potential problems."

"Sometimes, it gives me static when integrating Windows-based systems. It should produce a precise log of sorts as to where the problem is. For example, a few days ago because of the McAfee application firewall, I couldn't get access to the particular Windows machine. So, my team and I had to figure out by ourselves that there was a virus responsible for the obstacle. This solution should trigger a meaningful log or message indicating the reason the user or implementer can't get into the machine."

"It should have a monitoring feature. It would help us analyze the current state of attacks faster from a single platform."

More NetWitness Platform cons

Pricing and Cost Advice

Information not available

"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."

"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."

"The tool is very expensive, so I rate the pricing a ten out of ten. The solution has an annual subscription."

"Our license is for one year."

"Compared to the competition, the is price is not that high."

"It provides tools to assist in selecting the appropriate license and usage scenarios."

"We are on an annual license for the use of the solution."

"It’s cheaper to run virtual machines in a VMware environment."

More NetWitness Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

850,028 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at Deloitte & Touche

Feb 26, 2015

HP ArcSight vs. IBM QRadar vs. McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm

We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

14%

Manufacturing Company

Comms Service Provider

Computer Software Company

19%

Financial Services Firm

18%

Government

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Amazon OpenSearch Service?

We retrieve historical data with just a click of a button to move it from cold to hot or warm because it's already stored in the backend storage

What is your experience regarding pricing and costs for Amazon OpenSearch Service?

Amazon OpenSearch Service is a bit costly compared to self-hosted Elasticsearch due to the managed service pricing.

What needs improvement with Amazon OpenSearch Service?

I did not delve deeply into Amazon OpenSearch Service, so I am unable to suggest specific improvements. However, we faced documentation challenges during integration after migrating from Elasticsea...

What do you like most about NetWitness Platform?

The product's initial setup phase was not at all difficult.

What is your experience regarding pricing and costs for NetWitness Platform?

The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.

What needs improvement with NetWitness Platform?

There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.

Grafana Loki vs Amazon OpenSearch Service

Comparisons

Compared 30% of the time

Datadog vs Amazon OpenSearch Service

Compared 17% of the time

Amazon CloudWatch vs Amazon OpenSearch Service

Compared 14% of the time

Dynatrace vs Amazon OpenSearch Service

Compared 5% of the time

New Relic vs Amazon OpenSearch Service

Compared 4% of the time

More Amazon OpenSearch Service Competitors

Splunk Enterprise Security vs NetWitness Platform

Compared 28% of the time

IBM Security QRadar vs NetWitness Platform

Compared 18% of the time

Elastic Security vs NetWitness Platform

Compared 14% of the time

Trellix Network Detection and Response vs NetWitness Platform

Compared 11% of the time

RSA enVision vs NetWitness Platform

Compared 10% of the time

More NetWitness Platform Competitors

Product Reports

Amazon OpenSearch Service

Download Amazon OpenSearch Service product report

NetWitness Platform

Download NetWitness Platform product report

Also Known As

No data available

RSA Security Analytics

Overview

Amazon OpenSearch Service is often used for log analysis, real-time application monitoring, and searching large datasets. Users benefit from its scalability, ease of use, and AWS integration, appreciating its capability to handle high data volumes while providing efficient search functionalities.

Many users choose Amazon OpenSearch Service for its powerful search and indexing capabilities, real-time analytics, and strong integration with AWS services. Key highlights include minimal downtime, detailed documentation, and efficient data processing. Scalability and automatic scaling are standout features, enabling users to manage high data volumes seamlessly. However, there is a call for improved integration, enhanced stability, and better support. Some users find the setup and configuration process challenging and desire more customization options for security features.

What are the key features of Amazon OpenSearch Service?

Scalability: Automatically scales to accommodate data growth and workload fluctuations.
Real-Time Analytics: Provides up-to-date insights and monitoring for applications.
Integration with AWS: Easily integrates with other AWS services, enhancing workflows.
Powerful Search Capabilities: Fast and efficient search and indexing functionalities.
Detailed Documentation: Comprehensive guides and resources to assist users.
Security Features: Flexible security options to protect data and manage access.

What benefits should users look for in reviews?

Efficiency: Quick data processing and minimal downtime.
Scalability: Ability to handle increasing data volumes without manual intervention.
Ease of Use: User-friendly interface and management tools.
Reliability: Consistent performance with robust support for data management workflows.
Integration: Seamless integration with existing AWS services and infrastructure.

In industries such as finance, healthcare, and e-commerce, Amazon OpenSearch Service is implemented to manage and analyze large datasets in real time. Companies benefit from its ability to monitor application performance, analyze log data, and enhance search functionalities, leading to improved operational efficiency and decision-making processes.

Amazon Web Services (AWS)

NetWitness Platform is an evolved SIEM and threat detection and response solution that functions as a single, unified platform for ALL your security data. It features an advanced analyst workbench for triaging alerts and incidents, and it orchestrates security operations programs end to end. In short: NetWitness Platform is all you need to run an intelligent SOC.

NetWitness

Sample Customers

Information Not Available

Los Angeles World Airports, Reply

Amazon OpenSearch Service vs. NetWitness Platform