Amazon OpenSearch Service vs NetWitness Platform comparison

Amazon OpenSearch Service vs. NetWitness Platform

Download the complete report

Helped 859,129 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Amazon OpenSearch Service

Ranking in Log Management

21st

Average Rating

7.2

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (24th)

NetWitness Platform

Ranking in Log Management

38th

Average Rating

7.4

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (29th)

Mindshare comparison

As of June 2025, in the Log Management category, the mindshare of Amazon OpenSearch Service is 2.6%, up from 0.2% compared to the previous year. The mindshare of NetWitness Platform is 0.3%, down from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

VijayKumar27

Software Engineer at The American College

Effective as a vector store, serverless architecture but there aren't enough security features

The pricing aspect is a concern. The service is way too costly. For the past month, I used only 30 to 40 MB of data, and the cost was $500. AWS could improve pricing. Even being serverless, it incurs charges during idle times. For just holding data, you need to create a list. AWS should add an option to make data idle, so it won't include computing charges. They charge for OCU units based on the time the serverless solution is up, not on indexing or retrieval speed. Once the service starts, it starts getting billed. It would help if there were an option to limit computing. When using it as a database, storing data without frequent fetching would save computing costs.

Read full review

MOTASHIM Al Razi

CISO at One Bank Limited

It is a stable solution, but they should make the user interface easier to understand

The solution's initial setup takes work. We have to organize multiple paths and many features. The deployment process takes less than a week. But it takes a month to complete if we want to make the solution smarter by integrating it with various devices. I rate the process as a six out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Our customers have seen tangible benefits from Amazon OpenSearch Service, especially in terms of their applications running smoothly, so they do get a return on investment."

"I would definitely recommend Amazon OpenSearch Service to other professionals due to its fast and reliable search capabilities."

"Amazon OpenSearch Service provides a managed database solution, so we don't need to manage everything ourselves."

"We retrieve historical data with just a click of a button to move it from cold to hot or warm because it's already stored in the backend storage"

"This service already sorts data like vectors. They have classified the storage pre-defined."

"The customer service is excellent, rated nine out of ten."

"Amazon OpenSearch Service has enhanced our organization's ability to store and search large amounts of data efficiently."

"The business analytics capabilities are the most important feature it provides."

"It gives the capability for the incident response team to correlate logs to identify any kind of problem like malware and incidents in a general sense, both for logs and packets."

"The most valuable features are the threat prediction and network forensics."

"The software is scalable to whatever is required, and you can also put a lot of resources in the cloud."

"Possibility to investigate incidents based on logs and raw packets, such as extracting files sent over the network"

"The solution is really scalable for the high-end power, enterprise customer."

"It's quite economical compared to other solutions in the market."

"The most valuable features are the packet decoder, log decoder, and concentrator."

"Incident management is its most valuable feature."

More NetWitness Platform pros

Cons

"We faced documentation challenges during integration after migrating from Elasticsearch to Amazon OpenSearch Service. Better documentation on integration, query handling, and a more user-friendly UI could enhance the product."

"In terms of data handling capabilities with Amazon OpenSearch Service, they can be complex and managing data in comparison to other SIM solutions is a major drawback, as it is very hard to handle the data."

"They can enhance data visualization."

"The pricing aspect is a concern. The service is way too costly. For the past month, I used only 30 to 40 MB of data, and the cost was $500. AWS could improve pricing."

"The price is fair yet leans towards the expensive side. I'd rate it five out of ten with respect to capabilities vs. cost."

"It would be beneficial to have some level of customization available in the managed service, tailored to the specific use cases of the end users."

"One improvement I would like to see is support for auto-scaling."

"The initial setup is very complex and should be simplified."

"It should have a monitoring feature. It would help us analyze the current state of attacks faster from a single platform."

"The multi-tenant capabilities are lagging compared to IBM QRadar."

"The user interface is a little bit difficult for new users and it needs to be improved."

"The implementation needs assistance."

"The initial setup was complex because it takes a lot of time to complete the implementation."

"It is not so easy to customize this product."

"The documentation is not as structured as I would like, personally, and I think that it can be improved and made much more user-friendly."

More NetWitness Platform cons

Pricing and Cost Advice

Information not available

"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."

"Our license is for one year."

"RSA NetWitness Logs and Packets do not have a subscription model, it's a one-time purchase. There is only a perpetual license."

"The licenses are good but the cost is very expensive."

"The product is expensive."

"We are on an annual license for the use of the solution."

"The new pricing and licensing mechanisms are fair. I would advise always to get the full solution (i.e., not only Logs)."

"This is a pricey solution; it's not cheap."

More NetWitness Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

859,129 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at Deloitte & Touche

Feb 26, 2015

HP ArcSight vs. IBM QRadar vs. McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm

We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

14%

Manufacturing Company

Government

Computer Software Company

18%

Financial Services Firm

18%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Amazon OpenSearch Service?

We retrieve historical data with just a click of a button to move it from cold to hot or warm because it's already stored in the backend storage

What is your experience regarding pricing and costs for Amazon OpenSearch Service?

I would consider the pricing as a six based on how much data we are handling; if we handle minimal data, it's cheap, but for large data, it becomes costly. Our clients usually pay between $1,000 to...

What needs improvement with Amazon OpenSearch Service?

In terms of data handling capabilities with Amazon OpenSearch Service, they can be complex and managing data in comparison to other SIM solutions is a major drawback, as it is very hard to handle t...

What do you like most about NetWitness Platform?

The product's initial setup phase was not at all difficult.

What is your experience regarding pricing and costs for NetWitness Platform?

The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.

What needs improvement with NetWitness Platform?

There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.

Grafana Loki vs Amazon OpenSearch Service

Comparisons

Compared 29% of the time

Datadog vs Amazon OpenSearch Service

Compared 16% of the time

Amazon CloudWatch vs Amazon OpenSearch Service

Compared 13% of the time

Dynatrace vs Amazon OpenSearch Service

Compared 5% of the time

New Relic vs Amazon OpenSearch Service

Compared 4% of the time

More Amazon OpenSearch Service Competitors

Splunk Enterprise Security vs NetWitness Platform

Compared 22% of the time

IBM Security QRadar vs NetWitness Platform

Compared 19% of the time

Elastic Security vs NetWitness Platform

Compared 13% of the time

RSA enVision vs NetWitness Platform

Compared 10% of the time

Trellix Network Detection and Response vs NetWitness Platform

Compared 8% of the time

More NetWitness Platform Competitors

Product Reports

Amazon OpenSearch Service

Download Amazon OpenSearch Service product report

NetWitness Platform

Download NetWitness Platform product report

Also Known As

No data available

RSA Security Analytics

Overview

Amazon OpenSearch Service is often used for log analysis, real-time application monitoring, and searching large datasets. Users benefit from its scalability, ease of use, and AWS integration, appreciating its capability to handle high data volumes while providing efficient search functionalities.

Many users choose Amazon OpenSearch Service for its powerful search and indexing capabilities, real-time analytics, and strong integration with AWS services. Key highlights include minimal downtime, detailed documentation, and efficient data processing. Scalability and automatic scaling are standout features, enabling users to manage high data volumes seamlessly. However, there is a call for improved integration, enhanced stability, and better support. Some users find the setup and configuration process challenging and desire more customization options for security features.

What are the key features of Amazon OpenSearch Service?

Scalability: Automatically scales to accommodate data growth and workload fluctuations.
Real-Time Analytics: Provides up-to-date insights and monitoring for applications.
Integration with AWS: Easily integrates with other AWS services, enhancing workflows.
Powerful Search Capabilities: Fast and efficient search and indexing functionalities.
Detailed Documentation: Comprehensive guides and resources to assist users.
Security Features: Flexible security options to protect data and manage access.

What benefits should users look for in reviews?

Efficiency: Quick data processing and minimal downtime.
Scalability: Ability to handle increasing data volumes without manual intervention.
Ease of Use: User-friendly interface and management tools.
Reliability: Consistent performance with robust support for data management workflows.
Integration: Seamless integration with existing AWS services and infrastructure.

In industries such as finance, healthcare, and e-commerce, Amazon OpenSearch Service is implemented to manage and analyze large datasets in real time. Companies benefit from its ability to monitor application performance, analyze log data, and enhance search functionalities, leading to improved operational efficiency and decision-making processes.

Amazon Web Services (AWS)

NetWitness Platform is an evolved SIEM and threat detection and response solution that functions as a single, unified platform for ALL your security data. It features an advanced analyst workbench for triaging alerts and incidents, and it orchestrates security operations programs end to end. In short: NetWitness Platform is all you need to run an intelligent SOC.

NetWitness

Sample Customers

Information Not Available

Los Angeles World Airports, Reply

Amazon OpenSearch Service vs. NetWitness Platform