No more typing reviews! Try our Samantha, our new voice AI agent.

Coralogix vs Microsoft Sentinel comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.0
Coralogix streamlines app performance monitoring, enhancing debugging efficiency and integration, reducing NOC staff needs, and boosting productivity.
Sentiment score
6.8
Microsoft Sentinel enhances ROI with faster incident response, automation, and cost efficiency, providing significant operational and security improvements.
I have seen a return on investment with Coralogix, particularly in terms of time saved.
Presales Engineer at Crayon AS
I see a return on investment in time saving.
Cloud Engineer at To The New
I have seen a return on investment as it is time-saving for debugging since this costs a lot over a period of time.
Senior DevOps Engineer at a manufacturing company with 501-1,000 employees
If a customer is already using Microsoft’s ecosystem, the ROI can be positive due to seamless integration.
senior cyber security at a tech services company with 201-500 employees
Our MTTR, mean time to response, improved by forty to fifty percent. Earlier, medium-severity incidents took two to three hours to resolve. Now, after Microsoft Sentinel, it is forty to fifty-five minutes.
Cyber Security Consultant at ProTechmanize
For example, time saving on incidents is 40 to 50%, and previously, incident analysis took two to three hours, whereas now it takes 30 to 60 minutes.
Network Security Engineer at Arrow PC Network Pvt Ltd
 

Customer Service

Sentiment score
7.0
Coralogix's support is highly praised for responsiveness, effectiveness, and proactive communication, often outperforming competitors like AWS.
Sentiment score
6.4
Microsoft Sentinel customer service is praised for staff expertise, but premium support is quicker; communication consistency could improve.
I am satisfied with their response time and overall competence.
Engineering Manager at a tech vendor with 51-200 employees
They are helpful, especially when we created several custom dashboards.
SDE II at Nutanix
They were very responsive and thoroughly communicative.
DevOps at a tech vendor with 201-500 employees
Microsoft invests significantly in support, which is crucial for companies.
Director de Microsoft y Transformación Digital at Compucad
I believe Microsoft could improve by keeping customer service within the US for Microsoft Sentinel customers who are within state and federal government sectors.
Infosec at a government with 10,001+ employees
Working with a Sentinel engineer helped us tune settings effectively.
Systems Emgineer at a non-profit with 1-10 employees
 

Scalability Issues

Sentiment score
6.8
Coralogix efficiently scales to meet organizational demands, though some users find the cost of scaling potentially limiting.
Sentiment score
7.7
Microsoft Sentinel is highly scalable, cloud-native, and integrates easily, but users should consider data ingestion costs.
We have never faced any scalability issues.
SDE II at Nutanix
Handling scaling with Coralogix is good, as it is easy to scale up or down as my needs change.
Presales Engineer at Crayon AS
I would rate the scalability of Coralogix as easy; it's easy and goes faster.
Fullstag at a tech vendor with 10,001+ employees
There is no need to add hardware or redesign infrastructure because it is cloud-native.
Cyber Security Consultant at ProTechmanize
As our organization uses Microsoft Azure and Defender, everything grows together, and we can integrate various features seamlessly.
Systems Emgineer at a non-profit with 1-10 employees
Being a SaaS solution, the scalability of Microsoft Sentinel is robust.
senior cyber security at a tech services company with 201-500 employees
 

Stability Issues

Sentiment score
7.9
Coralogix is stable and reliable with minor issues, like Kafka lag, but no significant downtime or performance interruptions.
Sentiment score
7.8
Microsoft Sentinel is reliable with high uptime, minor outages, and strong security, despite some customization challenges.
There are no downtimes, no crashes, or any performance issues that I've noticed since we started using it.
Platform Engineer at a tech vendor with 51-200 employees
High CPU usage on one pod can be averaged out by others, concealing potential issues.
SDE II at Nutanix
I have never experienced any downtime, crashes, or performance issues with Microsoft Sentinel because it is SOC as a Service, so it maintains 100% uptime and scaling.
Infosec at a government with 10,001+ employees
In the past two years, our team hasn't encountered any issues with the stability of Microsoft Sentinel from an operations perspective.
Project Executive at synergyc
I need to be aware of deprecated connectors as they may disconnect, but the data continues to be sent with a need for quick adaptation.
senior cyber security at a tech services company with 201-500 employees
 

Room For Improvement

Users seek improved interface, documentation, AI enhancements, integration, customization, data handling, notification features, and intuitive design in Coralogix.
Microsoft Sentinel needs enhancements in integration, usability, performance, automation, and cost management to better serve users and organizations.
We require some form of grouping or categorization of logs to identify them better.
SDE II at Nutanix
Coralogix should have some AI capabilities to auto-detect anomalies and provide suggestions.
Engineering Manager at a tech vendor with 51-200 employees
If I could improve Coralogix in any way, I would suggest additional customization options for our dashboards.
Platform Engineer at a tech vendor with 51-200 employees
Log ingestion and retention costs can grow quickly, and understanding which data source is driving cost is not always straightforward.
Cyber Security Consultant at ProTechmanize
We have some tools, such as our off-site Meraki firewalls, that have not fully integrated with Sentinel.
Systems Emgineer at a non-profit with 1-10 employees
There are complexities in calculating the right pricing tier for different customers, which makes it difficult for me as a consultant during upfront pricing.
senior cyber security at a tech services company with 201-500 employees
 

Setup Cost

Enterprise buyers find Coralogix pricing high but manageable with easy setup, starting at $400 monthly, monitoring is essential.
Microsoft Sentinel's flexible pricing can be costly, but cost-effective within the Microsoft ecosystem with optimization strategies in place.
Despite the expense, I believe it is worth the money to have Coralogix as a tool.
SDE II at Nutanix
Currently, we are at a very minimal cost, which is around $400 per month since we have reduced our usage.
Engineering Manager at a tech vendor with 51-200 employees
It is charged based on what we store.
Presales Engineer at Crayon AS
It has been beneficial that Microsoft Sentinel is included as part of the Microsoft package, making it more cost-effective.
Senior System Administrator at a university with 5,001-10,000 employees
Microsoft Sentinel is not a low-cost SIEM.
Cyber Security Consultant at ProTechmanize
Microsoft Sentinel is provided at no cost, so we didn't have any issues with the cost.
Vice President, Sales, Cybersecurity at a computer software company with 51-200 employees
 

Valuable Features

Coralogix excels with its user-friendly interface, AI insights, seamless integration, and flexible, efficient log and error management.
Microsoft Sentinel enhances security with AI-driven threat detection, automated responses, seamless integration, and efficient threat management through playbooks and analytics.
I can monitor Kubernetes or Docker platforms as well, and I can integrate with the DevOps chain including Jenkins and all infrastructure code, Terraform, or Ansible.
Presales Engineer at Crayon AS
Coralogix has positively impacted our organization by providing us with a clearer data flow, which allows us to analyze data better and find errors easier using the smart logs it offers.
Automation Engineer at MyDubai.io
Out of real-time analytics, cost-efficient storage, and AI-powered insights, the most valuable for my team has been the cost-efficient storage.
Software Developer at Styx Global
Microsoft Sentinel's ability to correlate data from multiple sources and its detection capabilities are essential.
Cost Engineer at a tech vendor with 10,001+ employees
Microsoft Sentinel has improved cost efficiency, which is one of the key areas we're able to win business against the ability to have threat intelligence.
Chief Commercial Officer at defend
Microsoft Sentinel's ability to correlate data from multiple sources enhances our threat detection capabilities beyond what is a simple data lake solution by filtering out the noise and consolidating the signal down to a meaningful level that is easier to investigate and see.
Solutions Architect at a tech vendor with 201-500 employees
 

Categories and Ranking

Coralogix
Ranking in Security Information and Event Management (SIEM)
12th
Average Rating
8.4
Reviews Sentiment
6.3
Number of Reviews
20
Ranking in other categories
Application Performance Monitoring (APM) and Observability (14th), Log Management (11th), API Management (11th), Streaming Analytics (13th), Anomaly Detection Tools (2nd), AI Observability (8th)
Microsoft Sentinel
Ranking in Security Information and Event Management (SIEM)
4th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
109
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (1st), Microsoft Security Suite (6th), AI-Powered Cybersecurity Platforms (6th)
 

Mindshare comparison

As of May 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Coralogix is 1.1%, up from 0.3% compared to the previous year. The mindshare of Microsoft Sentinel is 4.0%, down from 7.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Microsoft Sentinel4.0%
Coralogix1.1%
Other94.9%
Security Information and Event Management (SIEM)
 

Featured Reviews

Naveenkumar Lakshman - PeerSpot reviewer
Presales Engineer at Crayon AS
Centralized monitoring has improved real-time issue tracking and reduced root cause analysis time
One of the best features that Coralogix offers is that it is integration friendly. I can seamlessly work with different cloud providers including AWS, Azure, and GCP. I can monitor Kubernetes or Docker platforms as well, and I can integrate with the DevOps chain including Jenkins and all infrastructure code, Terraform, or Ansible. Coralogix has positively impacted my organization by providing a centralized console to monitor the dashboard, giving me rich flexibility to see different sorts of data that is spread across the logs, metrics, or traces, which are the typical pillars of the observability tool. I have the interface where I can use the drag-and-drop feature, and I can create different types of charts. Mainly, I have the line charts and time series ones that I generally use in many use cases, gauges, tables, pie charts, or markdown widgets. These are the ones generically available, and I can switch between the visualization types. I am getting the underlying query in that and can import and export dashboards built upon the JSON format. I can have my own APIs integrated with my dashboards as well, such as with Terraform, which is useful for scaling across my environments. Regarding root cause analysis, mainly what I can do is correlate across all of the layers because the main logs that I work on are storage-related, including CIFS, NFS, SAN traffic, and the metrics including storage, throughput, or VM resource usage. Being able to view logs, metrics, or traces available, I get all of these in one place, and I can do root cause analysis much quicker.
Kallamuddin Ansari - PeerSpot reviewer
Cyber Security Consultant at ProTechmanize
Centralized monitoring has improved threat response but cost control still needs refinement
Based on real operations used in our corporate IT environment, the key features include log correlation and incident view. Microsoft Sentinel's biggest strength is how it correlates multiple related alerts into a single incident. This significantly reduces alert noise and helps the SOC focus on real threats instead of isolated events. Another valuable feature is KQL-based threat hunting with Kusto Query Language. The flexibility of this language allows us to build custom hunting queries based on our environment's behavior. This is extremely useful for detecting low and slow threats or hidden threats that default rules may miss. Cloud-native scalability and stability is another important feature. Being cloud-native, Microsoft Sentinel scales well for medium to large corporate environments without infrastructure management. Stability has been solid in day-to-day production. SOAR automation using playbooks is a feature we highly recommend. Microsoft Sentinel's SOAR functionality helps automate repetitive SOC tasks like alert enrichment and notification. This saves analyst time and improves response consistency.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
893,244 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
8%
Computer Software Company
8%
Comms Service Provider
8%
Computer Software Company
11%
Financial Services Firm
11%
Manufacturing Company
10%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise9
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise23
Large Enterprise46
 

Questions from the Community

What is your experience regarding pricing and costs for Coralogix?
My experience with pricing, setup cost, and licensing has been transparent since I am only the engineer using it.
What needs improvement with Coralogix?
Coralogix has many features, but we usually use only these two, and the syntax has not been so straightforward. It was a bit difficult to write specific queries, so I have templates of specific que...
What is your primary use case for Coralogix?
My main use case with Coralogix has been to troubleshoot, narrow down the problem, understand the logs, and identify errors. For troubleshooting or analyzing logs, we usually employ two methods. Th...
Is there a common threat intelligence tool that aggregates multiple threat intelligence sources?
Yes, Azure Sentinel is a SIEM on the Cloud. Multiple data sources can be uploaded and analyzed with Azure Sentinel and its Threat Hunting functionality with AI available as templates or customized ...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
Which is better - Azure Sentinel or AWS Security Hub?
We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...
 

Also Known As

No data available
Azure Sentinel
 

Overview

 

Sample Customers

Payoneer, AGS, Monday.com, Capgemini
Microsoft Sentinel is trusted by companies of all sizes including ABM, ASOS, Uniper, First West Credit Union, Avanade, and more.
Find out what your peers are saying about Coralogix vs. Microsoft Sentinel and other solutions. Updated: April 2026.
893,244 professionals have used our research since 2012.