No more typing reviews! Try our Samantha, our new voice AI agent.

Cribl vs RSA enVision comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cribl
Ranking in Security Information and Event Management (SIEM)
5th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
65
Ranking in other categories
Application Performance Monitoring (APM) and Observability (6th), Log Management (3rd), Observability Pipeline Software (1st)
RSA enVision
Ranking in Security Information and Event Management (SIEM)
50th
Average Rating
7.2
Reviews Sentiment
6.7
Number of Reviews
6
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Cribl is 1.3%, up from 1.0% compared to the previous year. The mindshare of RSA enVision is 0.8%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Cribl1.3%
RSA enVision0.8%
Other97.9%
Security Information and Event Management (SIEM)
 

Featured Reviews

JigarHirani - PeerSpot reviewer
Splunk Engineer at a recruiting/HR firm with 11-50 employees
Log pipelines have reduced daily data volume and now simplify traffic analysis
Overall, the pipelines and all the features are good with Cribl. The UI is good. Just sometimes, when I actually started using Cribl, I faced the issue where I was not able to connect the nodes. The pipeline is structured in a certain way, then the data will be routed to there, and something of that nature. I was very much confused about their whole products, such as Data Lake and pipelines. It's possible that at that time I didn't take any university courses, which is why I did not know much. But if they can give an intro on how we can connect nodes, or they can provide simple use cases showing what you can do with Cribl, it would help. If you just need to add the source and the destination and pre-build some proper workflow, then it will be easy for new customers to navigate through Cribl.
SF
Président at ARS Solutions
Support both French and English, which is important for us and adapted to the evolving security landscape over time in my experience
You need a skilled engineer to deploy it because you can do anything with this tool. You can see everything on the network. A good engineer will be surprised and have fun using this tool because it's very powerful. Deployment process: You need to build a recipe/layout when you want to deploy something. Once the recipe is done, you just have to copy it. So you really need a good engineer at first, but then any other technician can copy the recipe. You don't need to be an expert once the recipe is finalized. So, once you have it set up, it's easy to deploy. But you need a good engineer to deploy it correctly. You will get alerts from the system, but if you want to fully explore and maximize the tool, the engineering needs are different.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I like most about Cribl is the overall pipeline structure and easiness."
"We save around 2.2 TB every day using Cribl by filtering out unwanted logs coming from syslog devices and other networking devices, which saves our license."
"I'd rate the solution ten out of ten."
"Cribl search has affected us greatly, and it has optimized our operations teams' time and efficiency; they're able to troubleshoot and find issues for our customers in a minimal amount of time."
"Cribl Cloud has no issues with handling large data ingestion volumes."
"I would definitely recommend Cribl to other users because it has helped me reduce my log handling time by 40 to 50%, and it also reduces the log volume by 30 to 40%, which cuts storage and SIEM costs."
"Overall, flexibility and control over observability data are the things I appreciate most about Cribl."
"Cribl's ability to handle high volumes of diverse data types is exactly the purpose that we took it for, and as far as I have seen for the last nine months, it is handling well without issues."
"The configuration part is very easy...The technical support was sincere in their responses...I rate the technical support a nine out of ten."
"The custom dashboard and correlation alerts in this solution improved our incident response process."
"The most valuable feature is the management features. It's capable of managing large enterprises."
"The most valuable feature of this solution is the reporting."
"RSA enVision provides the full system visibility of your events within your IT ecosystem."
"We developed around this solution and received excellent support from the company."
"The ease of log collection and stability of the platform are the most valuable features."
 

Cons

"Improvement could be made in the logging area, as sometimes we encounter issues in a pipeline or something, and it's not immediately obvious when you look at the logs that the pipeline is failing."
"Cribl is a very costly product. People nowadays have started considering alternative solutions."
"Cribl should consider adding more features that are applicable to smaller firms, allowing broader access to their data migration through Cribl."
"To develop user skills in Cribl, it needs to improve some certifications, as the ones I have taken are not entirely helpful in the main projects for the clients."
"What I dislike about Cribl are the documentation gaps and the setup complexity."
"Cribl's initial setup is quite complex."
"When I started using Cribl interface for managing log processing tasks, it was difficult for me to navigate because it took me a month or two to gain fluency with the software since I did not have hands-on experience initially, and I found that the documentation is not thorough enough to help users navigate how to use Cribl."
"The deployment itself is a bit complicated and the documentation is not very clear."
"Licensing could be improved to be more oriented towards Managed Service Providers (MSPs)."
"Sometimes the investigation panel and reporting engine work very slowly."
"In general, the solution currently isn't user-friendly."
"There is no future for this solution. It does not exist anymore."
"Whenever you perform the query, it takes too long."
"The integration could be easier, it should support more products."
"RSA enVision log manager is out of date and is not in use anymore."
 

Pricing and Cost Advice

"I would not say it is a cheaply priced tool as it has been doing wonders in the market. The tool has been budget-friendly for organizations."
"The product pricing is reasonable compared to other solutions."
"On a scale of one to ten, where one is low, and ten is high price, I rate the pricing a six."
"We no longer pay a licensing fee because it is out of date and don't pay for support."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
909,948 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Manufacturing Company
12%
Healthcare Company
6%
Government
5%
Comms Service Provider
15%
Construction Company
15%
Manufacturing Company
11%
Retailer
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise8
Large Enterprise35
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Cribl?
I find the pricing of Cribl to be cost-efficient because it has helped us save costs for data storage by removing unwanted logs.
What needs improvement with Cribl?
Currently, Cribl is perfectly fine for us, and we have not observed any such issues. However, if we find anything later on, we will document it and share it with you. Cribl could respond more quick...
What is your primary use case for Cribl?
We are using Cribl for log trimming with a vast majority of log sources that have different log patterns or log types. Some logs come in syslog format, some are in JSON, and some are in other HTML ...
Ask a question
Earn 20 points
 

Comparisons

 

Overview

 

Sample Customers

Information Not Available
BPS (SUISSE), Hypovereinsbank Germany, MAX Hamburgers, Infoplex, Neotel, Telus
Find out what your peers are saying about Cribl vs. RSA enVision and other solutions. Updated: August 2026.
909,948 professionals have used our research since 2012.