No more typing reviews! Try our Samantha, our new voice AI agent.

Cribl vs RSA enVision comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cribl
Ranking in Security Information and Event Management (SIEM)
5th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
65
Ranking in other categories
Application Performance Monitoring (APM) and Observability (6th), Log Management (3rd), Observability Pipeline Software (1st)
RSA enVision
Ranking in Security Information and Event Management (SIEM)
50th
Average Rating
7.2
Reviews Sentiment
6.7
Number of Reviews
6
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Cribl is 1.4%, up from 1.3% compared to the previous year. The mindshare of RSA enVision is 0.9%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Cribl1.4%
RSA enVision0.9%
Other97.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

JigarHirani - PeerSpot reviewer
Splunk Engineer at a recruiting/HR firm with 11-50 employees
Log pipelines have reduced daily data volume and now simplify traffic analysis
Overall, the pipelines and all the features are good with Cribl. The UI is good. Just sometimes, when I actually started using Cribl, I faced the issue where I was not able to connect the nodes. The pipeline is structured in a certain way, then the data will be routed to there, and something of that nature. I was very much confused about their whole products, such as Data Lake and pipelines. It's possible that at that time I didn't take any university courses, which is why I did not know much. But if they can give an intro on how we can connect nodes, or they can provide simple use cases showing what you can do with Cribl, it would help. If you just need to add the source and the destination and pre-build some proper workflow, then it will be easy for new customers to navigate through Cribl.
SF
Président at ARS Solutions
Support both French and English, which is important for us and adapted to the evolving security landscape over time in my experience
You need a skilled engineer to deploy it because you can do anything with this tool. You can see everything on the network. A good engineer will be surprised and have fun using this tool because it's very powerful. Deployment process: You need to build a recipe/layout when you want to deploy something. Once the recipe is done, you just have to copy it. So you really need a good engineer at first, but then any other technician can copy the recipe. You don't need to be an expert once the recipe is finalized. So, once you have it set up, it's easy to deploy. But you need a good engineer to deploy it correctly. You will get alerts from the system, but if you want to fully explore and maximize the tool, the engineering needs are different.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I appreciate the most about Cribl is the free training, the free access to all the training, and how easy it is to learn it."
"We save about 75% percent of our costs by processing network and firewall logs through Cribl."
"Cribl actually has sorted out our problems, but it will probably be better."
"Cribl is intuitive, and a user can easily see how the payload or log looks before conversion and how it looks after conversion, and what has been transferred to the destination."
"My favorite feature is that Cribl is connected with Splunk very easily and it routes the data."
"Cribl acts as a super product because it enables one source to send to multiple destinations using only one copy."
"The capability to reduce logs in a user-friendly manner is a standout feature. Cribl allows us to view logs live as they are being processed, giving us quick feedback on the changes made."
"The support team was very helpful and managed to get everything production-ready."
"We developed around this solution and received excellent support from the company."
"RSA enVision provides the full system visibility of your events within your IT ecosystem."
"The most valuable feature is the management features. It's capable of managing large enterprises."
"The configuration part is very easy...The technical support was sincere in their responses...I rate the technical support a nine out of ten."
"The custom dashboard and correlation alerts in this solution improved our incident response process."
"The most valuable feature of this solution is the reporting."
"The ease of log collection and stability of the platform are the most valuable features."
 

Cons

"It would be really nice to be able to see Cribl gain insights from the data as the data is in stream, in flight, on the way to wherever its final storage destination is."
"The documentation part could be better. Their documentation could be updated, as new features often outdated existing information."
"Improvement could be made in the logging area, as sometimes we encounter issues in a pipeline or something, and it's not immediately obvious when you look at the logs that the pipeline is failing."
"In Cribl Search, the language and the flexibility in querying the data can be improved because it is not as good as other solutions."
"I think it is a bit expensive. I heard that this might be expensive."
"When I started using Cribl interface for managing log processing tasks, it was difficult for me to navigate because it took me a month or two to gain fluency with the software since I did not have hands-on experience initially, and I found that the documentation is not thorough enough to help users navigate how to use Cribl."
"The user interface is acceptable, but I think a person who is just starting to use it will need to go through documentation because there is a steep learning curve to become familiar with Cribl Stream."
"However, the endpoint plug-in tool can use some refinement, as it tends to hit system resources and can sometimes be detrimental to systems to the point where it must be turned off and a scan restarted when a user is offline."
"Licensing could be improved to be more oriented towards Managed Service Providers (MSPs)."
"RSA enVision log manager is out of date and is not in use anymore."
"Whenever you perform the query, it takes too long."
"In general, the solution currently isn't user-friendly."
"There is no future for this solution. It does not exist anymore."
"The integration could be easier, it should support more products."
"Sometimes the investigation panel and reporting engine work very slowly."
 

Pricing and Cost Advice

"The product pricing is reasonable compared to other solutions."
"I would not say it is a cheaply priced tool as it has been doing wonders in the market. The tool has been budget-friendly for organizations."
"We no longer pay a licensing fee because it is out of date and don't pay for support."
"On a scale of one to ten, where one is low, and ten is high price, I rate the pricing a six."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Manufacturing Company
11%
Healthcare Company
6%
Government
5%
Comms Service Provider
16%
Outsourcing Company
14%
Construction Company
13%
Manufacturing Company
11%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise8
Large Enterprise35
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Cribl?
I find the pricing of Cribl to be cost-efficient because it has helped us save costs for data storage by removing unwanted logs.
What needs improvement with Cribl?
Currently, Cribl is perfectly fine for us, and we have not observed any such issues. However, if we find anything later on, we will document it and share it with you. Cribl could respond more quick...
What is your primary use case for Cribl?
We are using Cribl for log trimming with a vast majority of log sources that have different log patterns or log types. Some logs come in syslog format, some are in JSON, and some are in other HTML ...
Ask a question
Earn 20 points
 

Comparisons

 

Overview

 

Sample Customers

Information Not Available
BPS (SUISSE), Hypovereinsbank Germany, MAX Hamburgers, Infoplex, Neotel, Telus
Find out what your peers are saying about Cribl vs. RSA enVision and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.