CrowdStrike Observability vs Graylog comparison

"The intelligence database provided by CrowdStrike is very impressive."

"I find the most effective feature of CrowdStrike Observability to be its cloud vision and attack surface vision, which enhance network traffic analysis."

"The log aggregation and correlation of data are notable features that enhance our operations."

"The price is worth it."

"The intelligence database provided by CrowdStrike is very impressive."

"I like the correlation and the alerting."

"What I like about Graylog is that it's real-time and you have access to the raw data. So, you ingest it, and you have access to every message and every data item you ingest. You can then build analytics on top of that. You can look at the raw data, and you can do some volumetric estimations, such as how big traffic you have, how many messages of data of a type you have, etc."

"Real-time UDP/GELF logging and full text-based searching."

"Open source and user friendly."

"One of the most valuable features is that you are able to do a very detailed search through the log messages in the overview."

"I am very proud of how very stable the solution is."

"Message forwarding through the in-built module."

"We have scaled from a single machine installation (a VM with a Graylog + ES + MongoDB) to (2 Graylog + 2 ES + 3 MongoDB). This was done smoothly with a minimal impact on logging."

"The customer service is not satisfactory for me. The support is only available in English, and my users in LATAM regions such as Peru and Colombia require local language support, which is not currently provided."

"Integration with Huawei should be more straightforward."

"Integration with Huawei should be more straightforward."

"For reporting or log management, having a longer duration for backup without needing to purchase a paid subscription would be beneficial. Currently, there is a default ninety-day backup period."

"For reporting or log management, having a longer duration for backup without needing to purchase a paid subscription would be beneficial."

"Dashboards, stream alerts and parsing could be improved."

"I would like to see a date and time in the Graylog Grok patterns so that I can save time when searching for a log. I like how the streams and the search query work, but adding a date and time will allow me to pull out a log in a milli-second."

"The infrastructure cost is the main issue. I like the rest. If the infrastructure costs could be lower, it would be fantastic."

"Lacks sufficient documentation."

"I hope to see improvements in Graylog for more interactivity, user-friendliness, and creating alerts. The initial setup is complex."

"When it comes to configuring the processing pipeline, writing the rules can be very tedious, especially since the documentation isn't extensive on how the functions provided for these rules work."

"We ran into problems with Elasticsearch throwing a circuit-breaking exception due to field data size being too large. It turned out that the heap size directly impacted this size in a high-throughput environment, causing unexplained instability in Graylog. We were able to troubleshoot on the Elasticsearch size, but we should have been able to reference some minimum requirements for Graylog to know that our settings weren't sufficient."

"Graylog needs to improve their authentication. Also, the fact that Graylog displays logs from the top down is just ridiculous."

"Consider Enterprise support if you have atypical needs or setup requirements.​"

"I use the free version of Graylog."

"If you want something that works and do not have the money for Splunk or QRadar, take Graylog.​​"

"It's open source and free. They have a paid version, but we never looked into that because we never needed the features of the paid version."

"We are using the free version of the product. However, the paid version is expensive."

"​You get a lot out-of-the-box with the non-enterprise version, so give it a try first."

"It's an open-source solution that can be used free of charge."

"We're using the Community edition."