Try our new research platform with insights from 80,000+ expert users

CrowdStrike Observability vs NetWitness Platform comparison

CrowdStrike and NetWitness are both solutions in the Log Management category. CrowdStrike is ranked #43 with an average rating of 8.0, while NetWitness is ranked #38 with an average rating of 8.0. CrowdStrike holds a 0.5% mindshare in Log Management, compared to NetWitness’s 0.3% mindshare. Additionally, 100% of CrowdStrike users are willing to recommend the solution, compared to 75% of NetWitness users who would recommend it.
CrowdStrike Observability
Read 3 CrowdStrike Observability reviews
  • 797 Views
  • 320 Comparison Views
100% willing to recommend
NetWitness Platform
Read 37 NetWitness Platform reviews
  • 733 Views
  • 114 Comparison Views
75% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between CrowdStrike Observability and NetWitness Platform based on real PeerSpot user reviews.

Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed CrowdStrike Observability vs. NetWitness Platform Report (Updated: June 2025).
Buyer's Guide
CrowdStrike Observability vs. NetWitness Platform
June 2025
Download the complete report
Helped 859,129 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CrowdStrike Observability
Ranking in Log Management
43rd
Average Rating
8.4
Reviews Sentiment
6.1
Number of Reviews
3
Ranking in other categories
No ranking in other categories
NetWitness Platform
Ranking in Log Management
38th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
37
Ranking in other categories
Security Information and Event Management (SIEM) (29th)
 

Mindshare comparison

As of June 2025, in the Log Management category, the mindshare of CrowdStrike Observability is 0.5%, down from 0.6% compared to the previous year. The mindshare of NetWitness Platform is 0.3%, down from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

ManelAlvarez - PeerSpot reviewer
Protection improves through superior global visibility and robust cloud integration
CrowdStrike Observability is especially useful when using a multi-cloud environment. Although it is expensive, the protection level it provides justifies the price. For users on Google Cloud, I prefer using Google's GTI technology. Overall, I would rate CrowdStrike Observability as nine out of ten. I rate the overall solution as nine.
Read full review
MOTASHIM Al Razi - PeerSpot reviewer
It is a stable solution, but they should make the user interface easier to understand
The solution's initial setup takes work. We have to organize multiple paths and many features. The deployment process takes less than a week. But it takes a month to complete if we want to make the solution smarter by integrating it with various devices. I rate the process as a six out of ten.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The intelligence database provided by CrowdStrike is very impressive."
"The intelligence database provided by CrowdStrike is very impressive."
"The price is worth it."
"I find the most effective feature of CrowdStrike Observability to be its cloud vision and attack surface vision, which enhance network traffic analysis."
"The log aggregation and correlation of data are notable features that enhance our operations."
"The newer 11.5 version that my team is using has found it to have good mapping."
"Alerting Module: It provides real-time event processing language on all the logs/packets stream for advanced alerting, i.e., using SQL LIKE statements."
"Incident management is its most valuable feature."
"The packet capture aspect of it is a valuable feature because it is quite different from a traditional SIEM solution that only carries out investigations based on captured logs."
"It's fully scalable. There is no limit. Of course, the license limits per day the number of terabytes. In my opinion, it's very flexible."
"It gives the capability for the incident response team to correlate logs to identify any kind of problem like malware and incidents in a general sense, both for logs and packets."
"The most valuable features are the packet decoder, log decoder, and concentrator."
"What we are mainly using are the RSA concentrator, RSA Decoder, Archiver, Broker, and Log Decoder."
More NetWitness Platform pros
 

Cons

"For reporting or log management, having a longer duration for backup without needing to purchase a paid subscription would be beneficial."
"For reporting or log management, having a longer duration for backup without needing to purchase a paid subscription would be beneficial. Currently, there is a default ninety-day backup period."
"Integration with Huawei should be more straightforward."
"Integration with Huawei should be more straightforward."
"The customer service is not satisfactory for me. The support is only available in English, and my users in LATAM regions such as Peru and Colombia require local language support, which is not currently provided."
"The initial setup is very complex and should be simplified."
"The initial setup is complex. There are other solutions that are easier to implement."
"The system architecture is complex and sometimes it’s hard to troubleshoot potential problems."
"Log aggregation is an issue with this solution because there are a huge number of alerts in a single instance."
"The log system is a bit complex and has room for improvement."
"The documentation is not as structured as I would like, personally, and I think that it can be improved and made much more user-friendly."
"The multi-tenant capabilities are lagging compared to IBM QRadar."
"They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams."
More NetWitness Platform cons
 

Pricing and Cost Advice

Information not available
"The new pricing and licensing mechanisms are fair. I would advise always to get the full solution (i.e., not only Logs)."
"Compared to the competition, the is price is not that high."
"It’s cheaper to run virtual machines in a VMware environment."
"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
"We are on an annual license for the use of the solution."
"The tool is very expensive, so I rate the pricing a ten out of ten. The solution has an annual subscription."
"The licenses are good but the cost is very expensive."
"Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."
More NetWitness Platform pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
See recommendations
859,129 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
Read full review
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
15%
Manufacturing Company
8%
Healthcare Company
8%
Computer Software Company
18%
Financial Services Firm
18%
Government
5%
Manufacturing Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What needs improvement with CrowdStrike Observability?
CrowdStrike Observability could improve in terms of understanding the functionality of different modules. The complexity of having multiple modules such as vulnerability management and identity man...
See all answers
What is your primary use case for CrowdStrike Observability?
I have been using CrowdStrike Observability for the past two months with a focus on the cloud environment, specifically integrating with Google Cloud. We are currently utilizing it for detection pu...
See all answers
What advice do you have for others considering CrowdStrike Observability?
CrowdStrike Observability is especially useful when using a multi-cloud environment. Although it is expensive, the protection level it provides justifies the price. For users on Google Cloud, I pre...
See all answers
What do you like most about NetWitness Platform?
The product's initial setup phase was not at all difficult.
See all answers
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
See all answers
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
See all answers
 

Comparisons

Datadog vs CrowdStrike Observability Logo
Datadog vs CrowdStrike Observability
Compared 25% of the time
Wazuh vs CrowdStrike Observability Logo
Wazuh vs CrowdStrike Observability
Compared 20% of the time
Lumen Security Log Monitoring vs CrowdStrike Observability Logo
Lumen Security Log Monitoring vs CrowdStrike Observability
Compared 12% of the time
ManageEngine Log360 vs CrowdStrike Observability Logo
ManageEngine Log360 vs CrowdStrike Observability
Compared 10% of the time
Amazon CloudWatch vs CrowdStrike Observability Logo
Amazon CloudWatch vs CrowdStrike Observability
Compared 7% of the time
More CrowdStrike Observability Competitors
Splunk Enterprise Security vs NetWitness Platform Logo
Splunk Enterprise Security vs NetWitness Platform
Compared 22% of the time
IBM Security QRadar vs NetWitness Platform Logo
IBM Security QRadar vs NetWitness Platform
Compared 19% of the time
Elastic Security vs NetWitness Platform Logo
Elastic Security vs NetWitness Platform
Compared 13% of the time
RSA enVision vs NetWitness Platform Logo
RSA enVision vs NetWitness Platform
Compared 10% of the time
Trellix Network Detection and Response vs NetWitness Platform Logo
Trellix Network Detection and Response vs NetWitness Platform
Compared 8% of the time
More NetWitness Platform Competitors
 

Product Reports

Buyer's Guide
Log Management
May 2025
CrowdStrike Observability reportDownload CrowdStrike Observability product report
Buyer's Guide
NetWitness Platform
June 2025
NetWitness Platform reportDownload NetWitness Platform product report
 

Also Known As

No data available
RSA Security Analytics
 

Overview

Unify security, log management, and observability with the new CrowdStrike Falcon LogScale module, the next evolution of Humio, including the all-new managed Falcon Complete LogScale service.

CrowdStrike

NetWitness Platform is an evolved SIEM and threat detection and response solution that functions as a single, unified platform for ALL your security data. It features an advanced analyst workbench for triaging alerts and incidents, and it orchestrates security operations programs end to end. In short: NetWitness Platform is all you need to run an intelligent SOC.

NetWitness
 

Sample Customers

Information Not Available
Los Angeles World Airports, Reply
Buyer's Guide
CrowdStrike Observability vs. NetWitness Platform
June 2025
Free Report: CrowdStrike Observability vs. NetWitness Platform
Find out what your peers are saying about CrowdStrike Observability vs. NetWitness Platform and other solutions. Updated: June 2025.
DOWNLOAD NOW
859,129 professionals have used our research since 2012.
See our CrowdStrike Observability vs. NetWitness Platform report.
See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.