

Devo and Elastic Observability compete in the data monitoring and analysis sector. Devo stands out in pricing and customer support, while Elastic Observability impresses with its extensive feature set.
Features: Devo is noted for fast query performance, scalability, and efficient data integration capabilities. Elastic Observability offers a comprehensive feature set with diverse integrations and advanced analytics.
Room for Improvement: Devo users suggest enhancements in alerting functionality, improved documentation, and more intuitive interface options. Elastic Observability faces challenges with setup complexity, requires better training materials, and could simplify its initial configuration process.
Ease of Deployment and Customer Service: Devo is recognized for straightforward deployment and responsive customer service, aided by guided installation. Elastic Observability is less intuitive but has effective customer support for issue resolution.
Pricing and ROI: Devo is known for its competitive pricing and favorable ROI due to lower setup costs. Elastic Observability, while more expensive, provides satisfactory ROI through advanced analytics and features.
Devo gives value to the end user and is saving compared to other products in the same category.
In terms of return on investment with Devo, I'd say it has been costly due to the need for support and the overtime required for issues experienced at the beginning of the project.
We achieve early identification of security incidents that could potentially breach the customer environment, which would have been costly.
Elastic Observability has saved us time as it's much easier to find relevant pieces across the system in one screen compared to our own software, and it has saved resources too since the same resources can use less time.
I rate the customer support a nine out of ten because of their timely technical guidance and responsiveness during the deployment and troubleshooting periods.
Both response time and support quality need attention.
Technical support from Devo is helpful.
Elastic support really struggles in complex situations to resolve issues.
Their excellent documentation typically helps me solve any issues I encounter.
Devo is a unified SIEM solution designed to handle growing log volumes and enterprise-scale monitoring requirements.
Devo's scalability has its challenges.
Regarding Devo's scalability, its horizontal scalability is quite good with no significant hassle.
I rate the scalability of Elastic Observability as a ten, as we have never seen issues even with a lot of data coming in from more customers, provided we have the appropriate configuration.
Elastic Observability is easy in deployment in general for small scale, but when you deploy it at a really large scale, the complexity comes with the customizations.
It is stable and reliable for our security operations.
There are some bugs that come with each release, but they are keen always to build major versions and minor versions on time, including the CVE vulnerabilities to fix it.
I would rate the stability of Elastic Observability as a ten, as we don't experience any issues.
It's hard for us to keep pace since our original use case was 250 to 500 megabytes a day, and then it became two terabytes a day.
Integrating custom parsing and mapping for non-standard logs is essential due to compatibility challenges with various technologies.
This is particularly evident when dealing with failed login attempts and determining true versus false positives.
For instance, if you have many error logs and want to create a rule with a custom query, such as triggering an alert for five errors in the last hour, all you need to do is open the AI bot, type this question, and it generates an Elastic query for you to use in your alert rules.
It lacked some capabilities when handling on-prem devices, like network observability, package flow analysis, and device performance data on the infrastructure side.
Some areas such as AI Ops still require data scientists to understand machine learning and AI, and it doesn't have a quick win with no-brainer use cases.
The pricing could be simpler, and while the initial setup cost for a new instance is a bit expensive, the licensing can currently be user-based or driven by log volume, which is better if there is expansion of our user base.
The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps.
Observability is actually cheaper compared to logs because you're not indexing huge blobs of text and trying to parse those.
Many customers struggle to understand their total cost of ownership because Elastic licensing is not dependent on easy, quantifiable metrics such as number of users or amount of data.
When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
When the analyst uses queries to search, it pulls the data quickly, in a second, which aids us greatly with the investigation.
It utilizes 400 days of hot data, allowing queries to run very fast and yield results quicker than other tools in terms of security and SIEM capability.
the most valued feature of Elastic is its log analytics capabilities.
Every integration, whether for Windows or Linux or even Palo Alto or Fortinet, installs the out-of-the-box dashboards along with it, making it easy to parse incoming data meaningfully and immediately start viewing dashboards to see what's happening in the platform.
The best features of Elastic Observability are their flexibility to integrate with other existing systems and the ability to build a unified monitoring tool that can integrate with existing ones and end-to-end user journeys which require a lot of customizations.
| Product | Mindshare (%) |
|---|---|
| Elastic Observability | 1.3% |
| Devo | 1.4% |
| Other | 97.3% |


| Company Size | Count |
|---|---|
| Small Business | 11 |
| Midsize Enterprise | 6 |
| Large Enterprise | 15 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 4 |
| Large Enterprise | 16 |
Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.
Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.
What are Devo's most important features?Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.
Elastic Observability is known for its powerful search capabilities, central logging, and integration with cloud-native tasks. It enhances monitoring for applications and systems through its flexibility and machine learning features.
Elastic Observability is a robust tool offering end-to-end monitoring and performance analysis, widely utilized for application performance monitoring, centralized logging, and metrics collection. Kibana enables data visualization and connection of sources, while the platform aids in incident response with real-time insights. Despite its complex learning curve, limited customization, and licensing challenges, it remains valuable for businesses seeking to improve operational efficiency with additional support from log analytics and system automation.
What are the key features of Elastic Observability?A wide range of industries apply Elastic Observability for its capabilities in capturing significant data points to offer insights into business and technical performance. Its applications span log events, application monitoring, network protocol monitoring, and more, aiding in data-driven decision-making processes within sectors like IT, finance, and e-commerce.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.