No more typing reviews! Try our Samantha, our new voice AI agent.

Devo vs Falcon LogScale comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.5
Devo enhances data analysis and threat detection cost-effectively, offering scalability, customization, and efficiency in resource allocation.
Sentiment score
4.9
Falcon LogScale boosts ROI by 20-40%, enhancing efficiency with faster queries and reduced manual log collection efforts.
You save man hours, and man hours convert to business time and money time as well.
Cyber Security Engineer at eprocessconsulting
Falcon LogScale helps ease this process and sends logs to XDR for further verification.
IT System Administrator at a tech vendor with 201-500 employees
I have definitely seen ROI with Falcon LogScale so far.
CTO at Trust-IT Solutions
 

Customer Service

Sentiment score
6.7
Devo's customer service is praised for responsiveness and effectiveness, but some seek better documentation and clarity in ticket handling.
Sentiment score
6.1
Customer opinions on Falcon LogScale vary, praising support and updates, but noting delays and inconsistent experiences.
I rate the customer support a nine out of ten because of their timely technical guidance and responsiveness during the deployment and troubleshooting periods.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
Both response time and support quality need attention.
Team Lead Soc at a tech services company with 51-200 employees
I would rate the customer support a 10 on a scale of one to 10.
Developer at a manufacturing company with 201-500 employees
I raised a customer support request, and in response, they released a new version with a fix for that problem.
IT System Administrator at a tech vendor with 201-500 employees
The information contained in Falcon LogScale's documentation is very clear.
CTO at Trust-IT Solutions
 

Scalability Issues

Sentiment score
7.0
Devo's cloud-based architecture ensures impressive scalability, efficiently managing large data volumes and integrating users across regions without limitations.
Sentiment score
7.5
Falcon LogScale excels in scalability and performance, efficiently managing high data volumes with ease and adaptability.
Devo is a unified SIEM solution designed to handle growing log volumes and enterprise-scale monitoring requirements.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
If there is a critical incident with an associated IP, associated user, endpoints, or whatever factor it is supposed to associate, it associates it by default and makes our life easier, making the SOC life easier.
Security Consultant at SoftwareONE
You could integrate as many endpoints as you want within a fraction of seconds, and it accommodates the number of resources that you integrate with it while maintaining the same response time.
Cyber Security Engineer at eprocessconsulting
When we add new log sources or suddenly increase our ingestion volume, the performance does not dip.
Soc L1 Engineer at Softcell Technologies Limited
 

Stability Issues

Sentiment score
7.3
Devo is praised for its stability, reliable uptime, proactive support, and effective management of large deployments despite minor issues.
Sentiment score
8.4
Falcon LogScale is praised for its stability, reliability, efficient data handling, and robust real-time log search capabilities.
It is stable and reliable for our security operations.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
It uses an index-free architecture, it does not suffer from index corruption or the complications that other legacy tools face.
Soc L1 Engineer at Softcell Technologies Limited
Falcon LogScale is very strong in real-time log search.
Soc Analyst at a tech consulting company with 11-50 employees
We did not have any problems with Falcon LogScale in terms of stability and reliability.
CTO at Trust-IT Solutions
 

Room For Improvement

Devo's Activeboards need better customization, integration, UI, and AI capabilities, while cost and usability require attention.
Falcon LogScale needs better query language, documentation, UX, integration, scalability, AI features, support speed, and affordability improvements.
This is particularly evident when dealing with failed login attempts and determining true versus false positives.
Strategic Account Executive at a computer software company with 51-200 employees
UI improvements, a simplified dashboard, or an easier reporting workflow could further improve analyst productivity.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
I would appreciate more third-party integrations including Fortinet and others.
Team Lead Soc at a tech services company with 51-200 employees
For the ease of use for Falcon administrators, the same documentation on the Falcon LogScale portal should be on the CrowdStrike dashboard.
Cyber Security Engineer at eprocessconsulting
KQL is simpler when compared to SQL. However, SQL is faster and quite efficient, but the language is a bit tough.
Security Consultant at SoftwareONE
What they have done now is added what is called Charlotte AI, which is their new AI capabilities that can help with this.
CTO at Trust-IT Solutions
 

Setup Cost

Devo offers transparent pricing per gigabyte, with potential metadata charges, including 400-day storage and additional feature benefits.
Falcon LogScale offers cost-effective and flexible pricing, praised for ease of deployment and competitive with major competitors.
The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps.
Team Lead Soc at a tech services company with 51-200 employees
I believe when it comes to log ingestion, it is comparatively low compared to any other services like Microsoft, Trend Micro, or Splunk.
Security Consultant at SoftwareONE
For us, it is a very cost-effective solution.
CTO at Trust-IT Solutions
My experience with pricing, setup cost, and licensing is that it is straightforward, and the cost is quite low.
Developer at a manufacturing company with 201-500 employees
 

Valuable Features

Devo impresses with real-time analytics, intuitive UI, customization, advanced alerting, cloud-native architecture, and 400 days of data retention.
Falcon LogScale integrates easily, offering real-time log ingestion, fast search, scalability, and powerful AI-driven security insights.
When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
Strategic Account Executive at a computer software company with 51-200 employees
When the analyst uses queries to search, it pulls the data quickly, in a second, which aids us greatly with the investigation.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
It utilizes 400 days of hot data, allowing queries to run very fast and yield results quicker than other tools in terms of security and SIEM capability.
Senior Cloud Engineer at a tech services company with 201-500 employees
You can describe what you want to do in English, and it converts it to a query language for you to use.
Cyber Security Engineer at eprocessconsulting
Traditional SIEM tools index logs, which is slow and expensive. Falcon LogScale stores logs without heavy indexing and searches directly, making it very fast.
Soc Analyst at a tech consulting company with 11-50 employees
Falcon LogScale has positively impacted my organization by providing visibility of the logs, making it easier for us to troubleshoot any issues.
Developer at a manufacturing company with 201-500 employees
 

Categories and Ranking

Devo
Ranking in Log Management
27th
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
26
Ranking in other categories
Security Information and Event Management (SIEM) (27th), IT Operations Analytics (7th), AIOps (19th)
Falcon LogScale
Ranking in Log Management
13th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
12
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2026, in the Log Management category, the mindshare of Devo is 1.3%, up from 0.6% compared to the previous year. The mindshare of Falcon LogScale is 0.9%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Falcon LogScale0.9%
Devo1.3%
Other97.8%
Log Management
 

Featured Reviews

Usama Khan - PeerSpot reviewer
Team Lead Soc at a tech services company with 51-200 employees
Advanced threat hunting has improved SOC visibility and now supports faster incident response
Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.
Oluwajuwon Olorunlona - PeerSpot reviewer
Cyber Security Engineer at eprocessconsulting
Advanced threat hunting has improved visibility and has simplified custom query automation
CrowdStrike is ahead of the game. If I may say anything about Falcon LogScale to improve the services, I would talk about the way you develop parsers. The documentation should be more straightforward. It is not easy to quickly find the documentation, especially if you are using CrowdStrike. Most customers use Falcon LogScale because of CrowdStrike. The documentation of Falcon LogScale is not on the CrowdStrike portal just like the rest of Falcon documentation. I usually find that the main Falcon LogScale documentation is found on the Falcon LogScale website itself. I think there should be a link or direct documentation within the CrowdStrike pages. It is not necessarily a fault. If you find where the documentation resides, you can trace it to what they are doing. However, for the ease of use for Falcon administrators, the same documentation on the Falcon LogScale portal should be on the CrowdStrike dashboard.
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
907,664 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Construction Company
10%
Manufacturing Company
9%
Outsourcing Company
9%
Computer Software Company
10%
Comms Service Provider
10%
Manufacturing Company
9%
Media Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise5
Large Enterprise12
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise9
Large Enterprise3
 

Questions from the Community

What is your experience regarding pricing and costs for Devo?
Pricing generally depends on the scale, data ingestion requirements, and integrations for what the enterprise monitoring needs. I have not been part of the procurement process, so I am not aware of...
What needs improvement with Devo?
I think some features could be added to Devo. The cost is a little higher compared to other tools such as DataDog or Elasticsearch, so they could work on reducing costs. Additionally, while the sup...
What is your primary use case for Devo?
My main use case for Devo is that it serves as a primary tool for centralized logging solutions, mainly for threat investigation and alert monitoring. It helps us with security and analytic analyti...
What needs improvement with Falcon LogScale?
The main area for improvement in Falcon LogScale is the learning curve for the query language. Since I am heavily accustomed to SPL from my work in Splunk, adjusting to the syntax in Falcon LogScal...
What is your primary use case for Falcon LogScale?
I primarily use Falcon LogScale for heavy-duty threat hunting where I need sub-second results, particularly when working deep in tickets that we use for SIEM purposes. I do not want to wait for a S...
What advice do you have for others considering Falcon LogScale?
Falcon LogScale does require some maintenance. Compared to other tools, its maintenance is low. However, I have noticed that managing a SIEM environment in our infrastructure means conducting healt...
 

Comparisons

 

Overview

 

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel
Information Not Available
Find out what your peers are saying about Devo vs. Falcon LogScale and other solutions. Updated: June 2026.
907,664 professionals have used our research since 2012.