No more typing reviews! Try our Samantha, our new voice AI agent.

Dynatrace vs NetWitness Platform comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Dynatrace
Ranking in Log Management
6th
Average Rating
8.8
Reviews Sentiment
6.9
Number of Reviews
362
Ranking in other categories
Application Performance Monitoring (APM) and Observability (2nd), Mobile APM (3rd), Container Monitoring (2nd), AIOps (2nd), AI Observability (3rd)
NetWitness Platform
Ranking in Log Management
36th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Security Information and Event Management (SIEM) (35th)
 

Mindshare comparison

As of October 2026, in the Log Management category, the mindshare of Dynatrace is 2.8%, down from 4.9% compared to the previous year. The mindshare of NetWitness Platform is 1.2%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Dynatrace2.8%
NetWitness Platform1.2%
Other96.0%
Log Management
 

Featured Reviews

Manish Indupuri - PeerSpot reviewer
senior DevOps engineer at a tech services company with 10,001+ employees
AI-driven insights have reduced downtime and improved cross-team collaboration
We encountered some challenges while using Dynatrace. Although the initial setup was smooth, fine-tuning alert thresholds and custom metrics took some time. Another challenge was that Dynatrace charges based on host units, so we had to carefully plan our agent deployments. The licensing model is expensive. Additionally, the complexity of setup is an issue. While OneAgent and auto-discover services are powerful, the setup is more complex compared to other tools such as Prometheus and Grafana. These integrations are simple and basic, but Dynatrace setup requires more complexity based on the environment. For new users wanting to use Dynatrace, it is difficult. However, the AI-related solutions and metrics took us to the next level for identifying and fixing things. Dynatrace requires an agent for operation. OneAgent is powerful, but it is also resource-heavy. On lightweight nodes or older systems, the agent can slightly impact performance. If Dynatrace could implement a lightweight agent behavior, we could make things faster. Additionally, if Dynatrace could add a long-term retention policy so that we could store more data and find fine-grained details, that would help us. While Dynatrace managed edition supports on-premises deployment, the SaaS version depends on cloud connectivity. For highly regulated or air-gapped environments, setup and updates can be challenging. Although the initial setup is smooth, if someone wants to fine-tune it and fully understand the tool end-to-end, it could be tricky.
reviewer1130436 - PeerSpot reviewer
Information Technology Security and Infrastructure Expert at a government with 201-500 employees
Helps to deal with potential attacks and is available at a reasonable price
My company has had many benefits from the use of the product in the last eight years. The tool has streamlined our company's incident response process since it serves as a log repository, which allows us to correlate events and access different technology stacks. In our company, we were able to actually find some potential attacks, so it has been very helpful. The tool's integration capability isn't so great. In my company, we managed to integrate it with our Microsoft Azure Subscription, after which we managed to integrate it with other tools. You will face a lot of difficulties if you want to integrate it with your database monitoring tool, PAM solutions, or IAM products. The product has done well overall for my company's teams to deal with their workflow efficiency. I would not recommend the product to others. I rate the tool a seven out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"No other provider gives us log ingestion, Kubernetes/Docker monitoring, and application monitoring for NodeJS."
"We used siloed monitoring tools but we couldn't find most of the features that Dynatrace offers, which is why these guys are standing first in the market, number one in the market."
"The PurePath technology, which is Dynatrace's bread and butter, is invaluable from early development all the way to production support."
"We used to work on two kinds of projects: banking and insurance; the second had a lot of performance issues, then came Dynatrace which has solved the problems, and our clients felt the difference."
"Smartscape is a valuable feature. They also have a technology named PurePath. PurePath is the distributed tracing data."
"PureStack, I just love it. It can give visibility from the end-user perspective right through to the code level. That's the most valuable feature."
"I'm also involved on the practical side, putting in all the automation, that automation platform. To have a tool like Dynatrace, where I don't have to work out for hours how to configure and set up alerts and monitoring - especially in a solution that is not completed yet - it's not only a major time-saver, but I know going forward that it will be able to learn how the system operates. Day one, we're getting all of that stuff for free, out-of-the-box."
"Dynatrace is very good and it's provided a lot of information, it plays a positive role in making your application up to date in the market."
"NetWitness can be highly beneficial for incident detection and response."
"Over time, NetWitness Logs and Packets has matured from a boxed solution with multiple parts to the current, more streamlined version for which we only need the software license to put it up on our own cloud and deliver it to multiple clients."
"Possibility to investigate incidents based on logs and raw packets, such as extracting files sent over the network"
"NetWitness Platform is valuable for creating rules that the solution must detect."
"I can have enterprise security, email security, next generation firewall security log, HIDS and NIDS logs, etc. all on the same dashboard. It makes it easy to pinpoint or correlate our server to this. I can find out if there is lateral movement. This is the biggest advantage of this solution."
"The software is scalable to whatever is required, and you can also put a lot of resources in the cloud."
"Overall, this is a good solution with suitable features and it very well fits our needs."
"The most valuable feature is the ability to write rules and triggers for network communication and then being able to investigate based on that, where you can see the payload and deconstruct the packets."
 

Cons

"Support for cloud-based environments needs to be improved."
"I still don't see the full depth of database metrics for database performance management."
"We've installed it to help us with performance issues and we use it when there's a problem, but we find it difficult to get in to find out what's really wrong."
"Its needs to focus more on open source areas, like Apache umbrella products and availability motioning areas."
"The products or company go through a rebrand/renaming about once a year, which creates some confusion with our customers."
"I would say that this solution's reports are lacking a little bit, and because of this, you have to rely on API to fetch and pull data. I think they could have done a bit of a better job by providing a more user-friendly search from a reporting perspective."
"Cloud monitoring is insufficient."
"While designing the business dashboard, I encountered various bugs that impacted my work."
"I believe they could improve their support, there are often delays."
"RSA NetWitness Logs and Packets is far behind the competition."
"The multi-tenant capabilities are lagging compared to IBM QRadar."
"The product continues to crash. Even with tech support help, it does not resolve itself."
"More customizability is required, which is something that they need to improve on."
"Health monitoring of the event sources and devices."
"The initial setup is very complex and should be simplified."
"Advance monitoring and alerting feature is not stable (Event Stream Analysis)."
 

Pricing and Cost Advice

"​Make sure your leadership buy-in is in place. Ensure leadership understands that an APM solution is a fairly expensive, so they know what they are getting into."
"Our annual costs were about the same for both AppDynamics and Dynatrace."
"We have not fully been able to get the full value out of the product. It is expensive compared to other things that we have had in the past. Paying that much and not being able to get the full return on the product is a downgrade. ​"
"It's understandable to do a smaller scale initial evaluation. However, as you identify the product value, don't hesitant in your scope and scale to maximize the initial investment and your opportunity to do a bulk investment of the product."
"It's more expensive than other solutions, but worth it. We use full APM monitoring on our primary systems, but only resource monitoring on lesser systems. We shift licenses around our environment when a deeper dive into lesser systems is required."
"The cost is somewhat high."
"The price of the solution is expensive."
"The pricing is not bad, but it could be better."
"The product price was reasonable for my region and the market."
"It provides tools to assist in selecting the appropriate license and usage scenarios."
"It’s cheaper to run virtual machines in a VMware environment."
"The licenses are good but the cost is very expensive."
"The tool is very expensive, so I rate the pricing a ten out of ten. The solution has an annual subscription."
"We are on an annual license for the use of the solution."
"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."
"The product is expensive."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
916,771 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
18%
Outsourcing Company
9%
Manufacturing Company
9%
Healthcare Company
6%
Construction Company
12%
Financial Services Firm
12%
Comms Service Provider
10%
Outsourcing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business81
Midsize Enterprise50
Large Enterprise301
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
 

Questions from the Community

Any advice about APM solutions?
The key is to have a holistic view over the complete infrastructure, the ones you have listed are great for APM if you need to monitor applications end to end. I have tested them all and have not f...
What cloud monitoring software did you choose and why?
While the environment does matter in the selection of an APM tool, I prefer to use Dynatrace to manage the entire stack. Both production and Dev/Test. I find it to be quite superior to anything els...
Any advice about APM solutions?
There are many factors and we know little about your requirements (size of org, technology stack, management systems, the scope of implementation). Our goal was to consolidate APM and infra monitor...
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
 

Also Known As

No data available
RSA Security Analytics
 

Overview

 

Sample Customers

TD Bank, Zurich North America, Accenture, Macquarie, United Airlines, Raymond James, BT, Vodafone, Air France-KLM, TELUS, American Airlines, Air Canada, ADT, Virgin Money
Los Angeles World Airports, Reply
Find out what your peers are saying about Dynatrace vs. NetWitness Platform and other solutions. Updated: September 2026.
916,771 professionals have used our research since 2012.