

Fortinet FortiAnalyzer and Elastic Observability compete in the fields of network security management and cloud observability, respectively. Elastic Observability appears to have the upper hand due to its comprehensive cloud monitoring features, offering companies a more integrated solution for cloud-based environments.
Features: Fortinet FortiAnalyzer provides deep analytics, enhanced security reporting, and strong network-focused insights. Elastic Observability offers integration capabilities, flexible data visualization, and the ability to gather nuanced insights from various data sources.
Room for Improvement: FortiAnalyzer could benefit from improved integration range, better scalability for larger infrastructures, and more versatile deployment options. Elastic Observability might enhance its setup process, improve resource efficiency, and simplify its user interface for easier interaction.
Ease of Deployment and Customer Service: Fortinet FortiAnalyzer is easier to deploy in traditional network setups, with reliable customer support tailored to security needs. Elastic Observability, though requiring more configuration, is effective in addressing cloud-related issues with good support when contacted.
Pricing and ROI: Fortinet FortiAnalyzer is cost-effective for security tasks, delivering satisfactory ROI for network-specific needs. Elastic Observability, despite higher initial costs, is favored by users for its ROI when leveraging its extensive cloud features.
Elastic Observability has saved us time as it's much easier to find relevant pieces across the system in one screen compared to our own software, and it has saved resources too since the same resources can use less time.
The impact of the tool is low when the functionalities are inaccessible due to resource consumption.
Fortinet is highly efficient for moderate deployments and provides a secure platform for medium-sized networks and data centers.
I have seen a return on investment with Fortinet FortiAnalyzer due to its competitive pricing and straightforward licensing model based on the amount of log data processed per day.
Elastic support really struggles in complex situations to resolve issues.
Their excellent documentation typically helps me solve any issues I encounter.
Customer service and support for Fortinet FortiAnalyzer are quite helpful and responsive.
Technical support is good, and I rate it ten out of ten.
The support service is very slow and incompetent.
I rate the scalability of Elastic Observability as a ten, as we have never seen issues even with a lot of data coming in from more customers, provided we have the appropriate configuration.
Elastic Observability is easy in deployment in general for small scale, but when you deploy it at a really large scale, the complexity comes with the customizations.
Fortinet FortiAnalyzer is scalable, especially for the VM versions, as additional space can be provisioned from the servers as needed.
FortiAnalyzer is a scalable product.
It typically handles three to five years of expansion effectively.
There are some bugs that come with each release, but they are keen always to build major versions and minor versions on time, including the CVE vulnerabilities to fix it.
I would rate the stability of Elastic Observability as a ten, as we don't experience any issues.
We faced some CPU consumption issues, which caused the machine to slow down and required a restart of FortiAnalyzer.
It remains stable during implementation for one or two years.
It provides a reliable solution for managing network-wide data.
For instance, if you have many error logs and want to create a rule with a custom query, such as triggering an alert for five errors in the last hour, all you need to do is open the AI bot, type this question, and it generates an Elastic query for you to use in your alert rules.
It lacked some capabilities when handling on-prem devices, like network observability, package flow analysis, and device performance data on the infrastructure side.
Some areas such as AI Ops still require data scientists to understand machine learning and AI, and it doesn't have a quick win with no-brainer use cases.
When licensing, each device is licensed separately, such as the firewall, which can become expensive.
This would help in analyzing various security incidents and events more effectively by delivering a handful of relevant logs instead of thousands.
Enhanced deep inspection features would make troubleshooting easier.
Observability is actually cheaper compared to logs because you're not indexing huge blobs of text and trying to parse those.
Many customers struggle to understand their total cost of ownership because Elastic licensing is not dependent on easy, quantifiable metrics such as number of users or amount of data.
Its licensing model is based on the amount of log data processed per day, making it more cost-effective compared to QRadar, which is EPS and device-based.
In terms of pricing, FortiAnalyzer is not expensive.
In the Indian market, Fortinet's pricing is very competitive, allowing us to win most of our deals.
the most valued feature of Elastic is its log analytics capabilities.
Every integration, whether for Windows or Linux or even Palo Alto or Fortinet, installs the out-of-the-box dashboards along with it, making it easy to parse incoming data meaningfully and immediately start viewing dashboards to see what's happening in the platform.
The best features of Elastic Observability are their flexibility to integrate with other existing systems and the ability to build a unified monitoring tool that can integrate with existing ones and end-to-end user journeys which require a lot of customizations.
The advanced analytics capabilities aid in threat detection by providing visibility into indicators of compromise.
The most valuable feature of Fortinet FortiAnalyzer is its ability to simplify and display logs clearly, providing details like which IPs are accessing the system, the destination, and the policies applied.
The log management is useful as we have connected around two hundred eighty-five walls and around fifteen to twenty plus firewalls with Fortinet FortiAnalyzer, making it highly beneficial compared to logging into each individual firewall.
| Product | Mindshare (%) |
|---|---|
| Fortinet FortiAnalyzer | 1.4% |
| Elastic Observability | 1.3% |
| Other | 97.3% |


| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 4 |
| Large Enterprise | 16 |
| Company Size | Count |
|---|---|
| Small Business | 57 |
| Midsize Enterprise | 22 |
| Large Enterprise | 31 |
Elastic Observability is known for its powerful search capabilities, central logging, and integration with cloud-native tasks. It enhances monitoring for applications and systems through its flexibility and machine learning features.
Elastic Observability is a robust tool offering end-to-end monitoring and performance analysis, widely utilized for application performance monitoring, centralized logging, and metrics collection. Kibana enables data visualization and connection of sources, while the platform aids in incident response with real-time insights. Despite its complex learning curve, limited customization, and licensing challenges, it remains valuable for businesses seeking to improve operational efficiency with additional support from log analytics and system automation.
What are the key features of Elastic Observability?A wide range of industries apply Elastic Observability for its capabilities in capturing significant data points to offer insights into business and technical performance. Its applications span log events, application monitoring, network protocol monitoring, and more, aiding in data-driven decision-making processes within sectors like IT, finance, and e-commerce.
Fortinet FortiAnalyzer offers comprehensive report generation and log management to enhance threat analysis and user activity insights. It integrates with Fortinet products for centralized management, featuring robust security and real-time data capabilities.
FortiAnalyzer enables detailed threat analysis and in-depth insights into user activities, integrating seamlessly with Fortinet's suite for centralized network management. Its robust security features, real-time data processing, and customizable dashboards make it efficient for IT environments. Users benefit from predictive analytics, enhancing network visibility and cybersecurity operations. It is known for ease of deployment and a scalable, user-friendly interface. However, there are desires for better third-party integration, enhanced AI capabilities, and improved technical support. Users seek more intuitive documentation and improved cost-efficiency.
What are FortiAnalyzer's Most Important Features?FortiAnalyzer is utilized in diverse industries such as banking, medical organizations, and service providers. It is employed for security diagnostics, network traffic analysis, and incident management. Organizations utilize its capabilities for enhanced visibility, threat detection, and performance monitoring across cloud-based and on-premises setups.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.