Elastic Observability vs NetWitness Platform comparison

Cancel
You must select at least 2 products to compare!
Elastic Logo
4,094 views|3,400 comparisons
90% willing to recommend
NetWitness Logo
1,135 views|701 comparisons
74% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Elastic Observability and NetWitness Platform based on real PeerSpot user reviews.

Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Elastic Observability vs. NetWitness Platform Report (Updated: April 2024).
770,428 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"We use AppDynamics and Elastic. The reason why we're using Elastic APM is because of the license count. It's very favorable compared to AppDynamics. It's inexpensive; it's economical.""The tool's most valuable feature is centralized logging. Elastic Common Search helps us to search for the logs across the organization.""We can view and connect different sources to the dashboard using it.""The architecture and system's stability are simple.""The ability to ensure that the data is searchable and maintainable is highly valuable for our purposes.""The most valuable feature of Elastic Observability is the text search.""It's easy to deploy, and it's very flexible.""I have built a mini business intelligence system based on Elastic Observability."

More Elastic Observability Pros →

"The development of use cases on the SSA console is quite user friendly. This means that the security analyst or the researcher does not have to learn another language.""Performance and reporting are very good.""The product's initial setup phase was not at all difficult.""The most valuable feature is the security that it provides.""The most valuable features are the packet decoder, log decoder, and concentrator.""The newer 11.5 version that my team is using has found it to have good mapping.""The software is scalable to whatever is required, and you can also put a lot of resources in the cloud.""The most valuable feature is that we can create our own connectors for any application, and NetWitness provides the training and tools to do it."

More NetWitness Platform Pros →

Cons
"The tool's scalability involves a more complex implementation process. It requires careful calculations to determine the number of nodes needed, the specifications of each node, and the configuration of hot, warm, and cold zones for data storage. Additionally, managing log retention policies adds further complexity. The solution's pricing also needs to be cheaper.""In the future, Elastic APM needs a portfolio iTool. They can provide an easy way to develop the custom UI for Kibana.""The price is the only issue in the solution. It can be made better and cheaper.""Elastic APM's visualization is not that great compared to other tools. It's number of metrics is very low.""Elastic Observability needs to have better standardization, logging, and schema.""Elastic Observability is an excellent product for monitoring and visibility, but it lacks predictive analytics. Most solutions are aligned with the AIOps requirements, but this piece is missing in Elastic and should be included.""Elastic Observability needs to improve the retrieval of logs and metrics from all the instances.""There is room for improvement regarding its APM capabilities."

More Elastic Observability Cons →

"I believe that integrating the solution with other products such as Oracle would be beneficial.""They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams.""RSA NetWitness Logs and Packets can improve the threat level aspect, it is lacking compared to other solutions. Whenever any hacking activity or any other threat factor occurred they used to provide the coverages very fast when comparing RSA NetWitness Logs and Packets. I heard the other three solutions, from a discussion with my team members who had experience in other solutions, they used to say that. Whenever any issues happened across the globe RSA NetWitness Logs and Packets are a little bit slow improving those detection mechanisms.""The system looks like it is a mix of a bunch of different systems, and nothing looked like it was quite together.""The initial setup is complex. There are other solutions that are easier to implement.""The solution should have more integration capabilities with different platforms.""Security needs improvement.""I'd like to see improvement in its ease of use. It's basically unusable. It's overly complex."

More NetWitness Platform Cons →

Pricing and Cost Advice
  • "So far, there are just the standard licensing fees. Several of the components are embedded in the license or are even open source. They're even free depending on what you use, which makes it even more appealing to someone that is discussing pricing of the solution."
  • "There are two types: cloud and SaaS. They charge based on data ingestion, ingest rate, hard retention, and warm retention. I believe it costs around $25,000 annually to ingest 30GB of data daily. That is the SaaS version. There is also a self-managed license where the customer manages their own infrastructure on-prem. In such cases, there are three license tiers that respectively cost $5,000 annually per node, $7,000 per node, and $12,500 per node."
  • "Pricing is one of those situations where the more you use it, the more you pay."
  • "The price of Elastic Observability is expensive."
  • "Users have to pay for some features, like the alerts on different channels, because they are unavailable in different source versions."
  • "One needs to pay for the licenses, and it is an annual subscription model right now."
  • "Since we are a huge company, Elastic Observability is an affordable solution for us."
  • "We will buy a premium license after POC."
  • More Elastic Observability Pricing and Cost Advice →

  • "It’s cheaper to run virtual machines in a VMware environment."
  • "The new pricing and licensing mechanisms are fair. I would advise always to get the full solution (i.e., not only Logs)."
  • "It is cheap."
  • "The licenses are good but the cost is very expensive."
  • "This is a pricey solution; it's not cheap."
  • "We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
  • "Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."
  • "Our license is for one year."
  • More NetWitness Platform Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Log Management solutions are best for your needs.
    770,428 professionals have used our research since 2012.
    Comparison Review
    Vinod Shankar
    Questions from the Community
    Top Answer:Elastic Observability significantly improves incident response time by providing quick access to logs and data across various sources. For instance, searching for specific keywords in logs spanning… more »
    Top Answer:I rate the pricing a five out of ten. The product is not that cheap.
    Top Answer:The tool's scalability involves a more complex implementation process. It requires careful calculations to determine the number of nodes needed, the specifications of each node, and the configuration… more »
    Top Answer:The product's initial setup phase was not at all difficult.
    Top Answer:The product price was reasonable for my region and the market.
    Top Answer:From an improvement perspective, the NetWitness Platform needs to release new features and improve in areas like log correlation. The tool needs to have easier integrations with the cloud. Building a… more »
    Ranking
    14th
    out of 95 in Log Management
    Views
    4,094
    Comparisons
    3,400
    Reviews
    16
    Average Words per Review
    445
    Rating
    7.9
    19th
    out of 95 in Log Management
    Views
    1,135
    Comparisons
    701
    Reviews
    11
    Average Words per Review
    471
    Rating
    7.5
    Comparisons
    Also Known As
    RSA Security Analytics
    Learn More
    NetWitness
    Video Not Available
    Overview
    To effectively monitor and gain insights across your distributed systems, you need to have all your observability data in one stack. Break down silos by bringing together application, infrastructure, and user data into a unified solution for end-to-end observability and alerting.
    Rely on the most widely deployed observability platform available, built on the proven Elastic Stack (also known as the ELK Stack) to converge silos, delivering unified visibility and actionable insights.

    NetWitness Platform is an evolved SIEM and threat detection and response solution that functions as a single, unified platform for ALL your security data. It features an advanced analyst workbench for triaging alerts and incidents, and it orchestrates security operations programs end to end. In short: NetWitness Platform is all you need to run an intelligent SOC.

    Sample Customers
    PSCU, Entel, VITAS, Mimecast, Barrett Steel, Butterfield Bank
    Los Angeles World Airports, Reply
    Top Industries
    REVIEWERS
    Computer Software Company27%
    Manufacturing Company18%
    Comms Service Provider9%
    Healthcare Company9%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Computer Software Company15%
    Manufacturing Company8%
    Healthcare Company6%
    REVIEWERS
    Comms Service Provider24%
    Financial Services Firm24%
    Computer Software Company24%
    Manufacturing Company10%
    VISITORS READING REVIEWS
    Financial Services Firm15%
    Computer Software Company15%
    Government10%
    Insurance Company6%
    Company Size
    REVIEWERS
    Small Business27%
    Midsize Enterprise18%
    Large Enterprise55%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise12%
    Large Enterprise67%
    REVIEWERS
    Small Business26%
    Midsize Enterprise17%
    Large Enterprise57%
    VISITORS READING REVIEWS
    Small Business23%
    Midsize Enterprise10%
    Large Enterprise68%
    Buyer's Guide
    Elastic Observability vs. NetWitness Platform
    April 2024
    Find out what your peers are saying about Elastic Observability vs. NetWitness Platform and other solutions. Updated: April 2024.
    770,428 professionals have used our research since 2012.

    Elastic Observability is ranked 14th in Log Management with 22 reviews while NetWitness Platform is ranked 19th in Log Management with 36 reviews. Elastic Observability is rated 7.8, while NetWitness Platform is rated 7.4. The top reviewer of Elastic Observability writes "The user interface framework lets us do custom development when needed. ". On the other hand, the top reviewer of NetWitness Platform writes "Can find out if there is lateral movement, but integration and workflow need improvement". Elastic Observability is most compared with Dynatrace, New Relic, AppDynamics, Azure Monitor and Datadog, whereas NetWitness Platform is most compared with Splunk Enterprise Security, RSA enVision, IBM Security QRadar, Cisco Secure Network Analytics and Microsoft Sentinel. See our Elastic Observability vs. NetWitness Platform report.

    See our list of best Log Management vendors.

    We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.