Elastic Observability vs Security Onion comparison

Cancel
You must select at least 2 products to compare!
Elastic Logo
4,094 views|3,400 comparisons
90% willing to recommend
Security Onion Solutions, LLC Logo
3,263 views|2,753 comparisons
66% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Elastic Observability and Security Onion based on real PeerSpot user reviews.

Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Elastic Observability vs. Security Onion Report (Updated: April 2024).
770,924 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The architecture and system's stability are simple.""It's easy to deploy, and it's very flexible.""It has always been a stable solution.""The solution is open-source and helps with back-end logging. It is also easy to handle.""The Elastic User Interface framework lets us do custom development when needed. You need to have some Javascript knowledge. We need that knowledge to develop new custom tests.""Elastic APM has plenty of features, such as the Elastic server for Kibana and many additional plugins. It's a comprehensive tool when used as a logging platform.""The tool's most valuable feature is centralized logging. Elastic Common Search helps us to search for the logs across the organization.""Elastic Observability significantly improves incident response time by providing quick access to logs and data across various sources. For instance, searching for specific keywords in logs spanning over a month from multiple data sources can be completed within seconds."

More Elastic Observability Pros →

"We use Security Onion for internal vulnerability assessment.""Security Onion is the most mature solution in the market.""The most valuable feature of Security Onion for security monitoring is its ability to find infected ports."

More Security Onion Pros →

Cons
"There's a steep learning curve if you've never used this solution before.""Elastic Observability is reactive rather than proactive. It should act as an ITSM tool and be able to create tickets and alerts on Jira.""There is room for improvement regarding its APM capabilities.""The auto-discovery isn't nearly as good. That's a big portion of it. When you drop the agent onto the JVM and you're trying to figure things out, having to go through and manually do all that is cumbersome.""In the future, Elastic APM needs a portfolio iTool. They can provide an easy way to develop the custom UI for Kibana.""The tool's scalability involves a more complex implementation process. It requires careful calculations to determine the number of nodes needed, the specifications of each node, and the configuration of hot, warm, and cold zones for data storage. Additionally, managing log retention policies adds further complexity. The solution's pricing also needs to be cheaper.""The solution would be better if it was capable of more automation, especially in a monitoring capacity or for the response to abnormalities.""The solution needs to use more AI. Once the product onboards AI, users would more effectively be able to track endpoints for specific messages."

More Elastic Observability Cons →

"The initial setup of the solution is a little bit difficult.""The product is not easy to learn.""Security Onion's user interface could be improved."

More Security Onion Cons →

Pricing and Cost Advice
  • "So far, there are just the standard licensing fees. Several of the components are embedded in the license or are even open source. They're even free depending on what you use, which makes it even more appealing to someone that is discussing pricing of the solution."
  • "There are two types: cloud and SaaS. They charge based on data ingestion, ingest rate, hard retention, and warm retention. I believe it costs around $25,000 annually to ingest 30GB of data daily. That is the SaaS version. There is also a self-managed license where the customer manages their own infrastructure on-prem. In such cases, there are three license tiers that respectively cost $5,000 annually per node, $7,000 per node, and $12,500 per node."
  • "Pricing is one of those situations where the more you use it, the more you pay."
  • "The price of Elastic Observability is expensive."
  • "Users have to pay for some features, like the alerts on different channels, because they are unavailable in different source versions."
  • "One needs to pay for the licenses, and it is an annual subscription model right now."
  • "Since we are a huge company, Elastic Observability is an affordable solution for us."
  • "We will buy a premium license after POC."
  • More Elastic Observability Pricing and Cost Advice →

  • "Security Onion is a free solution."
  • "It is an open-source solution."
  • "Security Onion is an open-source solution."
  • More Security Onion Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Log Management solutions are best for your needs.
    770,924 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Elastic Observability significantly improves incident response time by providing quick access to logs and data across various sources. For instance, searching for specific keywords in logs spanning… more »
    Top Answer:I rate the pricing a five out of ten. The product is not that cheap.
    Top Answer:The tool's scalability involves a more complex implementation process. It requires careful calculations to determine the number of nodes needed, the specifications of each node, and the configuration… more »
    Top Answer:The most valuable feature of Security Onion for security monitoring is its ability to find infected ports.
    Top Answer:Security Onion is an open-source solution. On a scale from one to ten, where ten is expensive and one is cheap, I rate the solution's pricing a six out of ten.
    Top Answer:The initial setup of the solution is a little bit difficult.
    Ranking
    14th
    out of 95 in Log Management
    Views
    4,094
    Comparisons
    3,400
    Reviews
    16
    Average Words per Review
    445
    Rating
    7.9
    33rd
    out of 95 in Log Management
    Views
    3,263
    Comparisons
    2,753
    Reviews
    3
    Average Words per Review
    330
    Rating
    7.7
    Comparisons
    Learn More
    Overview
    To effectively monitor and gain insights across your distributed systems, you need to have all your observability data in one stack. Break down silos by bringing together application, infrastructure, and user data into a unified solution for end-to-end observability and alerting.
    Rely on the most widely deployed observability platform available, built on the proven Elastic Stack (also known as the ELK Stack) to converge silos, delivering unified visibility and actionable insights.

    Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring, and log management. The easy-to-use Setup wizard allows you to build an army of distributed sensors for your enterprise in minutes!
    Security Onion includes a native web interface with built-in tools analysts use to respond to alerts, hunt for evil, catalog evidence into cases, monitor grid performance, and much more. Additionally, third-party tools, such as Elasticsearch, Logstash, Kibana, Suricata, Zeek (formerly known as Bro), Wazuh, Stenographer, CyberChef, NetworkMiner, and many more are included.

    Sample Customers
    PSCU, Entel, VITAS, Mimecast, Barrett Steel, Butterfield Bank
    Information Not Available
    Top Industries
    REVIEWERS
    Computer Software Company27%
    Manufacturing Company18%
    Comms Service Provider9%
    Healthcare Company9%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Computer Software Company15%
    Manufacturing Company8%
    Healthcare Company6%
    VISITORS READING REVIEWS
    Computer Software Company13%
    Government11%
    University10%
    Comms Service Provider9%
    Company Size
    REVIEWERS
    Small Business27%
    Midsize Enterprise18%
    Large Enterprise55%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise12%
    Large Enterprise67%
    VISITORS READING REVIEWS
    Small Business29%
    Midsize Enterprise19%
    Large Enterprise52%
    Buyer's Guide
    Elastic Observability vs. Security Onion
    April 2024
    Find out what your peers are saying about Elastic Observability vs. Security Onion and other solutions. Updated: April 2024.
    770,924 professionals have used our research since 2012.

    Elastic Observability is ranked 14th in Log Management with 22 reviews while Security Onion is ranked 33rd in Log Management with 3 reviews. Elastic Observability is rated 7.8, while Security Onion is rated 7.6. The top reviewer of Elastic Observability writes "The user interface framework lets us do custom development when needed. ". On the other hand, the top reviewer of Security Onion writes "A mature and affordable solution that is easy to install and easy to update". Elastic Observability is most compared with Dynatrace, New Relic, AppDynamics, Azure Monitor and Datadog, whereas Security Onion is most compared with Wazuh, Elastic Stack, TheHive, Splunk Enterprise Security and Graylog. See our Elastic Observability vs. Security Onion report.

    See our list of best Log Management vendors.

    We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.