Try our new research platform with insights from 80,000+ expert users

Elastic Observability vs USM Anywhere comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.3
Elastic Observability enhances efficiency, reduces incidents, and provides cost-effective visibility, with benefits in data management and availability.
Sentiment score
6.8
USM Anywhere enhances security, saves time and resources, reduces staffing needs, and meets compliance, offering financial and time benefits.
Customers see ROI as they save on staff and other resources.
 

Customer Service

Sentiment score
7.5
Elastic Observability users praise responsive, knowledgeable support, valuing quick problem-solving, though rely on documentation for added assistance.
Sentiment score
8.0
USM Anywhere's customer service is generally praised for responsiveness but experiences occasional delays and inconsistent support information.
Elastic support really struggles in complex situations to resolve issues.
 

Scalability Issues

Sentiment score
7.1
Elastic Observability offers scalable performance and ease of use, with user satisfaction varying based on specific implementations and preferences.
Sentiment score
7.5
USM Anywhere is scalable for small to medium businesses, but enterprise-scale deployments face data volume and speed challenges.
Elastic Observability seems to have a good scale-out capability.
Elastic Observability is easy in deployment in general for small scale, but when you deploy it at a really large scale, the complexity comes with the customizations.
What is not scalable for us is not on Elastic's side.
USM Anywhere faces scalability issues because of a 60 TB limit.
 

Stability Issues

Sentiment score
8.1
Elastic Observability is stable, efficiently handles analytics, and is well-regarded by users, though monitoring storage is recommended.
Sentiment score
7.2
USM Anywhere receives mixed stability reviews, with some users praising its reliability and others reporting issues during updates or large data handling.
There are some bugs that come with each release, but they are keen always to build major versions and minor versions on time, including the CVE vulnerabilities to fix it.
It is very stable, and I would rate it ten out of ten based on my interaction with it.
Elastic Observability is really stable.
 

Room For Improvement

Elastic Observability needs improved automation, ease of use, dashboard customization, advanced metrics, compatibility, and streamlined deployment processes.
USM Anywhere needs improved performance, user interface, integration, and support, with better updates and less disruptive software changes.
For instance, if you have many error logs and want to create a rule with a custom query, such as triggering an alert for five errors in the last hour, all you need to do is open the AI bot, type this question, and it generates an Elastic query for you to use in your alert rules.
It lacked some capabilities when handling on-prem devices, like network observability, package flow analysis, and device performance data on the infrastructure side.
Some areas such as AI Ops still require data scientists to understand machine learning and AI, and it doesn't have a quick win with no-brainer use cases.
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks.
 

Setup Cost

Elastic Observability offers cost-effective, flexible pricing for enterprises, though high-tier licensing may be expensive for smaller users.
USM Anywhere offers scalable, affordable SIEM solutions ideal for SMBs, recommended for budget-conscious enterprises over costly competitors.
The license is reasonably priced, however, the VMs where we host the solution are extremely expensive, making the overall cost in the public cloud high.
Elastic Observability is cost-efficient and provides all features in the enterprise license without asset-based licensing.
Observability is actually cheaper compared to logs because you're not indexing huge blobs of text and trying to parse those.
The pricing is amazing and really cheap.
 

Valuable Features

Elastic Observability enhances incident response with powerful search, centralized logging, machine learning, and scalable integration for seamless monitoring and alerting.
USM Anywhere offers event correlation, vulnerability scanning, and centralized logging with customizable, user-friendly security monitoring for small teams.
The most valuable feature is the integrated platform that allows customers to start from observability and expand into other areas like security, EDR solutions, etc.
the most valued feature of Elastic is its log analytics capabilities.
All the features that we use, such as monitoring, dashboarding, reporting, the possibility of alerting, and the way we index the data, are important.
The 365-day block query is a major feature.
 

Categories and Ranking

Elastic Observability
Ranking in Log Management
14th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
28
Ranking in other categories
Application Performance Monitoring (APM) and Observability (7th), IT Infrastructure Monitoring (10th), Container Monitoring (4th), Cloud Monitoring Software (6th)
USM Anywhere
Ranking in Log Management
40th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Security Information and Event Management (SIEM) (29th), Endpoint Detection and Response (EDR) (53rd), Compliance Management (14th)
 

Mindshare comparison

As of October 2025, in the Log Management category, the mindshare of Elastic Observability is 1.3%, down from 1.9% compared to the previous year. The mindshare of USM Anywhere is 0.5%, down from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Market Share Distribution
ProductMarket Share (%)
Elastic Observability1.3%
USM Anywhere0.5%
Other98.2%
Log Management
 

Featured Reviews

Adelina Craciun - PeerSpot reviewer
Customization enables tailored monitoring and alerting across departments
The possibility to customize it has been quite useful. Whatever the other departments want to dream up, we implement. Whatever they want to monitor, the granularity of it, the changes in the threshold, and the anomalies that they want reported all require some development. So far, every single request has been fulfilled.
Kris Nawani - PeerSpot reviewer
Offers complete coverage without the need to install additional software
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
869,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
14%
Manufacturing Company
8%
Government
6%
Computer Software Company
16%
Comms Service Provider
11%
Financial Services Firm
7%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise16
By reviewers
Company SizeCount
Small Business64
Midsize Enterprise29
Large Enterprise25
 

Questions from the Community

What do you like most about Elastic Observability?
Elastic Observability significantly improves incident response time by providing quick access to logs and data across various sources. For instance, searching for specific keywords in logs spanning...
What is your experience regarding pricing and costs for Elastic Observability?
The problem is their licensing model, which is a bit confusing. Many customers struggle to understand their total cost of ownership because Elastic licensing is not dependent on easy, quantifiable ...
What needs improvement with Elastic Observability?
Out-of-the-box use cases have room for improvement in Elastic Observability. They don't invest a lot in building out-of-the-box observable use cases, and they are more focusing on giving a very fle...
What do you like most about AT&T AlienVault USM?
The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.
What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
 

Also Known As

No data available
AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
 

Overview

 

Sample Customers

PSCU, Entel, VITAS, Mimecast, Barrett Steel, Butterfield Bank
Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
Find out what your peers are saying about Elastic Observability vs. USM Anywhere and other solutions. Updated: September 2025.
869,760 professionals have used our research since 2012.