Try our new research platform with insights from 80,000+ expert users

Elastic Security vs Microsoft Purview Audit comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Elastic Security
Ranking in Log Management
11th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
65
Ranking in other categories
Security Information and Event Management (SIEM) (5th), Endpoint Detection and Response (EDR) (17th), Security Orchestration Automation and Response (SOAR) (7th), Extended Detection and Response (XDR) (9th)
Microsoft Purview Audit
Ranking in Log Management
36th
Average Rating
8.0
Reviews Sentiment
5.1
Number of Reviews
3
Ranking in other categories
Microsoft Security Suite (31st)
 

Mindshare comparison

As of October 2025, in the Log Management category, the mindshare of Elastic Security is 2.9%, down from 5.0% compared to the previous year. The mindshare of Microsoft Purview Audit is 0.5%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Market Share Distribution
ProductMarket Share (%)
Elastic Security2.9%
Microsoft Purview Audit0.5%
Other96.6%
Log Management
 

Featured Reviews

SyedAli17 - PeerSpot reviewer
Centralized monitoring improves security posture through rapid data processing
The processing part of Elastic Security is very interesting for us since we handle almost 7,000 to 8,000 alerts per minute. We require rapid processing speed for alerts and event data, and Elastic Security is very efficient at handling this level of data. Additionally, Elastic Security helps improve the security posture of Pakistan through centralized visibility and real-time processing.
Matthew Hoerig - PeerSpot reviewer
Audit function refines log retrieval and drives application assessments with evolving features
From a service assessment and authorization process perspective, when conducting an assessment on an application or system, we use controls essentially equivalent to the NIST 800-53 framework. This includes examining audit logs, data quality, and various KPIs required for log configuration. It factors into our application assessments. When producing documentation packages for application or system authorization, audit logging and monitoring are crucial parts of the assessment process. The evidence we gather includes screenshots and outputs from these tools and capabilities. For Microsoft Purview Audit specifically, we provide examples of audit function configuration and log output details, which are incorporated into our evidence documents.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable thing is that this solution is widely used for work management and research. It's easy to jump into the security use case with the same technology."
"The scalability is good. It can be scaled easily in the production environment."
"We chose the product based on the ability to scan for malware using a malware behavioral model as opposed to just a traditional hash-based antivirus. Therefore, it's not as intensive."
"The most valuable feature of Elastic Security is that you can install agents, and they are not separately licensed."
"It's not very complicated to install Elastic."
"I like the indexing of the logs."
"Its flexibility is most valuable. We can have a number of scenarios, and we can get logs from anything. If we know how to use Logstash, we can tweak it in many ways. This makes the logging search on Elastic very easy."
"The solution is quite stable. The performance has been good."
"The overall user experience with Microsoft Purview Audit is of higher quality than when it was branded as Compliance Center, and Microsoft consistently updates and evolves functionalities and the overall experience."
"The platform has significantly enhanced our operational insight into the overall Microsoft 365 environment."
"We're easily saving at least one hour per day using this solution."
 

Cons

"Upgrades currently released as stacks when it should be a plugin or an extension to save removal and reinstallation."
"The problem with ELK is it's difficult to administer. When you have a problem, it can be very, very difficult to rebuild indexes."
"The training that is offered for Elastic is in need of improvement because there is no depth to it."
"Installation is a little bit overwhelming, so improvements on the installation site could make it easier."
"The solution should generate an automatic product that integrates with ELK Stack to use artificial intelligence."
"We set up a cron job to delete old logs so that we wouldn't hit a disk space issue. Such a feature should be available in the UI, where old logs can be deleted automatically. (Don’t know if this feature is already there)."
"The setup process is complex. You need a solid working knowledge of networking, operating systems, and a little programming."
"Elastic Security can be a bit difficult to use if a person only has experience in SMBs with tools like Zoho. The product can also be difficult for those who have never dealt with query language."
"We do have a Denial of Access happening."
"We are still in the early stages of leveraging Microsoft Purview Audit. Currently, it's primarily used for the audit function."
"Areas for product improvement include enhancing customization options and integrating more comprehensive compliance features."
 

Pricing and Cost Advice

"The price is reasonable. It probably costs the same as ArcSight and LogRhythm SIEM. FortiSIEM might cost less than Elastic Security. There are no hidden or additional costs."
"The pricing is in the middle. I think it is not an expensive experience if we compare it with big names, for example, QRadar, and also Oxide. I think Elastic Security is quite cheap. I would rate the pricing of this solution a five out of ten."
"Its price is fine. Its licensing works on a yearly basis. We have to renew the license every year. I also have a good experience with Darktrace. When we buy Darktrace, we get training free of cost, which is not there in Elastic. We have to pay extra for training. There is certainly room for improvement."
"The product offers an amazing pricing structure. Price-wise, the product is very competitive."
"The solution is free."
"We use the open-source version, so there is no charge for this solution."
"When compared to other products, the price is average or on the low side."
"Compared to other tools, Elastic Security is a cheaper solution."
Information not available
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
869,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Government
10%
Comms Service Provider
8%
Financial Services Firm
7%
Financial Services Firm
16%
Computer Software Company
14%
Educational Organization
6%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business40
Midsize Enterprise11
Large Enterprise14
No data available
 

Questions from the Community

Datadog vs ELK: which one is good in terms of performance, cost and efficiency?
With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several times lately using the dashboards we have created with Datadog; they are very good c...
What do you like most about Elastic Security?
Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it contains critical information. The reverse index allows fast data indexing because ...
What is your experience regarding pricing and costs for Elastic Security?
I am satisfied with the pricing, setup cost, and licensing cost. It is a pure 10.
What needs improvement with Microsoft Purview Audit?
Areas for product improvement include enhancing customization options and integrating more comprehensive compliance features.
What is your primary use case for Microsoft Purview Audit?
We utilize Microsoft Purview Audit for monitoring security and compliance aspects.
 

Also Known As

Elastic SIEM, ELK Logstash
No data available
 

Overview

 

Sample Customers

Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care
Information Not Available
Find out what your peers are saying about Elastic Security vs. Microsoft Purview Audit and other solutions. Updated: September 2025.
869,760 professionals have used our research since 2012.