Try our new research platform with insights from 80,000+ expert users

Elastic Security vs Netwrix Auditor comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Elastic Security
Ranking in Security Information and Event Management (SIEM)
5th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
65
Ranking in other categories
Log Management (11th), Endpoint Detection and Response (EDR) (17th), Security Orchestration Automation and Response (SOAR) (7th), Extended Detection and Response (XDR) (9th)
Netwrix Auditor
Ranking in Security Information and Event Management (SIEM)
27th
Average Rating
9.2
Reviews Sentiment
7.2
Number of Reviews
8
Ranking in other categories
GRC (11th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (16th), Active Directory Management (3rd)
 

Mindshare comparison

As of October 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Elastic Security is 4.9%, down from 8.0% compared to the previous year. The mindshare of Netwrix Auditor is 0.6%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Elastic Security4.9%
Netwrix Auditor0.6%
Other94.5%
Security Information and Event Management (SIEM)
 

Featured Reviews

SyedAli17 - PeerSpot reviewer
Centralized monitoring improves security posture through rapid data processing
The processing part of Elastic Security is very interesting for us since we handle almost 7,000 to 8,000 alerts per minute. We require rapid processing speed for alerts and event data, and Elastic Security is very efficient at handling this level of data. Additionally, Elastic Security helps improve the security posture of Pakistan through centralized visibility and real-time processing.
RishiPandit - PeerSpot reviewer
Optimizing time and effort through comprehensive auditing features
Netwrix Auditor doesn't have many competitors at the level in which it is placed. All other companies provide auditing solutions but not up to the feature list; it is very broad and robust. The best features include flexibility to interact directly with MS-SQL. Real-time alerts help identify potential security threats. The ability to streamline audits with insights into configuration states is helpful, as the access reviews and audit reports are really insightful. This is a good tool. The search functionality is available, but comparative to other vendors, this is a bit slower. Reports are effective; the compliance reports and all the reports are very insightful. That is good.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The cost is reasonable. It's not overly pricey."
"We've found the initial setup to be quite straightforward."
"The most valuable features of the solution are the prevention methods and the incident alerts."
"We like Elastic Security because it's a REST API-based solution. That's the primary reason we use it."
"Elastic Security is cost-effective compared to Defender and CrowdStrike."
"The most valuable thing is that this solution is widely used for work management and research. It's easy to jump into the security use case with the same technology."
"What customers found most valuable in Elastic Security feature-wise is the search capability, in particular, the way of writing the search query and the speed of searching for results."
"Elastic Security is a highly flexible platform that can be implemented anywhere."
"I have found user behavior analysis and the ability to run risk assessments important features. Additionally, the interface and online documentation are very good."
"The most valuable feature is the real-time monitoring."
"Netwrix provides features that no other solution on the market does."
"I am impressed with the tool's reporting feature and notifications."
"Netwrix Auditor doesn't have many competitors at the level in which it is placed; all other companies provide auditing solutions but not up to the feature list—it is very broad and robust."
"What I find the most valuable about Netwrix Auditor is the way it shows risk. The reports are very clear."
"The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities."
"It maintains audit logs for the duration of time that you wish, as long as you have the storage capacity to do so."
 

Cons

"We'd like to see some more artificial intelligence capabilities."
"Elastic Security has a steep learning curve, so it takes some time to tune it and set it up for your environment. There are some costs associated with logging things that don't have value. So you need to be cautious to only log things that make sense and keep them around for as long as you need. You shouldn't hold onto things just because you think you might need them."
"The initial configuration and setup are complicated and not straightforward."
"The Integration module could be improved. It is a pain to build integration with any product. We have to do parking and so on. It's not like other commercial solutions that use profile integration. I would also see more detection features on the SIEM side."
"If you compare this with CrowdStrike or Carbon Black, they can improve."
"Authentication is not a default in Kibana. We need to have another tool to have authentication and authorization. These two should be part of Kibana."
"Better integration with third-party APMs would be really good."
"The problem with ELK is it's difficult to administer. When you have a problem, it can be very, very difficult to rebuild indexes."
"There is room for improvement with the introduction of AI functionality."
"The solution lacks self-service on password reset. It also needs to improve its scalability."
"I expect usability features to become more refined over time. I'm interested to see how it evolves and continues to improve."
"The Linux compatibility of this solution could be improved."
"An improvement would be if there was an another way to manage the logs besides email because it's not so practical."
"In the UI, we have to adjust and resize our console many times, and sometimes it appears, sometimes you have to close and open it, and sometimes it does not give a scroll bar to navigate."
"There is room for improvements when it comes to the licensing."
"When there are issues I would like remediation to be in one place."
 

Pricing and Cost Advice

"It's a monthly cost with Elastic SIEM, but I am not sure of the exact cost."
"It is easy to deploy, easy to use, and you get everything you need to become operational with it, and have nothing further to pay unless you want the OLED plugin."
"We use the open-source version, so there is no charge for this solution."
"Its price is fine. Its licensing works on a yearly basis. We have to renew the license every year. I also have a good experience with Darktrace. When we buy Darktrace, we get training free of cost, which is not there in Elastic. We have to pay extra for training. There is certainly room for improvement."
"The product offers an amazing pricing structure. Price-wise, the product is very competitive."
"I can say that the product is cheaply priced."
"Affordable but with additional costs"
"This is an open-source product, so there are no costs."
"This solution is reasonably priced. I would rate it a nine out of ten."
"There is a license for this solution and we are on an annual license. The price is reasonable."
"The tool's price is fair."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
869,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Government
10%
Comms Service Provider
8%
Financial Services Firm
7%
Financial Services Firm
12%
Manufacturing Company
9%
Government
8%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business40
Midsize Enterprise11
Large Enterprise14
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise4
 

Questions from the Community

Datadog vs ELK: which one is good in terms of performance, cost and efficiency?
With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several times lately using the dashboards we have created with Datadog; they are very good c...
What do you like most about Elastic Security?
Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it contains critical information. The reverse index allows fast data indexing because ...
What is your experience regarding pricing and costs for Elastic Security?
I am satisfied with the pricing, setup cost, and licensing cost. It is a pure 10.
What do you like most about Netwrix Auditor?
The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities.
What is your experience regarding pricing and costs for Netwrix Auditor?
I don't know about the pricing of this, but it is good at this price point because our organization has purchased it, which means it was in budget. We usually do not buy expensive solutions, so the...
What needs improvement with Netwrix Auditor?
The areas of improvement include the front end, as the UI should be more intuitive and there should be fewer bugs. In the UI, we have to adjust and resize our console many times, and sometimes it a...
 

Also Known As

Elastic SIEM, ELK Logstash
No data available
 

Overview

 

Sample Customers

Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care
AT&T, SanDisk, Siemens, Verizon, Electrolux, Allianz, Societe Generale
Find out what your peers are saying about Elastic Security vs. Netwrix Auditor and other solutions. Updated: September 2025.
869,760 professionals have used our research since 2012.