Try our new research platform with insights from 80,000+ expert users

Elastic Stack vs USM Anywhere comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Elastic Stack
Ranking in Log Management
9th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
17
Ranking in other categories
No ranking in other categories
USM Anywhere
Ranking in Log Management
46th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Security Information and Event Management (SIEM) (31st), Endpoint Detection and Response (EDR) (52nd), Compliance Management (13th)
 

Mindshare comparison

As of July 2025, in the Log Management category, the mindshare of Elastic Stack is 5.4%, up from 1.9% compared to the previous year. The mindshare of USM Anywhere is 0.4%, down from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

Balamurali P - PeerSpot reviewer
Advanced query capabilities enhance monitoring effectiveness
Elastic Stack should be more simplified with ready-to-use widgets. Also, incorporating AI capabilities is essential as monitoring and observability tools are now adding AI features. Ideally, it should evolve into a full-stack observability tool, similar to AppDynamics or DynaTrace, which offers a solution that includes ISP provider, API monitoring, and infrastructure monitoring.
Kris Nawani - PeerSpot reviewer
Offers complete coverage without the need to install additional software
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a very scalable solution...I didn't face any problem with this scalability part of the solution since we only have a few pieces of equipment in our company."
"The solution's technical support is good...Elastic Stack offers good value for value for money based on the product's features and what they offer."
"The tool's most powerful aspect is its search engine capability. It's a highly effective and powerful solution for searching. We use it in professional and student projects at universities, and it delivers promising results."
"The only beneficial aspect of Elastic Stack is that it's open source."
"The detection rules in Elastic Stack are the most valuable feature. The search capabilities are excellent and fast. As we collect logs from workstations and devices, the detection rules run on top of the logs and detect any suspicious activity, raising alerts accordingly. Integration with Elastic Stack depends on the specific integration. Elastic provides some bridging integrations that make it easy, but require custom integration. Most integrations are simple, but customization can be challenging because we need to do some parsing. There's something called Elastic Common Schema, and we need to parse the source logs to match this schema, which can be a bit challenging."
"The tool is huge, and it performs brilliantly. I tested it for malware, and within two weeks of launching, the product alerted me about a network intrusion. This was a tough test for it, but it performed admirably. The alerting system is excellent, and searching through logs is incredibly efficient. What's impressive is that all three products or options are integrated into one solution. This means I don't need separate logging, monitoring, or antivirus solutions."
"I have experienced a return on investment from the use of the solution."
"I think the ecosystem is well supported, and for logs, it was faster compared to our previous previous log management."
"The vulnerability manager and the file integration are very good."
"The IDS and the threat intelligence are very useful. They are very intuitive and data-rich."
"Our main focus was intrusion detection, alerts, and correlation. It's easy to use AlienVault and integrate it with other alert tools because it includes lots of connectors. Either the tool is already there, or AlienVault will write an API for us if they don't have a connector for the solution that is providing the logs."
"Using the communication within the security device, it is easier to create plugins."
"The ease of implementation is the most valuable feature."
"The most valuable feature is vulnerability management because it gives you insight into your environment to know what systems need to be updated or patched."
"The other big selling feature for us was its integration capabilities with all the other security-based products."
"The dashboards are very descriptive and contain just the right amount of information. The activity alarms and events contain a plethora of data that is very descriptive and useful."
 

Cons

"Agent deployment is a little tough in the on-premise version."
"Elastic Stack should be more simplified with ready-to-use widgets. Also, incorporating AI capabilities is essential as monitoring and observability tools are now adding AI features."
"Improvements are needed in the solution in areas like SOAR and TIP, where there are certain shortcomings."
"Elastic Stack's search capabilities can be challenging, especially when searching for precise data from past years, such as two or ten years ago. Its indexing performance for exact data retrieval may decrease as the data volume grows. Therefore, I believe there is room for improvement in the product's search functionality. It needs to improve its pricing as well."
"Elastic Stack should be more simplified with ready-to-use widgets."
"When people try to move the data from another source to Elastic Stack for visualization, they face challenges when connecting to Elastic Stack from such different sources."
"The tool's pricing can be improved."
"It should facilitate easier manual integration."
"The vulnerability scanning feature is one of the areas where the product has certain shortcomings and needs to improve. The tool has vulnerability scanning, but it is not that efficient."
"The price of AT&T AlienVault USM could be reduced."
"I'd like to see a dashboard that's a little more descriptive."
"We've had some stability problems, not a lot, but a few. Updates seem to be the worst. That seems to be when the stability problems come up."
"It was easy on PoC, but when we got to the product it was different story. We had to learn the product again and got feeling that the PoC was a different product."
"Maybe logs are the problem, as the database query is too slow. If you want to search something, you need time to find it."
"The lack of mature functionality and expertise in any of those areas is a strong negative."
"Windows log collection works with HIDS, but documentation is sparse and confusing."
 

Pricing and Cost Advice

"Ultimately, the pricing depends upon the capacity planning that the enterprise architect does."
"The product is expensive."
"I used the open-source version of Elastic Stack, because of which I did not have to pay anything."
"The pricing is reasonable."
"If I compare Elastic Stack to the other products in the market, I would say that the tool is available at a competitive price."
"It depends on the specifics, but generally, Elastic is economical for certain use cases."
"I rate the solution's pricing a six out of ten."
"We are using the open-source community version of the product."
"​The price point is good.​"
"We pay around $12,000 a year including storage."
"I don't think the product's pricing is a good value because they try to raise the price 50 percent every year... AlienVault needs to understand that not all customers are huge enterprises... Their sales team is way too aggressive. The price they advertise is not always the price you get."
"​The vulnerability management solution is worse than buying a Nessus Professional license.​"
"AT&T AlienVault USM is an expensive solution and we pay for the license and the support separately. We paid for the license and support for three years."
"Its price is in the medium to upper range."
"The price of this solution is reasonable, which is one of the reasons why we selected it over other solutions."
"AlienVault is flexible on their pricing for unlimited licenses."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
861,524 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
10%
Government
9%
Comms Service Provider
8%
Computer Software Company
19%
Financial Services Firm
10%
Comms Service Provider
9%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Elastic Stack?
The tool is huge, and it performs brilliantly. I tested it for malware, and within two weeks of launching, the product alerted me about a network intrusion. This was a tough test for it, but it per...
What is your experience regarding pricing and costs for Elastic Stack?
My experience with Elastic Stack pricing indicates that it is node-based. While I do not have complete pricing details, they are available online. If I choose Elastic Cloud, it includes licensing a...
What needs improvement with Elastic Stack?
There are improvements needed for Elastic Stack. It is mostly based on Lucene, and the heart of Elastic Stack is Lucene, which has some limitations. Anything built on top of Lucene often feels an a...
What do you like most about AT&T AlienVault USM?
The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.
What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
 

Comparisons

 

Also Known As

No data available
AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
 

Overview

 

Sample Customers

Information Not Available
Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
Find out what your peers are saying about Elastic Stack vs. USM Anywhere and other solutions. Updated: July 2025.
861,524 professionals have used our research since 2012.