No more typing reviews! Try our Samantha, our new voice AI agent.

Falcon LogScale vs IBM SevOne Network Performance Management (NPM) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Falcon LogScale
Ranking in Log Management
17th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
9
Ranking in other categories
No ranking in other categories
IBM SevOne Network Performa...
Ranking in Log Management
41st
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
54
Ranking in other categories
Network Monitoring Software (39th), Server Monitoring (17th), IT Infrastructure Monitoring (42nd), Cloud Monitoring Software (31st)
 

Mindshare comparison

As of April 2026, in the Log Management category, the mindshare of Falcon LogScale is 0.8%, up from 0.6% compared to the previous year. The mindshare of IBM SevOne Network Performance Management (NPM) is 1.0%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Falcon LogScale0.8%
IBM SevOne Network Performance Management (NPM)1.0%
Other98.2%
Log Management
 

Featured Reviews

Oluwajuwon Olorunlona - PeerSpot reviewer
Cyber Security Engineer at eprocessconsulting
Advanced threat hunting has improved visibility and has simplified custom query automation
CrowdStrike is ahead of the game. If I may say anything about Falcon LogScale to improve the services, I would talk about the way you develop parsers. The documentation should be more straightforward. It is not easy to quickly find the documentation, especially if you are using CrowdStrike. Most customers use Falcon LogScale because of CrowdStrike. The documentation of Falcon LogScale is not on the CrowdStrike portal just like the rest of Falcon documentation. I usually find that the main Falcon LogScale documentation is found on the Falcon LogScale website itself. I think there should be a link or direct documentation within the CrowdStrike pages. It is not necessarily a fault. If you find where the documentation resides, you can trace it to what they are doing. However, for the ease of use for Falcon administrators, the same documentation on the Falcon LogScale portal should be on the CrowdStrike dashboard.
Grzegorz Nowak - PeerSpot reviewer
Solution Architect at Wingu
Improves infrastructure planning by helping us analyze network traffic
We use SevOne to collect and report on network flows SevOne improves infrastructure planning by helping us analyze network traffic. We can look at bandwidth for specific endpoints on the customer's network and analyze traffic to identify issues. For example, maybe some connectors are unavailable.…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The biggest advantages of Falcon LogScale are the speed at which the queries return to you and the ease of use."
"Falcon LogScale stores logs without heavy indexing and searches directly, making it very fast."
"The fast search and index-free data retention are very valuable."
"Falcon LogScale's insights give you a lot of information that an expert already thought would be valuable for you."
"One of the key features is the fast search functionality, enabling us to get results within a few seconds."
"Falcon LogScale offers excellent features, with scalability being the most notable, and the search speed stands out to me as particularly good."
"I have only heard the best about CrowdStrike's support."
"Falcon LogScale seems to be a better option with better visibility when it comes to the dashboard and the kill chain process, including the attack surface."
"SevOne excels at gathering performance metrics and then making them quickly accessible in ways that I want to view them."
"The comprehensiveness of this solution's collection of network performance and flow data is one of the basics in the field for what it does. It meets all of our needs. So for all those areas, for the most straightforward collection capabilities, right up to NetFlow and even telemetry, it meets all those demands. Not only just basic or fundamental SNMP collection capability, but the product also supports what we need for the future with telemetry streaming. So it's very comprehensive."
"SevOne’s data collection functionality is very good. From a collection point of view, we pull SNMP data, which is simple. It is easy to manipulate the pull in the estate. It is really simple compared to some of the other products that we have used. However, for deferred data, i.e., things that we import or don't pull directly, we tend to have a preplanned integration. So, its Universal Collector is really useful."
"Scalability. I have never had to worry about how to handle really big environments."
"The modules and the performance management reports that come with data insights are two of the most valuable features. I also find the reports for Wi-Fi, Netflow, LAN, and WAN for monitoring to be very good."
"Fantastic – for money laid out vs. what you’re getting back, it's been great."
"In 90% of the cases, new devices are plug-and-play, so when a new version comes out then SevOne has support for it out of the box."
"The modules and the performance management reports that come with data insights are two of the most valuable features."
 

Cons

"One area of Falcon LogScale that I think could be improved is that it is a bit complex."
"The integration could improve."
"The price could be lower."
"That is a difficult question regarding Falcon LogScale. That is really a question for the professionals, and I am not a professional, so I do not know."
"KQL is a bit challenging for us."
"CrowdStrike support is not good."
"One more point about areas for improvement is the visualization depth. Splunk, which I used, has very good visualization compared to Falcon LogScale."
"There are some overlapping features found in multiple tools."
"The GUI: both the dashboard/user view and the admin tool."
"We previously have had discussions on some reporting enhancements. So, we raised a feature request, which was delivered from SevOne."
"I would like to see live maps as an added feature. Also, build modules on AI and EML to provide better data insights that would proactively tell us what we should be looking after."
"The one area with room for improvement is probably administration. They added data insights to make a better user experience, but I'd like to see some improvements in the way the system's administered."
"Continual UI improvements are needed to reduce number of clicks needed to produce a chart."
"It needs a platform to add portals."
"Software upgrades can be tricky is not easy."
"With the administrative management of the appliance, if some object appears from SevOne because something changed in the network or whatever, then as an administrator you will not be aware. If you are using this object in a report, this object will disappear from the report and you will not be aware of it. So, if you have 1,000 reports, you cannot always check these reports everyday to see if objects are missing or information has disappeared. We don't have any information on alerts, saying that something is happening there and maybe we need to take action. If an object was replaced by another one, or if a link was replaced by another one, then the graph needs to be changed because it doesn't exist in the graph anymore. However, we don't have this information."
 

Pricing and Cost Advice

Information not available
"A blocking point is the high upfront cost because it is challenging to get it accepted and the purchase approved."
"It is inexpensive compared to other monitoring tools."
"Prices per license are not huge, but they exist."
"The tool is not expensive. We were able to negotiate with SevOne on pricing."
"Although I don't have exact details in terms of cost, my experience has been that SevOne is willing to make a deal with the customer."
"Choose a SevOne partner who can provide SevOne as a service and can deliver professional services and maintenance."
"For the value that you get from SevOne, it's worth the price. There are a lot of cheaper alternatives on the market, and even free options. But they require more staff, more resources, and engineers with more advanced knowledge of monitoring. That's what makes SevOne worth the price."
"There are cheaper solutions available."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
886,719 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Manufacturing Company
11%
Comms Service Provider
7%
Healthcare Company
7%
Financial Services Firm
13%
Manufacturing Company
12%
Construction Company
10%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise2
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise6
Large Enterprise45
 

Questions from the Community

What needs improvement with Falcon LogScale?
CrowdStrike is ahead of the game. If I may say anything about Falcon LogScale to improve the services, I would talk about the way you develop parsers. The documentation should be more straightforwa...
What is your primary use case for Falcon LogScale?
I primarily use CrowdStrike, along with some other solutions. I have been using Falcon LogScale for approximately a year now.I like Falcon LogScale for threat hunting primarily. I use it to make qu...
What advice do you have for others considering Falcon LogScale?
I am also involved with Airlock and sometimes use Airlock application control too. One of the requirements is to have a SIEM. For you to be able to have visibility into everything going on in your ...
What needs improvement with SevOne Network Data Platform?
There is room for improvement in the integration with different vendors and the reporting capabilities. It would be beneficial to have out-of-the-box integration with third-party vendors and improv...
What is your primary use case for SevOne Network Data Platform?
The primary use case of IBM SevOne Network Performance Management (NPM) ( /products/ibm-sevone-network-performance-management-npm-reviews ) is network monitoring. It helps to maintain the infrastru...
What advice do you have for others considering SevOne Network Data Platform?
To compete with custom-built tools, IBM SevOne Network Performance Management (NPM) should accommodate the desired features and be timely in the delivery of feature updates. I would rate the overal...
 

Also Known As

No data available
SevOne
 

Overview

 

Sample Customers

Information Not Available
ATOS, Devereux, Spark New Zealand, Access4, Rogers Communication, Lumen (formerly known as CenturyLink)
Find out what your peers are saying about Falcon LogScale vs. IBM SevOne Network Performance Management (NPM) and other solutions. Updated: April 2026.
886,719 professionals have used our research since 2012.