Try our new research platform with insights from 80,000+ expert users

Falcon LogScale vs NetWitness Platform comparison

CrowdStrike and NetWitness are both solutions in the Log Management category. CrowdStrike is ranked #32 with an average rating of 8.3, while NetWitness is ranked #22 with an average rating of 7.6. CrowdStrike holds a 0.6% mindshare in Log Management, compared to NetWitness’s 0.3% mindshare. Additionally, 100% of CrowdStrike users are willing to recommend the solution, compared to 75% of NetWitness users who would recommend it.
Falcon LogScale
Read 3 Falcon LogScale reviews
  • 998 Views
  • 774 Comparison Views
100% willing to recommend
NetWitness Platform
Read 37 NetWitness Platform reviews
  • 768 Views
  • 480 Comparison Views
75% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Oct 9, 2024

NetWitness Platform and Falcon LogScale are established competitors in the security market. Falcon LogScale seems to have the upper hand in features and functionality, while NetWitness Platform is preferred for pricing and customer support.

Features: NetWitness Platform is valued for its robust data collection and analysis capabilities, offering comprehensive insights. Users appreciate its ability to handle vast amounts of data efficiently. However, it is sometimes noted for challenging integration with existing systems. Falcon LogScale is recognized for its advanced analytics and ease of management, providing a competitive edge in functionality. Users praise its capability to deliver in-depth analysis swiftly and its intuitive interface that simplifies complex operations.

Room for Improvement: NetWitness Platform requires enhancements in scalability, as current limitations could affect large deployments. Users also suggest improvements in intuitive reporting and simplifying the overall user experience. Falcon LogScale users indicate a need for better documentation to assist in product understanding. Simplifying the onboarding process is another area where improvements are suggested, along with enhancing user guides to enable easier adoption.

Ease of Deployment and Customer Service: NetWitness Platform is reported to have a steep learning curve, which might extend deployment times. However, its customer service is commended for providing insightful support and resolving issues efficiently. Falcon LogScale allows quicker deployment due to its streamlined processes, though users note the need for improved responsiveness in customer service to address urgent queries and issues.

Pricing and ROI: NetWitness Platform is reviewed favorably for its cost-effectiveness. Users report that it offers significant ROI over time, justifying its pricing model. Falcon LogScale, while perceived as pricier, is considered a worthwhile investment due to its advanced features, which offer substantial long-term benefits and justify the initial expenditure.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Falcon LogScale vs. NetWitness Platform Report (Updated: April 2025).
Buyer's Guide
Falcon LogScale vs. NetWitness Platform
April 2025
Download the complete report
Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Falcon LogScale
Ranking in Log Management
32nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
3
Ranking in other categories
No ranking in other categories
NetWitness Platform
Ranking in Log Management
22nd
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
37
Ranking in other categories
Security Information and Event Management (SIEM) (22nd)
 

Mindshare comparison

As of May 2025, in the Log Management category, the mindshare of Falcon LogScale is 0.6%, up from 0.6% compared to the previous year. The mindshare of NetWitness Platform is 0.3%, down from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

Shaik Shaheer - PeerSpot reviewer
A highly commendable and robust solution offering powerful features and comprehensive log data management
It allows us to efficiently manage and store our data. Its compression and archiving features not only reduce storage costs but also minimize the infrastructure resources needed for data backup. Since we have multiple security solutions in place, it allows us to streamline data handling. We can selectively send security-related events to the SIEM while directing other non-security events from various tools to Falcon LogScale. This flexibility ensures that we have access to all the data we need when required, and we can easily export this data from it as necessary, optimizing our data management and making it readily available for analysis or other purposes.
Read full review
MdZaman - PeerSpot reviewer
Really scalable for enterprise customers
The solution should have more integration capabilities with different platforms. The API is nearly open and scalable, so the solution can integrate with many platforms. The solution has more than 200 log sources in the scalability to support, but this is its limit. Installation is pretty easy. However, there are a couple of modules involved, so it is not as easy as it could be. We are talking about a distributed module, not a single-module type. This is what makes things a bit complex, instead of easier. I rate it as a seven out of ten on its installation and configuration capabilities.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One of the key features is the fast search functionality, enabling us to get results within a few seconds."
"It offers the capability to view live log ingestion directly from the console which means you can seamlessly manage live log data ingestion alongside accessing and analyzing older data from the past."
"The fast search and index-free data retention are very valuable."
"NetWitness Platform is valuable for creating rules that the solution must detect."
"It's quite economical compared to other solutions in the market."
"The most valuable features are the packet inspection and the automated incident response."
"The most valuable feature is the hunting ability to work in a CERT."
"The product's initial setup phase was not at all difficult."
"The product has a user-friendly interface and a valuable feature for threat intelligence integration."
"The packet capture aspect of it is a valuable feature because it is quite different from a traditional SIEM solution that only carries out investigations based on captured logs."
"The most valuable features are its ingestion of logs and raising of alerts based on those logs."
More NetWitness Platform pros
 

Cons

"There are some overlapping features found in multiple tools."
"The price could be lower."
"The integration could improve."
"The product's licensing models are complex to understand. This particular area needs improvement."
"An area for improvement would be better automation and more inbuilt use cases."
"It should have a monitoring feature. It would help us analyze the current state of attacks faster from a single platform."
"There are instances where you try to run the reports and then it does not give you the desired outcome."
"Log aggregation is an issue with this solution because there are a huge number of alerts in a single instance."
"Nowadays, their support is a little subpar compared to other solutions. I rate RSA support six out of 10."
"The system looks like it is a mix of a bunch of different systems, and nothing looked like it was quite together."
"The implementation needs assistance."
More NetWitness Platform cons
 

Pricing and Cost Advice

Information not available
"The NetWitness Platform may be affordable only for enterprise-level customers, as it may not be within the budget of small and medium-sized businesses."
"We are on an annual license for the use of the solution."
"It is cheap."
"It provides tools to assist in selecting the appropriate license and usage scenarios."
"This is a pricey solution; it's not cheap."
"The product price was reasonable for my region and the market."
"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."
"It’s cheaper to run virtual machines in a VMware environment."
More NetWitness Platform pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
See recommendations
850,028 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
Read full review
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Manufacturing Company
13%
Financial Services Firm
13%
Government
7%
Computer Software Company
19%
Financial Services Firm
18%
Government
6%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Falcon LogScale?
It offers the capability to view live log ingestion directly from the console which means you can seamlessly manage live log data ingestion alongside accessing and analyzing older data from the past.
See all answers
What needs improvement with Falcon LogScale?
The integration could improve. Easy parser writing should be an option to ingest log in a human-readable format for unsupported devices. For visibility perspective, the dashboard should be more use...
See all answers
What is your primary use case for Falcon LogScale?
Initially, the log was for log management. We store our logs for achieving compliance and log retention for longer periods. This function, LogScale, is now a platform where we can do correlation as...
See all answers
What do you like most about NetWitness Platform?
The product's initial setup phase was not at all difficult.
See all answers
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
See all answers
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
See all answers
 

Comparisons

Elastic Stack vs Falcon LogScale Logo
Elastic Stack vs Falcon LogScale
Compared 41% of the time
Splunk Enterprise Security vs Falcon LogScale Logo
Splunk Enterprise Security vs Falcon LogScale
Compared 26% of the time
Grafana Loki vs Falcon LogScale Logo
Grafana Loki vs Falcon LogScale
Compared 11% of the time
Logsign Next-Gen SIEM vs Falcon LogScale Logo
Logsign Next-Gen SIEM vs Falcon LogScale
Compared 9% of the time
Datadog vs Falcon LogScale Logo
Datadog vs Falcon LogScale
Compared 7% of the time
More Falcon LogScale Competitors
Splunk Enterprise Security vs NetWitness Platform Logo
Splunk Enterprise Security vs NetWitness Platform
Compared 28% of the time
IBM Security QRadar vs NetWitness Platform Logo
IBM Security QRadar vs NetWitness Platform
Compared 18% of the time
Elastic Security vs NetWitness Platform Logo
Elastic Security vs NetWitness Platform
Compared 14% of the time
Trellix Network Detection and Response vs NetWitness Platform Logo
Trellix Network Detection and Response vs NetWitness Platform
Compared 11% of the time
RSA enVision vs NetWitness Platform Logo
RSA enVision vs NetWitness Platform
Compared 10% of the time
More NetWitness Platform Competitors
 

Product Reports

Buyer's Guide
Log Management
April 2025
Falcon LogScale reportDownload Falcon LogScale product report
Buyer's Guide
NetWitness Platform
April 2025
NetWitness Platform reportDownload NetWitness Platform product report
 

Also Known As

No data available
RSA Security Analytics
 

Overview

Falcon LogScale is a modern log management tool that offers robust features for organizations seeking efficient log analysis. It provides high-speed log ingestion and query capabilities, enabling detailed insights into system performance and security events.

Falcon LogScale provides an efficient way for IT teams to handle massive volumes of log data. Its architecture supports rapid ingestion and real-time querying, making it ideal for security and operational analytics. With customizable search capabilities, it allows deep analysis to detect anomalies and troubleshoot issues effectively. Users appreciate its scalability and performance-driven approach, making it suitable for large infrastructures.

What are the most important features of Falcon LogScale?

  • High-Speed Log Ingestion: Manages vast amounts of log data swiftly and efficiently.
  • Real-Time Querying: Enables quick analysis and insights into current data.
  • Scalability: Designed to grow with the expanding needs of large organizations.
  • Customizable Searching: Offers granular search options for precise data examination.

What benefits or ROI should be anticipated?

  • Enhanced Operational Efficiency: Streamlines log analysis processes.
  • Improved Security Posture: Identifies security threats quickly through powerful search and alert capabilities.
  • Cost-Effective Scaling: Offers scalable solutions that grow with business needs.
  • Time Savings: Reduces time spent on log data management and analysis.

Falcon LogScale is particularly beneficial in industries requiring detailed compliance reporting and real-time threat detection, such as finance and healthcare. It's implemented to support security operations and incident response teams by providing timely insights and operational efficiencies.

CrowdStrike

NetWitness Platform is an evolved SIEM and threat detection and response solution that functions as a single, unified platform for ALL your security data. It features an advanced analyst workbench for triaging alerts and incidents, and it orchestrates security operations programs end to end. In short: NetWitness Platform is all you need to run an intelligent SOC.

NetWitness
 

Sample Customers

Information Not Available
Los Angeles World Airports, Reply
Buyer's Guide
Falcon LogScale vs. NetWitness Platform
April 2025
Free Report: Falcon LogScale vs. NetWitness Platform
Find out what your peers are saying about Falcon LogScale vs. NetWitness Platform and other solutions. Updated: April 2025.
DOWNLOAD NOW
850,028 professionals have used our research since 2012.
See our Falcon LogScale vs. NetWitness Platform report.
See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.