Try our new research platform with insights from 80,000+ expert users

Falcon LogScale vs NetWitness Platform comparison

CrowdStrike and NetWitness are both solutions in the Log Management category. CrowdStrike is ranked #29 with an average rating of 8.3, while NetWitness is ranked #38 with an average rating of 8.0. CrowdStrike holds a 0.6% mindshare in Log Management, compared to NetWitness’s 0.3% mindshare. Additionally, 100% of CrowdStrike users are willing to recommend the solution, compared to 75% of NetWitness users who would recommend it.
Falcon LogScale
Read 3 Falcon LogScale reviews
  • 1,085 Views
  • 416 Comparison Views
100% willing to recommend
NetWitness Platform
Read 37 NetWitness Platform reviews
  • 733 Views
  • 114 Comparison Views
75% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Oct 9, 2024

NetWitness Platform and Falcon LogScale are established competitors in the security market. Falcon LogScale seems to have the upper hand in features and functionality, while NetWitness Platform is preferred for pricing and customer support.

Features: NetWitness Platform is valued for its robust data collection and analysis capabilities, offering comprehensive insights. Users appreciate its ability to handle vast amounts of data efficiently. However, it is sometimes noted for challenging integration with existing systems. Falcon LogScale is recognized for its advanced analytics and ease of management, providing a competitive edge in functionality. Users praise its capability to deliver in-depth analysis swiftly and its intuitive interface that simplifies complex operations.

Room for Improvement: NetWitness Platform requires enhancements in scalability, as current limitations could affect large deployments. Users also suggest improvements in intuitive reporting and simplifying the overall user experience. Falcon LogScale users indicate a need for better documentation to assist in product understanding. Simplifying the onboarding process is another area where improvements are suggested, along with enhancing user guides to enable easier adoption.

Ease of Deployment and Customer Service: NetWitness Platform is reported to have a steep learning curve, which might extend deployment times. However, its customer service is commended for providing insightful support and resolving issues efficiently. Falcon LogScale allows quicker deployment due to its streamlined processes, though users note the need for improved responsiveness in customer service to address urgent queries and issues.

Pricing and ROI: NetWitness Platform is reviewed favorably for its cost-effectiveness. Users report that it offers significant ROI over time, justifying its pricing model. Falcon LogScale, while perceived as pricier, is considered a worthwhile investment due to its advanced features, which offer substantial long-term benefits and justify the initial expenditure.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Falcon LogScale vs. NetWitness Platform Report (Updated: June 2025).
Buyer's Guide
Falcon LogScale vs. NetWitness Platform
June 2025
Download the complete report
Helped 859,129 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Falcon LogScale
Ranking in Log Management
29th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
3
Ranking in other categories
No ranking in other categories
NetWitness Platform
Ranking in Log Management
38th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
37
Ranking in other categories
Security Information and Event Management (SIEM) (29th)
 

Mindshare comparison

As of June 2025, in the Log Management category, the mindshare of Falcon LogScale is 0.6%, down from 0.6% compared to the previous year. The mindshare of NetWitness Platform is 0.3%, down from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

Shaik Shaheer - PeerSpot reviewer
A highly commendable and robust solution offering powerful features and comprehensive log data management
It allows us to efficiently manage and store our data. Its compression and archiving features not only reduce storage costs but also minimize the infrastructure resources needed for data backup. Since we have multiple security solutions in place, it allows us to streamline data handling. We can selectively send security-related events to the SIEM while directing other non-security events from various tools to Falcon LogScale. This flexibility ensures that we have access to all the data we need when required, and we can easily export this data from it as necessary, optimizing our data management and making it readily available for analysis or other purposes.
Read full review
MOTASHIM Al Razi - PeerSpot reviewer
It is a stable solution, but they should make the user interface easier to understand
The solution's initial setup takes work. We have to organize multiple paths and many features. The deployment process takes less than a week. But it takes a month to complete if we want to make the solution smarter by integrating it with various devices. I rate the process as a six out of ten.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One of the key features is the fast search functionality, enabling us to get results within a few seconds."
"The fast search and index-free data retention are very valuable."
"It offers the capability to view live log ingestion directly from the console which means you can seamlessly manage live log data ingestion alongside accessing and analyzing older data from the past."
"NetWitness Platform is valuable for creating rules that the solution must detect."
"The most valuable features are the packet inspection and the automated incident response."
"The most valuable features are the integration and ease of use."
"It's fully scalable. There is no limit. Of course, the license limits per day the number of terabytes. In my opinion, it's very flexible."
"The product's initial setup phase was not at all difficult."
"NetWitness Platform offers flexibility for deployment and robust integration capabilities."
"The most valuable feature of RSA NetWitness Logs and Packets are the alerts and correlations tools."
"It gives the ability to investigate into network traffic in the Net and the organization what we couldn't do before."
More NetWitness Platform pros
 

Cons

"There are some overlapping features found in multiple tools."
"The integration could improve."
"The price could be lower."
"Nowadays, their support is a little subpar compared to other solutions. I rate RSA support six out of 10."
"It should have a monitoring feature. It would help us analyze the current state of attacks faster from a single platform."
"The solution should have more integration capabilities with different platforms."
"The system looks like it is a mix of a bunch of different systems, and nothing looked like it was quite together."
"Its technical support could be better."
"There is no support for this product in this country, so problems have to be resolved through global technical teams."
"Health monitoring of the event sources and devices."
"The system architecture is complex and sometimes it’s hard to troubleshoot potential problems."
More NetWitness Platform cons
 

Pricing and Cost Advice

Information not available
"The product is expensive."
"RSA NetWitness Logs and Packets do not have a subscription model, it's a one-time purchase. There is only a perpetual license."
"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."
"It is cheap."
"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."
"The licenses are good but the cost is very expensive."
"This is a pricey solution; it's not cheap."
"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
More NetWitness Platform pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
See recommendations
859,129 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
Read full review
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Manufacturing Company
13%
Financial Services Firm
12%
Government
7%
Computer Software Company
18%
Financial Services Firm
18%
Government
5%
Manufacturing Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Falcon LogScale?
It offers the capability to view live log ingestion directly from the console which means you can seamlessly manage live log data ingestion alongside accessing and analyzing older data from the past.
See all answers
What needs improvement with Falcon LogScale?
The integration could improve. Easy parser writing should be an option to ingest log in a human-readable format for unsupported devices. For visibility perspective, the dashboard should be more use...
See all answers
What is your primary use case for Falcon LogScale?
Initially, the log was for log management. We store our logs for achieving compliance and log retention for longer periods. This function, LogScale, is now a platform where we can do correlation as...
See all answers
What do you like most about NetWitness Platform?
The product's initial setup phase was not at all difficult.
See all answers
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
See all answers
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
See all answers
 

Comparisons

Elastic Stack vs Falcon LogScale Logo
Elastic Stack vs Falcon LogScale
Compared 34% of the time
Splunk Enterprise Security vs Falcon LogScale Logo
Splunk Enterprise Security vs Falcon LogScale
Compared 22% of the time
Grafana Loki vs Falcon LogScale Logo
Grafana Loki vs Falcon LogScale
Compared 10% of the time
Logsign Next-Gen SIEM vs Falcon LogScale Logo
Logsign Next-Gen SIEM vs Falcon LogScale
Compared 8% of the time
Datadog vs Falcon LogScale Logo
Datadog vs Falcon LogScale
Compared 7% of the time
More Falcon LogScale Competitors
Splunk Enterprise Security vs NetWitness Platform Logo
Splunk Enterprise Security vs NetWitness Platform
Compared 22% of the time
IBM Security QRadar vs NetWitness Platform Logo
IBM Security QRadar vs NetWitness Platform
Compared 19% of the time
Elastic Security vs NetWitness Platform Logo
Elastic Security vs NetWitness Platform
Compared 13% of the time
RSA enVision vs NetWitness Platform Logo
RSA enVision vs NetWitness Platform
Compared 10% of the time
Trellix Network Detection and Response vs NetWitness Platform Logo
Trellix Network Detection and Response vs NetWitness Platform
Compared 8% of the time
More NetWitness Platform Competitors
 

Product Reports

Buyer's Guide
Log Management
May 2025
Falcon LogScale reportDownload Falcon LogScale product report
Buyer's Guide
NetWitness Platform
June 2025
NetWitness Platform reportDownload NetWitness Platform product report
 

Also Known As

No data available
RSA Security Analytics
 

Overview

Falcon LogScale is a modern log management tool that offers robust features for organizations seeking efficient log analysis. It provides high-speed log ingestion and query capabilities, enabling detailed insights into system performance and security events.

Falcon LogScale provides an efficient way for IT teams to handle massive volumes of log data. Its architecture supports rapid ingestion and real-time querying, making it ideal for security and operational analytics. With customizable search capabilities, it allows deep analysis to detect anomalies and troubleshoot issues effectively. Users appreciate its scalability and performance-driven approach, making it suitable for large infrastructures.

What are the most important features of Falcon LogScale?

  • High-Speed Log Ingestion: Manages vast amounts of log data swiftly and efficiently.
  • Real-Time Querying: Enables quick analysis and insights into current data.
  • Scalability: Designed to grow with the expanding needs of large organizations.
  • Customizable Searching: Offers granular search options for precise data examination.

What benefits or ROI should be anticipated?

  • Enhanced Operational Efficiency: Streamlines log analysis processes.
  • Improved Security Posture: Identifies security threats quickly through powerful search and alert capabilities.
  • Cost-Effective Scaling: Offers scalable solutions that grow with business needs.
  • Time Savings: Reduces time spent on log data management and analysis.

Falcon LogScale is particularly beneficial in industries requiring detailed compliance reporting and real-time threat detection, such as finance and healthcare. It's implemented to support security operations and incident response teams by providing timely insights and operational efficiencies.

CrowdStrike

NetWitness Platform is an evolved SIEM and threat detection and response solution that functions as a single, unified platform for ALL your security data. It features an advanced analyst workbench for triaging alerts and incidents, and it orchestrates security operations programs end to end. In short: NetWitness Platform is all you need to run an intelligent SOC.

NetWitness
 

Sample Customers

Information Not Available
Los Angeles World Airports, Reply
Buyer's Guide
Falcon LogScale vs. NetWitness Platform
June 2025
Free Report: Falcon LogScale vs. NetWitness Platform
Find out what your peers are saying about Falcon LogScale vs. NetWitness Platform and other solutions. Updated: June 2025.
DOWNLOAD NOW
859,129 professionals have used our research since 2012.
See our Falcon LogScale vs. NetWitness Platform report.
See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.