No more typing reviews! Try our Samantha, our new voice AI agent.

Fortinet FortiAnalyzer vs Logstash comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiAnalyzer
Ranking in Log Management
8th
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
108
Ranking in other categories
No ranking in other categories
Logstash
Ranking in Log Management
29th
Average Rating
9.0
Reviews Sentiment
5.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Log Management category, the mindshare of Fortinet FortiAnalyzer is 1.4%, down from 1.9% compared to the previous year. The mindshare of Logstash is 0.8%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Fortinet FortiAnalyzer1.4%
Logstash0.8%
Other97.8%
Log Management
 

Featured Reviews

Amarnath Jaiswal - PeerSpot reviewer
Senior Manager at a manufacturing company with 501-1,000 employees
Comprehensive log analysis has improved traffic monitoring and streamlined risk mitigation
Fortinet FortiAnalyzer is a very comprehensive analyzer providing detailed analyzing features and customizable reports. I can get customization and custom reports, and there are many functions available. It is very good for any organization.Log management in Fortinet FortiAnalyzer is excellent, as it stores approximately two years of logs. Using Fortinet FortiAnalyzer, I analyze vulnerability risks and threats and sort out problems accordingly. I then create policies and mitigate the risk based on my findings. I have created many customizable reports in Fortinet FortiAnalyzer. I have customized the reports to schedule them and generate reports every day that are sent to my email. I am not using any SIEMs, but Fortinet FortiAnalyzer is the best and looks like a SIEM. I did not integrate Fortinet FortiAnalyzer with any security information and event management solutions. With Fortinet FortiAnalyzer, I have streamlined the process to mitigate risks and save time to get event information on any type of threats, risks, and unwanted traffic. Risk and time are saved, and it is valuable for any organization.
Mohammed-Abdelalim - PeerSpot reviewer
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
Exploring resilience and integration capabilities while navigating complexity and technical challenges
Logstash lacks a graphical user interface, necessitating a strong programming background to handle it effectively. It is challenging for business users who need a skilled team for its operation. Changing pipelines is not easy because Logstash requires pipelines to be programmed and cannot just be dragged and dropped like other data solutions. Additionally, Logstash does not automatically make actions based on the data it receives; integrating automation tools is required.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The ability to gather all gateway information and logs in a single location is the most valuable feature."
"The scalability is good. It is also good in the cluster nodes. You can make multiple FortiAnalyzer clusters groups, and you can distribute the logs between these FortiAnalyzer nodes. In other words, you can expand the scale."
"We are very satisfied with this program."
"For us in Latin America, the best features of Fortinet FortiAnalyzer are the solutions that combine SD-WAN and security in the same box."
"The most valuable aspect of the solution is its ability to pinpoint where the issue is, and if two devices need to communicate together, you can see which interfaces they are using."
"The product can scale."
"From a single dashboard we can get all the logs and traffic information on our firewall."
"FortiAnalyzer's reporting features like graphs, threat intelligence, and vulnerabilities analysis are helpful. Fortinet knows how to do reporting. You can customize your reports to show exactly what you want to analyze. It's user-friendly and doesn't require a lot of effort."
"I can collect logs from various data sources, including hardware."
"Logstash has numerous plugins for inputs and outputs, allowing it to work well in environments that do not contain other Elastic components."
"The transformation means we ship the logs in the way that we want them to be presented in Kibana, which is the main function we use Logstash for."
"We have three or four Logstash servers for high availability."
"Everything aligns well with improving our organization."
"The functionality of Logstash is quite easy to implement and the plugin ecosystem of Logstash is great, with plugins for shell script monitoring and SQL monitoring working well with the tool."
 

Cons

"The cloud version can be expensive."
"The product should be integrated with other third-party solutions for context exchange."
"Fortinet FortiAnalyzer is not in the cloud environment like some of the other products."
"The FortiAnalyzer is not good at managing multi-version environments."
"The solution should be more price competitive."
"The support could be better for Fortinet FortiAnalyzer here in Mexico."
"Technical support has been very bad. They should work to improve their level of service."
"We don't need to do much to install FortiAnalyzer because it always depends on FortiGate. You need to deploy FortiGate before you install it. That's why I say that I see it as a dummy box. I don't see anything interesting in it. It's only a support structure."
"An enhancement we could implement is the ability to cluster Logstash to exist in more than one node."
"Almost all the research can be very bad. We still have a problem with importing the log system."
"Elastic does not provide proper support for Logstash worldwide, and I rate their technical support as one out of ten."
"There can be a UI to implement with Logstash. Currently, I have to work with config files and everything."
"The product needs to improve its compatibility."
 

Pricing and Cost Advice

"I rate the product's price a six on a scale of one to ten, where one is cheap, and ten is expensive."
"The pricing model is subscription-based."
"It is not very expensive when customers understand the value of this product and the importance of the information that it provides for security."
"The price is not expensive when compared to other solutions like Palo Alto."
"There is a license needed to use this solution."
"t varies depending on your needs. However, after-sales support is expensive."
"The company's choice to utilize Fortinet FortiAnalyzer was based on the overall security strategy and compatibility with existing solutions. It was deemed the best fit as it provided a centralized point of visibility for all of their security solution, including Fortinet FortiGate firewall, FortiClient, Forti EMS, and FortiAP. The company conducted a thorough evaluation of various solutions in the market but found that none of them could fully integrate and manage all their solutions as effectively as Fortinet FortiAnalyzer."
"Compared to other products, the price is a little bit high."
Information not available
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
913,924 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
13%
Construction Company
11%
Financial Services Firm
9%
Manufacturing Company
8%
Financial Services Firm
17%
University
8%
Comms Service Provider
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business57
Midsize Enterprise22
Large Enterprise31
No data available
 

Questions from the Community

What needs improvement with Fortinet FortiAnalyzer?
I think technical support should be better. Sometimes support from Fortinet does not help with creating policies or configuration issues and directly routes to the service integrator. A little more...
What is your primary use case for Fortinet FortiAnalyzer?
I am using Fortinet FortiAnalyzer along with the analyzer for traffic monitoring and event checking. It is effective for analyzing traffic purposes.I use Fortinet FortiAnalyzer for event monitoring...
What needs improvement with Logstash?
Customization can be automated with Logstash, but it is at the developer's disposal. The developer has to do it, not the tool as such. There is scope for optimization, but that is all outside the t...
What is your primary use case for Logstash?
The purposes for which I am using Logstash largely include log aggregation and application monitoring.
What advice do you have for others considering Logstash?
I am using Logstash for log management and also implement it. Logstash can be deployed both on-cloud and on-premises. On a scale of 1-10, I rate Logstash an 8.
 

Overview

 

Sample Customers

General Directorate of Information Technology
Information Not Available
Find out what your peers are saying about Fortinet FortiAnalyzer vs. Logstash and other solutions. Updated: September 2026.
913,924 professionals have used our research since 2012.