Fortinet FortiSIEM and Logz.io are both prominent in the security information and event management (SIEM) market. Despite FortiSIEM's strong security features, Logz.io appears to have the upper hand due to its overall features, ease of use, and customer satisfaction.
Features: Fortinet FortiSIEM offers extensive integration, advanced threat detection, and a wide range of security capabilities. Logz.io provides advanced logging, real-time monitoring, and extensive analytics capabilities.
Room for Improvement: Fortinet FortiSIEM users suggest improvements in performance, more intuitive system configuration, and better scalability. Logz.io users recommend enhanced data visualization tools, better scalability options, and improved integration features.
Ease of Deployment and Customer Service: Fortinet FortiSIEM is noted for its complex deployment and requiring considerable time and expertise. Logz.io is praised for its straightforward onboarding process and higher customer satisfaction due to prompt and effective assistance.
Pricing and ROI: Fortinet FortiSIEM users find setup costs high but appreciate the long-term ROI. Logz.io users find the premium pricing justified by significant benefits and efficiency gains.
The accuracy of responses has also enhanced, leading to money savings and improved uptime, resulting in happier customers and overall positive metrics, indicating we have seen a return on investment.
The biggest ROI comes from the reduced troubleshooting effort, less time spent managing logging infrastructure, and faster issue resolution.
Local tech support is available, however, for more critical or technical issues, we depend on the OEM directly, especially when it comes to on-prem solutions.
There is a knowledgeable, though small, team of support engineers around the world.
They take some time to respond because they need logs and investigations, which delays the response time.
The team is very responsive and knowledgeable whenever we need their assistance.
I have not had to reach out for customer support from Logz.io, as it has been very easy to set up and work with.
At any point in time, when network devices increase or there is a change in the infrastructure, we can add more workers and collectors to expand our infrastructure setup.
Fortinet FortiSIEM is highly scalable.
Fortinet FortiSIEM is easy to scale.
Logz.io handles the growing log volumes and additional services very well without requiring major architectural changes from our side.
Logz.io has managed our organization's growth well; we have actually scaled down slightly to optimize for cost, which has worked well.
It stabilizes itself in an appropriate time, so its uptime is good.
These issues may cause unusual errors and user interface issues.
Some stability issues occur, but Fortinet's technical support team provides assistance.
Enhancing the completeness of its APIs could aid in better external integrations.
Recently, they revised it to a subscription-based, all-inclusive license.
Fortinet FortiSIEM should broaden its remediation part to include more features for incident management.
Their features align with offerings from Elastic Stack and other prominent tools, including functionalities available from Prometheus or Grafana, providing centralized logging and other capabilities in the UI.
Logz.io can be improved by adding more AI-assisted root cause analysis and by improving log retention flexibility.
Windows agent licenses cost around 3,000 Rupees per device per year.
Setting it up for oneself as an enterprise-licensed product can be quite expensive.
The revised model is subscription-based and more flexible.
While their pricing is quite good compared to the industry, from my company's perspective, we expect better value.
Organizations that start with clear logging standards and retention policies can integrate applications, cloud resources, and Kubernetes workloads early to maximize the observability benefits.
It provides extensive logging and record-keeping for internal networks, cloud applications, and services as well as perimeter physical network security.
I find the real-time monitoring and correlation capabilities effective for security alerts.
Having logs from all the services and infrastructure in one place reduces our troubleshooting time and also improves incident response.
This enables us to obtain relevant information within two or three minutes of the incident, and it is quite real-time, providing triggers for root cause analysis that automatically gives us insights and suggests what we need to do without needing to read through everything repeatedly.
| Product | Mindshare (%) |
|---|---|
| Fortinet FortiSIEM | 2.2% |
| Logz.io | 0.9% |
| Other | 96.9% |
| Company Size | Count |
|---|---|
| Small Business | 34 |
| Midsize Enterprise | 22 |
| Large Enterprise | 24 |
| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 2 |
| Large Enterprise | 7 |
Fortinet FortiSIEM offers robust features like automation, real-time monitoring, and scalable log correlation. It integrates SOC and NOC, enhancing security by seamlessly managing data. A preferred choice for threat management, its comprehensive reports and competitive pricing add value.
Fortinet FortiSIEM serves as a comprehensive platform for security monitoring, threat detection, and incident management. It streamlines operations by integrating seamlessly with Fortinet and third-party tools, offering dynamic service discovery and user-friendly analytics. Leveraging its stable infrastructure, organizations conduct log analysis and behavioral monitoring across networks and applications. It supports compliance reporting and enhances security environments through integration with firewalls and security devices. Its cloud and on-premise options cater to regulatory and operational needs, while multitenant capabilities enable managed security service providers to extend robust security services. Users have highlighted areas for improvement in API integration, data retrieval speed, resource consumption, automation, and reporting flexibility.
What are the key features of Fortinet FortiSIEM?In healthcare, Fortinet FortiSIEM ensures compliance and secure health data management. Financial institutions utilize it for real-time monitoring and fraud detection, while educational sectors deploy for network security and data integrity. Service providers leverage its multitenant features for expansive client management.
Logz.io provides a robust platform designed to streamline log monitoring, offering features like real-time dashboards and AI Insights. It ensures efficient management of environments such as Kubernetes, enhancing operational effectiveness and cost management.
Logz.io is built on an open-source foundation, facilitating quick setup and adaptability for users. Its real-time dashboards are accessible across multiple sub-accounts, allowing seamless scaling and integration into existing services. Log Patterns and Drop Filters improve log clarity by reducing noise, while Kibana visualizations enhance data analysis. Logz.io also supports simultaneous views of metrics and logs, optimizing Kubernetes management and improving logging efficiency. Continuous enhancements in access control, API performance, and documentation are areas for development. Improving AI capabilities and offering better data retention and update management are key focuses for future upgrades.
What are the key features of Logz.io?Logz.io is widely used in industries for log collection, monitoring, and aggregation in environments including cloud and AWS. It's leveraged for monitoring application health, security compliance, live game observability, and server performance. Organizations utilize archived logs for issue resolution and leverage dashboards to monitor microservices, ensuring system stability in development and production environments.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
