Try our new research platform with insights from 80,000+ expert users

Google Chronicle Suite vs NetWitness Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Google Chronicle Suite
Ranking in Security Information and Event Management (SIEM)
11th
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
15
Ranking in other categories
No ranking in other categories
NetWitness Platform
Ranking in Security Information and Event Management (SIEM)
22nd
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
37
Ranking in other categories
Log Management (22nd)
 

Mindshare comparison

As of May 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Google Chronicle Suite is 3.5%, up from 1.7% compared to the previous year. The mindshare of NetWitness Platform is 0.6%, down from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
 

Featured Reviews

Rene Schouten. - PeerSpot reviewer
Harnesses anomaly detection and automated response for efficient threat management
I really appreciate the anomaly detection and machine learning capabilities that identify unusual patterns without needing signatures. The automated response feature allows for immediate actions like isolating infected machines or blocking malicious IP addresses. It is also cost-effective, charged based on use per second rather than data volume. Additionally, the solution supports annual audits and ensures compliance.
MdZaman - PeerSpot reviewer
Really scalable for enterprise customers
The solution should have more integration capabilities with different platforms. The API is nearly open and scalable, so the solution can integrate with many platforms. The solution has more than 200 log sources in the scalability to support, but this is its limit. Installation is pretty easy. However, there are a couple of modules involved, so it is not as easy as it could be. We are talking about a distributed module, not a single-module type. This is what makes things a bit complex, instead of easier. I rate it as a seven out of ten on its installation and configuration capabilities.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product is near perfect, with only minor enhancements needed."
"The initial setup is straightforward and not complex."
"The automated response feature allows for immediate actions like isolating infected machines or blocking malicious IP addresses."
"The language used for content creation is very flexible and visually appealing."
"The main advantage I see is the cost, which is currently low."
"Google Chronicle Suite is a highly scalable solution with good search capabilities."
"The tool's most valuable feature is the search option, allowing easy navigation."
"The UEBA capabilities provide valuable user and entity behavior analytics, and the context from Google threat intelligence significantly bolsters threat detection."
"The most valuable features are the packet inspection and the automated incident response."
"The most valuable feature is the hunting ability to work in a CERT."
"The most valuable feature is that we can create our own connectors for any application, and NetWitness provides the training and tools to do it."
"NetWitness Platform offers flexibility for deployment and robust integration capabilities."
"NetWitness can be highly beneficial for incident detection and response."
"The most valuable feature is the security that it provides."
"The development of use cases on the SSA console is quite user friendly. This means that the security analyst or the researcher does not have to learn another language."
"It's quite economical compared to other solutions in the market."
 

Cons

"The configuration is not optimal."
"It is still not mature enough. If I create some content, there might be roadblocks, although this could change in the future."
"The tool is perfectly fine, and I have not faced any challenges while using it."
"The dashboarding feature does not meet our expectations."
"The tool is a little bit difficult to use compared to Microsoft Sentinel."
"Google Chronicle Suite lacks near time detection. There is a delay of about twenty minutes between logs coming in and an alert being generated. This timeframe, while seemingly short, can have significant implications in the event of a critical issue."
"In terms of improvement, the UI can be a bit challenging for beginners."
"A few areas are difficult to understand for someone who has less experience using the product."
"Its technical support could be better."
"We have encountered issues with unresolved crashes."
"The documentation is not as structured as I would like, personally, and I think that it can be improved and made much more user-friendly."
"The multi-tenant capabilities are lagging compared to IBM QRadar."
"The solution should have more integration capabilities with different platforms."
"It should have a monitoring feature. It would help us analyze the current state of attacks faster from a single platform."
"It is not so easy to customize this product."
"The log system is a bit complex and has room for improvement."
 

Pricing and Cost Advice

"The tool is cheaper than Microsoft Sentinel."
"Compared to other solutions, Google Chronicle Suite's pricing is fine."
"The solution's pricing is dependent on the data amount."
"We have to pay extra charges for the amount of data transfer and technical support services."
"This is a pricey solution; it's not cheap."
"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."
"Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."
"We have yearly licensing costs. The license fee can be based on the volume of EPS. Some organizations may have, as a gentlemanly gesture, 10,000 EPS and get a 3,000 EPS license but actually use 5,000 EPS."
"The licenses are good but the cost is very expensive."
"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."
"It is cheap."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
13%
Retailer
8%
Manufacturing Company
7%
Computer Software Company
19%
Financial Services Firm
18%
Government
6%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Google Chronicle Suite?
Google Chronicle Suite is a highly scalable solution with good search capabilities.
What is your experience regarding pricing and costs for Google Chronicle Suite?
I rate the price of Google Chronicle Suite as a five, indicating it's market value. It's neither expensive nor cheap, and I believe it is a justified price for the features offered.
What needs improvement with Google Chronicle Suite?
The user interface could be more intuitive, particularly in navigation. Moreover, the dashboards should be enhanced as they are not up to the mark. The UI is the primary challenge in need of improv...
What do you like most about NetWitness Platform?
The product's initial setup phase was not at all difficult.
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
 

Also Known As

No data available
RSA Security Analytics
 

Overview

 

Sample Customers

Information Not Available
Los Angeles World Airports, Reply
Find out what your peers are saying about Google Chronicle Suite vs. NetWitness Platform and other solutions. Updated: April 2025.
850,028 professionals have used our research since 2012.