Try our new research platform with insights from 80,000+ expert users

Google Chronicle Suite vs NetWitness Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Google Chronicle Suite
Ranking in Security Information and Event Management (SIEM)
9th
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
15
Ranking in other categories
No ranking in other categories
NetWitness Platform
Ranking in Security Information and Event Management (SIEM)
31st
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
37
Ranking in other categories
Log Management (35th)
 

Mindshare comparison

As of August 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Google Chronicle Suite is 3.1%, up from 2.6% compared to the previous year. The mindshare of NetWitness Platform is 0.6%, down from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
 

Featured Reviews

Rene Schouten. - PeerSpot reviewer
Harnesses anomaly detection and automated response for efficient threat management
I really appreciate the anomaly detection and machine learning capabilities that identify unusual patterns without needing signatures. The automated response feature allows for immediate actions like isolating infected machines or blocking malicious IP addresses. It is also cost-effective, charged based on use per second rather than data volume. Additionally, the solution supports annual audits and ensures compliance.
MOTASHIM Al Razi - PeerSpot reviewer
It is a stable solution, but they should make the user interface easier to understand
The solution's initial setup takes work. We have to organize multiple paths and many features. The deployment process takes less than a week. But it takes a month to complete if we want to make the solution smarter by integrating it with various devices. I rate the process as a six out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool's most valuable feature is the search option, allowing easy navigation."
"The dashboards are clean and clearly written, making it easy to use and understand."
"Google Chronicle Suite provides useful APIs."
"The technical support from Google is very important and great."
"The product's most valuable feature is threat hunting. We can detect the threats directly from the console from the past data as well."
"The language used for content creation is very flexible and visually appealing."
"The platform's most valuable features are multiple connectors and data output flexibility regarding dashboards and user experience."
"The automated response feature allows for immediate actions like isolating infected machines or blocking malicious IP addresses."
"Performance and reporting are very good."
"The newer 11.5 version that my team is using has found it to have good mapping."
"The product's initial setup phase was not at all difficult."
"Incident management is its most valuable feature."
"In my opinion, the solution's most valuable feature is its capacity to monitor network traffic, logs from devices within the network, and network captures. This capability extends beyond logs to include full network capturing."
"The solution is really scalable for the high-end power, enterprise customer."
"The most valuable features are the integration and ease of use."
"Alerting Module: It provides real-time event processing language on all the logs/packets stream for advanced alerting, i.e., using SQL LIKE statements."
 

Cons

"The graphical user interface could be improved to enhance user experience."
"It is still not mature enough. If I create some content, there might be roadblocks, although this could change in the future."
"Google Chronicle Suite lacks near time detection. There is a delay of about twenty minutes between logs coming in and an alert being generated. This timeframe, while seemingly short, can have significant implications in the event of a critical issue."
"The graphical user interface could be improved to enhance user experience."
"A few areas are difficult to understand for someone who has less experience using the product."
"The solution's graphical user interface (GUI) should be more user-friendly."
"The dashboarding feature does not meet our expectations."
"They are slow, and the initial responses often require more information rather than providing helpful solutions."
"The initial setup is very complex and should be simplified."
"The product's licensing models are complex to understand. This particular area needs improvement."
"An area for improvement would be better automation and more inbuilt use cases."
"The initial setup is complex. There are other solutions that are easier to implement."
"They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams."
"Log aggregation is an issue with this solution because there are a huge number of alerts in a single instance."
"Lots of competing products have vulnerability protection built into their products, and this solution would be improved by including that support."
"The tool's integration capability isn't so great."
 

Pricing and Cost Advice

"The tool is cheaper than Microsoft Sentinel."
"Compared to other solutions, Google Chronicle Suite's pricing is fine."
"We have to pay extra charges for the amount of data transfer and technical support services."
"The solution's pricing is dependent on the data amount."
"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."
"Compared to the competition, the is price is not that high."
"The new pricing and licensing mechanisms are fair. I would advise always to get the full solution (i.e., not only Logs)."
"It is cheap."
"This is a pricey solution; it's not cheap."
"The licenses are good but the cost is very expensive."
"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
"It’s cheaper to run virtual machines in a VMware environment."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
865,384 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
13%
Manufacturing Company
9%
Retailer
8%
Financial Services Firm
14%
Computer Software Company
13%
Comms Service Provider
6%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Google Chronicle Suite?
Google Chronicle Suite is a highly scalable solution with good search capabilities.
What is your experience regarding pricing and costs for Google Chronicle Suite?
Our license is based on the size of the company with an all-you-can-eat model, considering storage capabilities per day. It's a flexible pay method.
What needs improvement with Google Chronicle Suite?
The functionalities for parsing and including feeds need improvement. Google should make it easier for clients to manage these aspects.
What do you like most about NetWitness Platform?
The product's initial setup phase was not at all difficult.
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
 

Also Known As

No data available
RSA Security Analytics
 

Overview

 

Sample Customers

Information Not Available
Los Angeles World Airports, Reply
Find out what your peers are saying about Google Chronicle Suite vs. NetWitness Platform and other solutions. Updated: July 2025.
865,384 professionals have used our research since 2012.