Wazuh and Grafana Loki compete in the security and monitoring category. Based on feature richness and versatility, Wazuh has an edge due to its comprehensive integration capabilities and security features.
Features: Wazuh offers robust security configuration assessments, vulnerability scanning, and a variety of SIEM modules. It supports extensive platform integration, enabling deep customization. Grafana Loki excels with simple dashboard creation and powerful log filtering, integrating effectively with Kubernetes while maintaining cost-efficiency.
Room for Improvement: Wazuh could improve its AI and machine learning, enhance its alerting system, and simplify deployment. Better cloud and Kubernetes integration and improved scalability and support services are needed. Grafana Loki should offer more customizable reporting, better correlation and alert complexity, alongside stability and broader environment support.
Ease of Deployment and Customer Service: Wazuh supports deployment on various platforms like on-premises and clouds, but technical support is occasionally lacking. Grafana Loki, similar in deployment flexibility, is straightforward for Kubernetes users though criticized for setup complexity. Both rely heavily on community support, with mixed user experiences.
Pricing and ROI: Both Wazuh and Grafana Loki are open-source, offering core functionalities for free. Wazuh's cloud-based model may incur additional storage costs but is cheaper than many similar solutions. Grafana Loki offers an enterprise version yet remains a cost-effective choice, both providing high ROI by reducing detection times at minimal cost.
Loki leads to significant cost savings by reducing server downtime and aiding engineers in prompt issue resolution.
I have seen value in security cost savings with Wazuh, as using proprietary EDR versions could save us substantial money.
We have not had to open any tickets yet, as we solve issues through forums and wikis.
I usually do not use official support; I typically rely on community blogs and forums for support of Grafana Loki.
They responded quickly, which was crucial as I was on a time constraint.
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
There is no dedicated technical support for Wazuh as it is open source.
Loki offers great scalability, allowing us to manage and compress logs extensively.
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Currently, I don't see any limitations in terms of scalability as Wazuh can still connect many endpoints.
This is because of the backend work the agent is collecting and processing, causing the laptop to slow down and the bandwidth to decrease.
The stability of Wazuh is largely dependent on maintenance.
The indexer frequently times out, requiring system restarts.
In one year, we faced about twelve tickets regarding the system going down due to storage issues.
Improvements could be made in the enablement of the product, addressing the complexity of implementing these tools.
It would be beneficial if Loki could directly access Windows Server logs or events directly from the servers.
Machine learning is needed along with understanding user behavior and behavioral patterns.
If we had a correlation of logs where I could just search one unique ID and then the unique ID pulls every system in a time-wise manner, that would be a great improvement I would suggest.
I think Wazuh should improve by introducing AI functionalities, as it would be beneficial to see AI incorporated in the threat hunting and detection functionalities.
The cloud version is competitively priced compared to other market solutions.
Since it is an open source tool, there are no charges or fees.
Wazuh is completely free of charge.
I would definitely recommend Wazuh, especially considering Fortinet's licensing model which is confusing and overpriced in my opinion.
Wazuh is free to use, but there are licensing fees for third parties.
It provides a clear picture about the state of the system and gives needed information for taking action and quickly fixing problems.
Grafana Loki is notably cost-effective.
The most valuable part of Loki is the ability to filter logs by keywords and devices.
Wazuh is a SIEM tool that is highly customizable and versatile.
The system allows us to monitor endpoints effectively and collect security data that can be utilized across other platforms such as SOAR.
With this open source tool, organizations can establish their own customized setup.
| Product | Mindshare (%) |
|---|---|
| Wazuh | 3.7% |
| Grafana Loki | 2.1% |
| Other | 94.2% |
| Company Size | Count |
|---|---|
| Small Business | 7 |
| Midsize Enterprise | 8 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 27 |
| Midsize Enterprise | 15 |
| Large Enterprise | 9 |
Grafana Loki is an efficient log aggregation system known for simple setup and integration with Grafana, supporting seamless log monitoring and data visualization across environments.
Grafana Loki is a lightweight, open-source log monitoring tool that simplifies the process of dashboard creation and log collection. It offers strong integration capabilities with platforms like Kubernetes and Grafana, enhancing log collection and alert systems while ensuring cost-efficiency. Its strength lies in its robust platform for gathering detailed log data to visualize infrastructure and API performance efficiently. While it supports storing data on object-based storage across clusters, it does have areas needing improvement, such as request correlation, metric creation, and enhanced alerts. Security, dashboard intuitiveness, and Docker performance are also slated for refinements. Deployment challenges exist in environments like ECS, and older versions might experience bugs. Enhancing visualization and easing production setups would further benefit users.
What are Grafana Loki's key features?Grafana Loki finds widespread use in industries requiring comprehensive log monitoring and performance analysis, particularly in technology and infrastructure sectors. It proves essential for system health checks, device security, and network performance monitoring, aiding businesses in accessing and analyzing logs efficiently. Organizations utilize Grafana Loki to monitor system and Docker logs, optimizing performance while visualizing key data for informed decision-making.
Wazuh offers an open-source platform designed for seamless integration into diverse environments, making it ideal for enhancing security infrastructure. Its features include log monitoring, compliance support, and real-time threat detection, providing effective cybersecurity management.
Wazuh stands out for its ability to integrate easily with Kubernetes, cloud-native infrastructures, and various SIEM platforms like ELK. It features robust MITRE ATT&CK correlation, comprehensive log monitoring capabilities, and detailed reporting dashboards. Users benefit from its file integrity monitoring and endpoint detection and response (EDR) capabilities, which streamline compliance and vulnerability assessments. While appreciated for its customization and easy deployment, room for improvement exists in scalability, particularly in the free version, and in areas such as threat intelligence integration, cloud integration, and container security. The platform is acknowledged for its strong documentation and technical support.
What are the key features of Wazuh?In industries like finance, healthcare, and technology, Wazuh is utilized for its capabilities in log aggregation, threat detection, and vulnerability management. Companies often implement its features to ensure compliance with stringent regulations and to enhance security practices across cloud environments. By leveraging its integration capabilities, organizations can achieve unified security management, ensuring comprehensive protection of their digital assets.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
