No more typing reviews! Try our Samantha, our new voice AI agent.

Groundcover Observability Platform vs LogRhythm SIEM comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Groundcover Observability P...
Ranking in Log Management
37th
Average Rating
8.6
Reviews Sentiment
4.3
Number of Reviews
4
Ranking in other categories
Application Performance Monitoring (APM) and Observability (44th), AI Observability (27th)
LogRhythm SIEM
Ranking in Log Management
11th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
176
Ranking in other categories
Security Information and Event Management (SIEM) (12th)
 

Mindshare comparison

As of October 2026, in the Log Management category, the mindshare of Groundcover Observability Platform is 0.5%, up from 0.0% compared to the previous year. The mindshare of LogRhythm SIEM is 3.1%, up from 2.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
LogRhythm SIEM3.1%
Groundcover Observability Platform0.5%
Other96.4%
Log Management
 

Featured Reviews

EO
Software Engineer at FairMoney
Centralized observability has improved transaction monitoring and now reduces errors through faster troubleshooting
Groundcover Observability Platform is already very vast, and improving it requires proper training for even a software developer to be able to use it. A person in tech needs training to navigate the system. The UI is better, but it can be improved to include a more intuitive design that easily explains itself to users so that navigation is simpler. Many features are hidden, and you need someone who is experienced with the platform to direct you on how to view certain information or complete specific tasks and walk you through the process. It would be better if Groundcover focused more on simplifying the user interface and improving human-computer interactions of the dashboard to make it so easy for a new developer or specialist to navigate and get what they need quickly. Querying data from Groundcover is not easy if you do not have specific information. You cannot perform a wildcard search in the text box. If you go to the log and enter an error message, it will not bring any results for you. You must first specify the workload or pods you are looking for, then enter the error. You need to add tags and put in your strings to be able to search for your particular logs or errors. If you just put a wildcard search in the text box, it will not work and will appear as if there are no logs that relate to that search, when in reality the logs exist. Making it easier for developers, users, and specialists using Groundcover to navigate and get what they need without the help of an experienced person walking them through is very important. This improvement is not about functionality but more about making navigation easier.
RS
Engineer Information Security at N-Able (Pvt) Ltd
Advanced threat detection has improved investigations but complexity and resource use need refinement
LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat better and more matured in Wazuh compared to LogRhythm SIEM. Additionally, the parsers that I write for LogRhythm SIEM tend to get quite complex for log parsing, while with Wazuh, I can achieve a similar parser with much less complexity. Those are some of the pain points that some of our customers have been expressing. If LogRhythm SIEM could make a lightweight version of their solution, that would be quite competitive because some of my customers have a very large need but refuse to go with LogRhythm SIEM due to its complexity and high resource intensity. Therefore, they have been moved to Wazuh, which I am deploying for them. Even though LogRhythm SIEM has extremely good capabilities, their resource utilization is too heavy for certain customers, so if they could make a separate, lightweight version, that would be quite beneficial.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We switched to Groundcover Observability Platform primarily because of the difficult query syntax in our previous solution, and we chose Groundcover for their business model as they don't charge based on log storage, they provide the infrastructure, and from a security perspective, the data stays in-house, which wasn't the case with our previous tool."
"Groundcover Observability Platform has impacted my organization positively as it is the primary way we use observability in our company, so it has a significant impact."
"Troubleshooting is very fast compared to manual investigation or using the other forms of logging that we used to have, and downtime and errors have decreased because we are able to see our performance and workload pods performing better, increase CPU and memory resources as soon as usage goes above the threshold, and make our application more scalable and improve performance metrics, reducing the number of errors in the application by at least 70%."
"Groundcover Observability Platform has positively impacted my organization by allowing me to pay only for what I use since it is stored in the cloud, and I do not need to pay for buckets of 1 gigabyte, 5 gigabytes, or other options."
"Groundcover Observability Platform scales effectively with our organization's growth as we add new environments and everything works great, and the migration from our old product went very smoothly, allowing us to deprecate it rather quickly."
"AXON has the ability to add and compare use cases."
"Provides visibility into the network."
"I would definitely recommend LogRhythm, based on my experience with it."
"Everyone I have worked with knows their stuff, which is great."
"LogRhythm has shown to us, to this point in time, that it has the capabilities of being able to deliver actionable intelligence to the security engineers and analysts."
"The security operation center is excellent, and we can pick logs from any system, not only the IPS or firewall."
"NextGen SIEM's most valuable feature is its user-friendliness."
"We have seen a measurable decrease in the mean time to detect and respond to threats."
 

Cons

"I would assess the stability and reliability of Groundcover Observability Platform as an eight out of ten; while I haven't experienced issues personally, I am aware they occasionally encounter some challenges."
"Querying data from Groundcover is not easy if you do not have specific information."
"I think it would be beneficial to see the body and content of API calls in the traces as a possible improvement."
"I would appreciate the ability to eliminate incident.io and have all the alerting in one place."
"I think they're limited now with this to Office 365."
"The main area of improvement is that the client must be installed on the computer for all of the functions to work."
"Better correlation of all events: We seem to get a lot of misinterpreted data coming from multiple sources."
"The Web Dashboard UI maybe can improve more to indicate some of what Splunk is doing, because I also compare with other SIEM products."
"My rating of eight out of 10 for LogRhythm is because, while I think the support is great, the solution is a little rough around the edges."
"The initial setup is not so easy because it is quite a process."
"We tend to struggle; we do see performance issues fairly regularly."
"I don't think the cloud model in LogRhythm is developed enough."
 

Pricing and Cost Advice

Information not available
"The support which allows more customized to the environment when we are deploying new systems is called Professional Service and is very expensive. The technical annual support and there is an annual fee."
"The nice thing about LogRhythm is you can either use the agents, getting a certain number of agents with your license depending on how you want to go, and those agents do a lot of cool things, or you can use CIS Log host, then you have like an unlimited number of them."
"Everything is expensive with LogRhythm, and you don't get anything for free."
"Look closely at the cost of licensing of other products. This should include setups and the need for support services. I did a RFQ to 2 other vendors before choosing this product."
"If you don't have your staff, absolutely look into the co-pilot and factor that into your cost evaluation."
"On a scale of one to ten, I'd rate the pricing of this solution as a seven - not too expensive but not cheap either. Regarding licensing costs, it varies depending on factors like being a partner or an end user, but there are no additional costs aside from standard licensing fees for the basic SIEM solution."
"We work with French-speaking African countries, and it costs more than the average SIEM solution. Also, the pricing isn't too flexible. AlienVault, Splunk, and IBM QRadar are more suitable for customers on a tight budget."
"The setup and licensing for small and medium size businesses is straightforward, though when it comes to the enterprise it pays to keep in mind the possibility for complications given all the extras and add-ons that may be required."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
34%
Financial Services Firm
8%
Comms Service Provider
8%
Recreational Facilities/Services Company
7%
Construction Company
12%
Outsourcing Company
10%
Manufacturing Company
9%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise39
Large Enterprise83
 

Questions from the Community

What needs improvement with Groundcover Observability Platform?
Groundcover Observability Platform is already very vast, and improving it requires proper training for even a software developer to be able to use it. A person in tech needs training to navigate th...
What is your primary use case for Groundcover Observability Platform?
My main use case for Groundcover Observability Platform is for application logs, insights, workload observability, and visibility.
What advice do you have for others considering Groundcover Observability Platform?
Groundcover Observability Platform is a good platform and very good to use. I would rate this review as highly positive.
What is the difference between log management and SIEM?
Rony, Daniel's answer is right on the money. There are many solutions for each in the market, a lot depends upon your ability to manage such tools and your budget. A small operation may be best s...
What needs improvement with LogRhythm NextGen SIEM?
LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat bette...
What is your experience regarding pricing and costs for LogRhythm SIEM?
I find LogRhythm SIEM affordable, as it is a bit less costly than QRadar, although I have not been involved in negotiation charges; however, from the manager's approval, I see it as affordable.
 

Also Known As

No data available
LogRhythm NextGen SIEM, LogRhythm, LogRhythm Threat Lifecycle Management, LogRhythm TLM
 

Overview

 

Sample Customers

Information Not Available
Macy's, NASA, Fujitsu, US Air Force, EY, Abbott, HD Supply, SAB Miller, UCLA, Raytheon, Amtrak, Cargill
Find out what your peers are saying about Groundcover Observability Platform vs. LogRhythm SIEM and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.