No more typing reviews! Try our Samantha, our new voice AI agent.

Groundcover Observability Platform vs NetWitness Platform comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Groundcover Observability P...
Ranking in Log Management
37th
Average Rating
8.6
Reviews Sentiment
4.3
Number of Reviews
4
Ranking in other categories
Application Performance Monitoring (APM) and Observability (44th), AI Observability (27th)
NetWitness Platform
Ranking in Log Management
36th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Security Information and Event Management (SIEM) (35th)
 

Mindshare comparison

As of October 2026, in the Log Management category, the mindshare of Groundcover Observability Platform is 0.5%, up from 0.0% compared to the previous year. The mindshare of NetWitness Platform is 1.2%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
NetWitness Platform1.2%
Groundcover Observability Platform0.5%
Other98.3%
Log Management
 

Featured Reviews

EO
Software Engineer at FairMoney
Centralized observability has improved transaction monitoring and now reduces errors through faster troubleshooting
Groundcover Observability Platform is already very vast, and improving it requires proper training for even a software developer to be able to use it. A person in tech needs training to navigate the system. The UI is better, but it can be improved to include a more intuitive design that easily explains itself to users so that navigation is simpler. Many features are hidden, and you need someone who is experienced with the platform to direct you on how to view certain information or complete specific tasks and walk you through the process. It would be better if Groundcover focused more on simplifying the user interface and improving human-computer interactions of the dashboard to make it so easy for a new developer or specialist to navigate and get what they need quickly. Querying data from Groundcover is not easy if you do not have specific information. You cannot perform a wildcard search in the text box. If you go to the log and enter an error message, it will not bring any results for you. You must first specify the workload or pods you are looking for, then enter the error. You need to add tags and put in your strings to be able to search for your particular logs or errors. If you just put a wildcard search in the text box, it will not work and will appear as if there are no logs that relate to that search, when in reality the logs exist. Making it easier for developers, users, and specialists using Groundcover to navigate and get what they need without the help of an experienced person walking them through is very important. This improvement is not about functionality but more about making navigation easier.
reviewer1130436 - PeerSpot reviewer
Information Technology Security and Infrastructure Expert at a government with 201-500 employees
Helps to deal with potential attacks and is available at a reasonable price
My company has had many benefits from the use of the product in the last eight years. The tool has streamlined our company's incident response process since it serves as a log repository, which allows us to correlate events and access different technology stacks. In our company, we were able to actually find some potential attacks, so it has been very helpful. The tool's integration capability isn't so great. In my company, we managed to integrate it with our Microsoft Azure Subscription, after which we managed to integrate it with other tools. You will face a lot of difficulties if you want to integrate it with your database monitoring tool, PAM solutions, or IAM products. The product has done well overall for my company's teams to deal with their workflow efficiency. I would not recommend the product to others. I rate the tool a seven out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Groundcover Observability Platform has impacted my organization positively as it is the primary way we use observability in our company, so it has a significant impact."
"Groundcover Observability Platform scales effectively with our organization's growth as we add new environments and everything works great, and the migration from our old product went very smoothly, allowing us to deprecate it rather quickly."
"Groundcover Observability Platform has positively impacted my organization by allowing me to pay only for what I use since it is stored in the cloud, and I do not need to pay for buckets of 1 gigabyte, 5 gigabytes, or other options."
"Troubleshooting is very fast compared to manual investigation or using the other forms of logging that we used to have, and downtime and errors have decreased because we are able to see our performance and workload pods performing better, increase CPU and memory resources as soon as usage goes above the threshold, and make our application more scalable and improve performance metrics, reducing the number of errors in the application by at least 70%."
"We switched to Groundcover Observability Platform primarily because of the difficult query syntax in our previous solution, and we chose Groundcover for their business model as they don't charge based on log storage, they provide the infrastructure, and from a security perspective, the data stays in-house, which wasn't the case with our previous tool."
"Performance and reporting are very good."
"It's quite economical compared to other solutions in the market."
"The solution is really scalable for the high-end power, enterprise customer."
"Once it is deployed and you are used to it, you can do whatever you want."
"It gives the ability to investigate into network traffic in the Net and the organization what we couldn't do before."
"It's fully scalable. There is no limit. Of course, the license limits per day the number of terabytes. In my opinion, it's very flexible."
"The newer 11.5 version that my team is using has found it to have good mapping."
"Prior to implementing the solution, the customers had no visibility of their assets, however, after adopting the solution, they have gained complete visibility over all their assets, including a comprehensive understanding of the network and attack symptoms."
 

Cons

"I would appreciate the ability to eliminate incident.io and have all the alerting in one place."
"I think it would be beneficial to see the body and content of API calls in the traces as a possible improvement."
"I would assess the stability and reliability of Groundcover Observability Platform as an eight out of ten; while I haven't experienced issues personally, I am aware they occasionally encounter some challenges."
"Querying data from Groundcover is not easy if you do not have specific information."
"The system architecture is complex and sometimes it’s hard to troubleshoot potential problems."
"The initial setup is complex. It requires some knowledge in order to set it up."
"I believe that integrating the solution with other products such as Oracle would be beneficial."
"RSA NetWitness Logs and Packets can improve the threat level aspect, it is lacking compared to other solutions. Whenever any hacking activity or any other threat factor occurred they used to provide the coverages very fast when comparing RSA NetWitness Logs and Packets. I heard the other three solutions, from a discussion with my team members who had experience in other solutions, they used to say that. Whenever any issues happened across the globe RSA NetWitness Logs and Packets are a little bit slow improving those detection mechanisms."
"We have encountered issues with unresolved crashes."
"They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams."
"Its technical support could be better."
"Nowadays, their support is a little subpar compared to other solutions. I rate RSA support six out of 10."
 

Pricing and Cost Advice

Information not available
"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."
"We are on an annual license for the use of the solution."
"The licenses are good but the cost is very expensive."
"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."
"Compared to the competition, the is price is not that high."
"The tool is very expensive, so I rate the pricing a ten out of ten. The solution has an annual subscription."
"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
"It’s cheaper to run virtual machines in a VMware environment."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Construction Company
34%
Financial Services Firm
8%
Comms Service Provider
8%
Recreational Facilities/Services Company
7%
Construction Company
12%
Financial Services Firm
11%
Comms Service Provider
10%
Outsourcing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
 

Questions from the Community

What needs improvement with Groundcover Observability Platform?
Groundcover Observability Platform is already very vast, and improving it requires proper training for even a software developer to be able to use it. A person in tech needs training to navigate th...
What is your primary use case for Groundcover Observability Platform?
My main use case for Groundcover Observability Platform is for application logs, insights, workload observability, and visibility.
What advice do you have for others considering Groundcover Observability Platform?
Groundcover Observability Platform is a good platform and very good to use. I would rate this review as highly positive.
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
 

Also Known As

No data available
RSA Security Analytics
 

Overview

 

Sample Customers

Information Not Available
Los Angeles World Airports, Reply
Find out what your peers are saying about Groundcover Observability Platform vs. NetWitness Platform and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.