No more typing reviews! Try our Samantha, our new voice AI agent.

IBM SevOne Network Performance Management (NPM) vs NetWitness Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM SevOne Network Performa...
Ranking in Log Management
38th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
54
Ranking in other categories
Network Monitoring Software (34th), Server Monitoring (18th), IT Infrastructure Monitoring (34th), Cloud Monitoring Software (27th)
NetWitness Platform
Ranking in Log Management
37th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Security Information and Event Management (SIEM) (36th)
 

Mindshare comparison

As of August 2026, in the Log Management category, the mindshare of IBM SevOne Network Performance Management (NPM) is 1.1%, up from 0.4% compared to the previous year. The mindshare of NetWitness Platform is 1.1%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
NetWitness Platform1.1%
IBM SevOne Network Performance Management (NPM)1.1%
Other97.8%
Log Management
 

Featured Reviews

reviewer1543041 - PeerSpot reviewer
Network monitoring engineer at a tech vendor with 10,001+ employees
Provides consistent infrastructure monitoring with excellent usability and support
The primary use case of IBM SevOne Network Performance Management (NPM) is network monitoring. It helps to maintain the infrastructure's availability and ensure that alerts are generated when needed The most valuable features of IBM SevOne Network Performance Management (NPM) are its stability,…
reviewer2256927 - PeerSpot reviewer
Head of Information Security, Cyber Defense and IT Risk Management at HCT. at a transportation company with 201-500 employees
A solid SIEM solution that should improve technical support and online resources to be easier to use
A big problem with the product is that we don't have much professional experience in Israel installing, implementing, and integrating this product. There is not enough of a knowledge base. There is no support for this product in this country, so problems have to be resolved through global technical teams. We like to work locally because of the language, and when the product is only supported outside the country, it's a little difficult to implement and use this product. Moreover, AI is something that must be added immediately. Artificial intelligence is a part of the competitors' products, and it's not been implemented for us.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We've had great feedback from our customers about SevOne support. They're willing to set up a remote session upon request. You have to go through three tiers of support with most vendors, and they ask a lot of screening questions before they will do a remote session. You need to spend a lot of time before an engineer will host a remote session to look at your problematic system."
"Customer Service: Excellent, customer service is 10/10."
"We have benefited mainly from the use of the dashboard interface. It makes the network visually interesting for other people who are not in the network. A lot of people are not network techies who understand streams in the network. Based on location, we have streams coming in and out. They can see visually when there is some problem. They don't need to understand all the network technology behind it to be able to understand if everything is working well or if there is a problem."
"With this tool it is interesting to show the info to the client and explain where the traffic is."
"On any outage, SevOne is pretty quick to send an alert, and we've got an operations center that consumes the alert and sends it to the device owners so that they can minimize the time of impact of that alert."
"Customer Service: Fantastic – responsive."
"SevOne is one of the biggest strategic investments we've made; it just works, it just does what we want with no fuss about it."
"One of the solution's biggest strengths is its capacity management performance, with out-of-the-box reports through NMS, as well as its ability to collect NetFlow-related data from devices. The collection of network performance and flow data is important because we have many critical business applications."
"Their customer service is excellent, one of the best."
"The most valuable features are the packet decoder, log decoder, and concentrator."
"Prior to implementing the solution, the customers had no visibility of their assets, however, after adopting the solution, they have gained complete visibility over all their assets, including a comprehensive understanding of the network and attack symptoms."
"It's quite economical compared to other solutions in the market."
"The software is scalable to whatever is required, and you can also put a lot of resources in the cloud."
"Setting up NetWitness is straightforward. There are multiple connectors, including standard and specialized connectors. One purpose of the connectors is the enhanced capability integrate the custom applications. NetWitness comes with E6 appliances and application images that we use for the initial configurations and for the OS stack information. From there, you can consider the correlation rules, integrate the different log sources, and easily create correlation rules and backlog reports."
"Once it is deployed and you are used to it, you can do whatever you want."
"The product's initial setup phase was not at all difficult."
 

Cons

"The GUI: both the dashboard/user view and the admin tool."
"Features like SMS support and a faster way to create objects in calculation editor would be good."
"User-friendly, multi-tenancy."
"There is room for improvement in the integration with different vendors and the reporting capabilities."
"In the area of server monitoring, it has some areas for improvement."
"The support is excellent, but the features are average."
"Setup was very complex as there were issues with the device pipes. We needed a lot of intervention and technical assistance."
"We initially had issues getting the product to accommodate the number of network devices to monitor."
"I believe they could improve their support, there are often delays."
"The implementation needs assistance."
"The solution is pretty complex to set up. Comparatively, I have worked on IBM QRadar and Splunk; they are much easier to set up."
"We have encountered issues with unresolved crashes."
"If we have the ability to run a dynamic analysis through malware in the same suite, it would be great to have a sandbox solution to analyze malware through dynamic analysis."
"Advance monitoring and alerting feature is not stable (Event Stream Analysis)."
"The initial setup is very complex and should be simplified."
"Technical support could be improved."
 

Pricing and Cost Advice

"The tool is not expensive. We were able to negotiate with SevOne on pricing."
"The pricing has not evolved with the market, which is one of the reasons we are moving to a new product."
"A blocking point is the high upfront cost because it is challenging to get it accepted and the purchase approved."
"Prices per license are not huge, but they exist."
"For the value that you get from SevOne, it's worth the price. There are a lot of cheaper alternatives on the market, and even free options. But they require more staff, more resources, and engineers with more advanced knowledge of monitoring. That's what makes SevOne worth the price."
"The pricing has been fair."
"There are different options available for licensing, with the per-device option being more expensive but more flexible."
"Although I don't have exact details in terms of cost, my experience has been that SevOne is willing to make a deal with the customer."
"We have yearly licensing costs. The license fee can be based on the volume of EPS. Some organizations may have, as a gentlemanly gesture, 10,000 EPS and get a 3,000 EPS license but actually use 5,000 EPS."
"The licenses are good but the cost is very expensive."
"This is a pricey solution; it's not cheap."
"Compared to the competition, the is price is not that high."
"It is cheap."
"It’s cheaper to run virtual machines in a VMware environment."
"The tool is very expensive, so I rate the pricing a ten out of ten. The solution has an annual subscription."
"RSA NetWitness Logs and Packets do not have a subscription model, it's a one-time purchase. There is only a perpetual license."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
13%
Manufacturing Company
11%
Comms Service Provider
6%
Construction Company
13%
Financial Services Firm
11%
Comms Service Provider
9%
Outsourcing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise6
Large Enterprise45
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
 

Questions from the Community

What needs improvement with SevOne Network Data Platform?
There is room for improvement in the integration with different vendors and the reporting capabilities. It would be beneficial to have out-of-the-box integration with third-party vendors and improv...
What is your primary use case for SevOne Network Data Platform?
The primary use case of IBM SevOne Network Performance Management (NPM) ( /products/ibm-sevone-network-performance-management-npm-reviews ) is network monitoring. It helps to maintain the infrastru...
What advice do you have for others considering SevOne Network Data Platform?
To compete with custom-built tools, IBM SevOne Network Performance Management (NPM) should accommodate the desired features and be timely in the delivery of feature updates. I would rate the overal...
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
 

Also Known As

SevOne
RSA Security Analytics
 

Overview

 

Sample Customers

ATOS, Devereux, Spark New Zealand, Access4, Rogers Communication, Lumen (formerly known as CenturyLink)
Los Angeles World Airports, Reply
Find out what your peers are saying about IBM SevOne Network Performance Management (NPM) vs. NetWitness Platform and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.