IBM SevOne Network Performance Management (NPM) vs Security Onion comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between IBM SevOne Network Performance Management (NPM) and Security Onion based on real PeerSpot user reviews.

Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed IBM SevOne Network Performance Management (NPM) vs. Security Onion Report (Updated: April 2024).
769,630 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The comprehensiveness of this solution's collection of network performance and flow data is one of the basics in the field for what it does. It meets all of our needs. So for all those areas, for the most straightforward collection capabilities, right up to NetFlow and even telemetry, it meets all those demands. Not only just basic or fundamental SNMP collection capability, but the product also supports what we need for the future with telemetry streaming. So it's very comprehensive.""Its ability to monitor practically any type of network device via SNMP is most valuable. This is the main functionality that we're using. If a network device exposes a metric, such as interface utilization, SevOne will monitor it for us.""The out of the box reports and workflows are pretty good and they meet our requirements well.""We have benefited mainly from the use of the dashboard interface. It makes the network visually interesting for other people who are not in the network. A lot of people are not network techies who understand streams in the network. Based on location, we have streams coming in and out. They can see visually when there is some problem. They don't need to understand all the network technology behind it to be able to understand if everything is working well or if there is a problem.""Flexible architecture: You can extend the system and its capacity by attaching another cluster pair.""In 90% of the cases, new devices are plug-and-play, so when a new version comes out then SevOne has support for it out of the box.""Scalability. I have never had to worry about how to handle really big environments.""We find that the reporting is particularly valuable in terms of not only communicating with our peer teams but also with the executives."

More IBM SevOne Network Performance Management (NPM) Pros →

"Security Onion is the most mature solution in the market.""The most valuable feature of Security Onion for security monitoring is its ability to find infected ports.""We use Security Onion for internal vulnerability assessment."

More Security Onion Pros →

Cons
"High-frequency polling is data-intensive because you're pulling more. If SevOne could figure out a way to manage the impact of high-frequency polling on the system, that would be very popular.""With the administrative management of the appliance, if some object appears from SevOne because something changed in the network or whatever, then as an administrator you will not be aware. If you are using this object in a report, this object will disappear from the report and you will not be aware of it. So, if you have 1,000 reports, you cannot always check these reports everyday to see if objects are missing or information has disappeared. We don't have any information on alerts, saying that something is happening there and maybe we need to take action. If an object was replaced by another one, or if a link was replaced by another one, then the graph needs to be changed because it doesn't exist in the graph anymore. However, we don't have this information.""There are some tweaks and enhancements that I've already requested. One is to be able to make changes per device rather than as a global setting. That has to do with naming. It's minor.""Would benefit with the addition of AI modules for proactive data insights.""SevOne should work with the graphs legend functionality.""The customizations are very hard. The person doing it has to be very good at analytics and has to be very good in all languages""Their virtualization solution is not compatible with our Kubernetes environment, which is one of the reasons we are ending our relationship with them.""The user management features need to be improved. It would be nice if we had more granular control, or layers of control, out of the box."

More IBM SevOne Network Performance Management (NPM) Cons →

"Security Onion's user interface could be improved.""The initial setup of the solution is a little bit difficult.""The product is not easy to learn."

More Security Onion Cons →

Pricing and Cost Advice
  • "Have a bank of licenses, because it is about the number of objects (RAM, ports, CPU, etc.)."
  • "Choose a SevOne partner who can provide SevOne as a service and can deliver professional services and maintenance."
  • "It is inexpensive compared to other monitoring tools."
  • "Prices per license are not huge, but they exist."
  • "There are cheaper solutions available."
  • "The pricing has been fair."
  • "Many tools price things based on the number of KPIs that you're collecting around a device. In many cases, there could be hundreds of metrics that you need to collect. SevOne provides device-level pricing. That gives us the flexibility to turn on, and expand on, the metrics that we're collecting around those devices, without taking a financial hit."
  • "The pricing has not evolved with the market, which is one of the reasons we are moving to a new product."
  • More IBM SevOne Network Performance Management (NPM) Pricing and Cost Advice →

  • "Security Onion is a free solution."
  • "It is an open-source solution."
  • "Security Onion is an open-source solution."
  • More Security Onion Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Log Management solutions are best for your needs.
    769,630 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:I like the tool’s scalability and real-time reports. Earlier, we struggled to give real-time reports to clients. I also like the tool’s deployment model where we can deploy it either on-premises or… more »
    Top Answer:The tool is not expensive. We were able to negotiate with SevOne on pricing.
    Top Answer:The tool needs improvement in non-Cisco SD-WAN.
    Top Answer:The most valuable feature of Security Onion for security monitoring is its ability to find infected ports.
    Top Answer:Security Onion is an open-source solution. On a scale from one to ten, where ten is expensive and one is cheap, I rate the solution's pricing a six out of ten.
    Top Answer:The initial setup of the solution is a little bit difficult.
    Ranking
    31st
    out of 95 in Log Management
    Views
    1,297
    Comparisons
    655
    Reviews
    4
    Average Words per Review
    1,421
    Rating
    8.5
    33rd
    out of 95 in Log Management
    Views
    3,263
    Comparisons
    2,753
    Reviews
    3
    Average Words per Review
    330
    Rating
    7.7
    Comparisons
    Also Known As
    SevOne
    Learn More
    Overview

    The IBM® SevOne Network Performance Management (IBM SevOne NPM) solution helps you spot, address, and prevent network performance issues early with machine learning-powered analytics from a single source. Boost network performance and improve your user application experience by proactively monitoring your multivendor end-to-end network across enterprise, communication, and managed service provider networks.

    Transform raw network performance data into intelligent and actionable insights. The IBM SevOne NPM solution goes beyond detection, combining industry-leading expertise and advanced technology to help your IT team plan and optimize your network and act on what matters: improving network performance to provide an exceptional customer experience.

    For further information, please visit www.ibm.com/cloud/sevo...



    Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring, and log management. The easy-to-use Setup wizard allows you to build an army of distributed sensors for your enterprise in minutes!
    Security Onion includes a native web interface with built-in tools analysts use to respond to alerts, hunt for evil, catalog evidence into cases, monitor grid performance, and much more. Additionally, third-party tools, such as Elasticsearch, Logstash, Kibana, Suricata, Zeek (formerly known as Bro), Wazuh, Stenographer, CyberChef, NetworkMiner, and many more are included.

    Sample Customers
    ATOS, Devereux, Spark New Zealand, Access4, Rogers Communication, Lumen (formerly known as CenturyLink)
    Information Not Available
    Top Industries
    REVIEWERS
    Comms Service Provider37%
    Media Company11%
    Financial Services Firm11%
    Computer Software Company9%
    VISITORS READING REVIEWS
    Computer Software Company20%
    Financial Services Firm15%
    Manufacturing Company12%
    Retailer5%
    VISITORS READING REVIEWS
    Computer Software Company13%
    Government11%
    University10%
    Comms Service Provider10%
    Company Size
    REVIEWERS
    Small Business7%
    Midsize Enterprise11%
    Large Enterprise81%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise14%
    Large Enterprise68%
    VISITORS READING REVIEWS
    Small Business29%
    Midsize Enterprise19%
    Large Enterprise52%
    Buyer's Guide
    IBM SevOne Network Performance Management (NPM) vs. Security Onion
    April 2024
    Find out what your peers are saying about IBM SevOne Network Performance Management (NPM) vs. Security Onion and other solutions. Updated: April 2024.
    769,630 professionals have used our research since 2012.

    IBM SevOne Network Performance Management (NPM) is ranked 31st in Log Management with 52 reviews while Security Onion is ranked 33rd in Log Management with 3 reviews. IBM SevOne Network Performance Management (NPM) is rated 8.6, while Security Onion is rated 7.6. The top reviewer of IBM SevOne Network Performance Management (NPM) writes "We can get a new vendor certified and monitored in our system significantly faster than before". On the other hand, the top reviewer of Security Onion writes "A mature and affordable solution that is easy to install and easy to update". IBM SevOne Network Performance Management (NPM) is most compared with Instana Infrastructure Monitoring, LogicMonitor, SolarWinds Network Device Monitor, Splunk Enterprise Security and SolarWinds NPM, whereas Security Onion is most compared with Wazuh, Elastic Stack, TheHive, Splunk Enterprise Security and Graylog. See our IBM SevOne Network Performance Management (NPM) vs. Security Onion report.

    See our list of best Log Management vendors.

    We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.