IBM SevOne Network Performance Management (NPM) vs syslog-ng comparison

IBM SevOne Network Performance Management (NPM) vs. syslog-ng

Download the complete report

Helped 850,236 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM SevOne Network Performa...

Ranking in Log Management

48th

Average Rating

8.4

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Network Monitoring Software (42nd), Server Monitoring (19th), IT Infrastructure Monitoring (46th), Cloud Monitoring Software (29th)

syslog-ng

Ranking in Log Management

19th

Average Rating

8.6

Reviews Sentiment

6.3

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of May 2025, in the Log Management category, the mindshare of IBM SevOne Network Performance Management (NPM) is 0.3%, up from 0.3% compared to the previous year. The mindshare of syslog-ng is 2.5%, down from 2.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Grzegorz Nowak

Solution Architect at Wingu

Improves infrastructure planning by helping us analyze network traffic

We use SevOne to collect and report on network flows SevOne improves infrastructure planning by helping us analyze network traffic. We can look at bandwidth for specific endpoints on the customer's network and analyze traffic to identify issues. For example, maybe some connectors are unavailable.…

Read full review

RyanVargas

Senior Director and Senior Systems Engineer (Dual Role), IT Infrastructure and Security at a financial services firm with 51-200 employees

It's a user-friendly open-source solution that can replace or augment a commercial product in some cases

I rate syslog-ng 10 out of 10. It's free and easy to use. It has built-in tools that help us index the various logs sent to it. It's a solid log product. If you're looking for a SIEM solution, syslog-ng will work as a stopgap measure at beginning of the project. It can also work as an injector for a true SIEM solution. You can send all the logs to syslog-ng and forward all the data to the SIEM solution after you've cleaned up the data and got the pertinent information. It's a good front end for a commercial SIEM solution, which becomes more expensive as you load more data into it. I would highly recommend syslog-ng for that use case. However, if you lack the expertise, you might need to go with a cloud-based SIEM instead. You need some in-house expertise or an outside consultant to manage it and set it up.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's given us the ability to create various real-time network performance reports and distribute them to any colleague who can access these reports immediately."

"The most valuable feature is the NMS because that's the core of the system. Without the NMS, the other tools aren't that usable."

"Scalability. I have never had to worry about how to handle really big environments."

"SevOne provides support for all universal connectors. They internally work with other data sources to get features implemented. We have an SD-WAN implementation and use other app data to monitor performance. If you pull that data into one centralized location, that is very useful for management."

"Data Insight reporting tool is the most valuable feature. They came up with it a couple of years ago. The most pleasing factor is the dark theme. You don't have a white background. It has templates that you can create for all kinds of reports that you can hit on the fly. It's much better printing of the reports. If you want to send PDFs to people, the reports are actually decent. Whereas for years, the old architecture of the PDFs was rubbish and even our customers said, "We have to manipulate your PDFs because they all have bad margin breaks. SevOne fixed that a couple of years ago with the new Data Insight. It's fantastic."

"One of the most valuable features is the graphs, which you can build instantly. I have used some open-source platforms in the past, but they are not as good. With SevOne, the sampling in the graph can be every few seconds, not just every few minutes, and that's really helpful. It's really fast."

"SevOne has rich API capabilities, giving us the flexibility to control what we collect and customize the collection, creation, and manipulation of now metrics as necessary."

"We've had great feedback from our customers about SevOne support. They're willing to set up a remote session upon request. You have to go through three tiers of support with most vendors, and they ask a lot of screening questions before they will do a remote session. You need to spend a lot of time before an engineer will host a remote session to look at your problematic system."

More IBM SevOne Network Performance Management (NPM) pros

"The ability to extract and store the logs is the most valuable feature of syslog-ng."

"For us, the most valuable feature is the use of compound search for searching logs at a specific time, by a specific user, or specific behavior."

"Syslog-ng has a separate config file in addition to the core configuration."

"Syslog-ng provides easy access to all my logs. It helps me show managers and other clients precisely where an incident occurred. I also like it because you can integrate syslog-ng with multiple solutions to allow real-time monitoring."

"Syslog-ng has built-in features that we can use to create alerts for a SIEM solution. It isn't a true SIEM solution, but it's sufficient for the time being."

Cons

"In terms of having a complete view of our network performance, I would rate it a nine out of 10. The reason for not giving it a 10 is that there is no packet capture associated with SevOne, but we do have other tools in place to do that."

"You need to plan integrations. That has been the biggest bug with SevOne so far. For the things that SevOne pulls directly, those are easy to understand, modify, and put into the database. For things that need to use the Universal Collector or xStats, you need to plan that stuff well in advance."

"One area that requires a little bit of improvement is the topology of visualization and being able to map out connections, end-to-end. It's able to do that, but it's not as impressive as we would like it to be. We would like to understand the different interface types and the connection points better, through the visualization. Heatmaps also need further development."

"Their virtualization solution is not compatible with our Kubernetes environment, which is one of the reasons we are ending our relationship with them."

"There are a lot of pain points. My main problem is that we don't have a high availability system. There are 20 peers. We're going to lose the end-of-life appliances that are old. If we lose a peer and it doesn't come back, we lose all that data. The reason we don't have high availability is because it's double the charge."

"The method of searching for SIP and the way to create the groups."

"With the administrative management of the appliance, if some object appears from SevOne because something changed in the network or whatever, then as an administrator you will not be aware. If you are using this object in a report, this object will disappear from the report and you will not be aware of it. So, if you have 1,000 reports, you cannot always check these reports everyday to see if objects are missing or information has disappeared. We don't have any information on alerts, saying that something is happening there and maybe we need to take action. If an object was replaced by another one, or if a link was replaced by another one, then the graph needs to be changed because it doesn't exist in the graph anymore. However, we don't have this information."

"Would benefit with the addition of AI modules for proactive data insights."

More IBM SevOne Network Performance Management (NPM) cons

"There is always the potential for additional integration and protocol extensions."

"The filtering has room for improvement."

"There is room for improvement in terms of observability."

"Syslog-ng has built-in features that we can use to create alerts for a SIEM solution. It isn't a true SIEM solution, but it's sufficient for the time being."

"It's hard to find people who know how to use syslog-ng. I often find problems with configurations, and solutions aren't integrated correctly with syslog-ng. For example, there might be data with extra decimals, or the collector agents are incorrectly named. It isn't a problem with the solution; it's a lack of professionals."

Pricing and Cost Advice

"There are cheaper solutions available."

"Prices per license are not huge, but they exist."

"Have a bank of licenses, because it is about the number of objects (RAM, ports, CPU, etc.)."

"The pricing has been fair."

"Many tools price things based on the number of KPIs that you're collecting around a device. In many cases, there could be hundreds of metrics that you need to collect. SevOne provides device-level pricing. That gives us the flexibility to turn on, and expand on, the metrics that we're collecting around those devices, without taking a financial hit."

"A blocking point is the high upfront cost because it is challenging to get it accepted and the purchase approved."

"The pricing has not evolved with the market, which is one of the reasons we are moving to a new product."

"For the value that you get from SevOne, it's worth the price. There are a lot of cheaper alternatives on the market, and even free options. But they require more staff, more resources, and engineers with more advanced knowledge of monitoring. That's what makes SevOne worth the price."

More IBM SevOne Network Performance Management (NPM) pricing and cost advice

"Syslog-ng is a free open-source solution."

"Syslog-ng is open-source."

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

850,236 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

17%

Manufacturing Company

15%

Computer Software Company

14%

Legal Firm

Government

13%

Computer Software Company

13%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What needs improvement with SevOne Network Data Platform?

There is room for improvement in the integration with different vendors and the reporting capabilities. It would be beneficial to have out-of-the-box integration with third-party vendors and improv...

What is your primary use case for SevOne Network Data Platform?

The primary use case of IBM SevOne Network Performance Management (NPM) ( /products/ibm-sevone-network-performance-management-npm-reviews ) is network monitoring. It helps to maintain the infrastru...

What advice do you have for others considering SevOne Network Data Platform?

To compete with custom-built tools, IBM SevOne Network Performance Management (NPM) should accommodate the desired features and be timely in the delivery of feature updates. I would rate the overal...

What do you like most about syslog-ng?

For us, the most valuable feature is the use of compound search for searching logs at a specific time, by a specific user, or specific behavior.

What is your experience regarding pricing and costs for syslog-ng?

The pricing is in the middle. I would rate the pricing a six out of ten, with one being expensive and ten being cheap.

What needs improvement with syslog-ng?

There is room for improvement in terms of observability. Additionally, a possible new feature could be Kafka integration.

Instana Infrastructure Monitoring vs IBM SevOne Network Performance Management (NPM)

Comparisons

Compared 11% of the time

NETSCOUT nGeniusONE vs IBM SevOne Network Performance Management (NPM)

Compared 9% of the time

SolarWinds Network Device Monitor vs IBM SevOne Network Performance Management (NPM)

Compared 9% of the time

Splunk Enterprise Security vs IBM SevOne Network Performance Management (NPM)

Compared 9% of the time

Zabbix vs IBM SevOne Network Performance Management (NPM)

Compared 8% of the time

More IBM SevOne Network Performance Management (NPM) Competitors

Graylog vs syslog-ng

Compared 30% of the time

SolarWinds Kiwi Syslog Server vs syslog-ng

Compared 26% of the time

Grafana Loki vs syslog-ng

Compared 13% of the time

Elastic Stack vs syslog-ng

Compared 5% of the time

Cribl vs syslog-ng

Compared 4% of the time

More syslog-ng Competitors

Product Reports

IBM SevOne Network Performance Management (NPM)

Download IBM SevOne Network Performance Management (NPM) product report

IBM SevOne Network Performance Management (NPM) report

Log Management

Download syslog-ng product report

Also Known As

SevOne

No data available

Overview

The IBM® SevOne Network Performance Management (IBM SevOne NPM) solution helps you spot, address, and prevent network performance issues early with machine learning-powered analytics from a single source. Boost network performance and improve your user application experience by proactively monitoring your multivendor end-to-end network across enterprise, communication, and managed service provider networks.

Transform raw network performance data into intelligent and actionable insights. The IBM SevOne NPM solution goes beyond detection, combining industry-leading expertise and advanced technology to help your IT team plan and optimize your network and act on what matters: improving network performance to provide an exceptional customer experience.

For further information, please visit www.ibm.com/cloud/sevo...

IBM

Optimizing SIEM
syslog-ng is the log management solution that improves the performance of your SIEM solution by reducing the amount and improving the quality of data feeding your SIEM.

Rapid search and troubleshooting
With syslog-ng Store Box, you can find the answer. Search billions of logs in seconds using full text queries with Boolean operators to pinpoint critical logs.

Meeting compliance requirements
syslog-ng Store Box provides secure, tamper-proof storage and custom reporting to demonstrate compliance.

Big data ingestion
syslog-ng can deliver data from a wide variety of sources to Hadoop, Elasticsearch, MongoDB, and Kafka as well as many others.

Universal log collection and routing
syslog-ng flexibly routes log data from X sources to Y destinations. Instead of deploying multiple agents on hosts, organizations can unify their log data collection and management.

Secure data archive
syslog-ng Store Box provides automated archiving, tamper-proof encrypted storage, granular access controls to protect log data. The largest appliance can store up to 10TB of raw logs.

One Identity

Sample Customers

ATOS, Devereux, Spark New Zealand, Access4, Rogers Communication, Lumen (formerly known as CenturyLink)

Tecnocom, University of Victoria, University of Exeter, Datapath

IBM SevOne Network Performance Management (NPM) vs. syslog-ng