LogRhythm SIEM vs Stackify comparison

Read 6 Stackify reviews

936 Views
262 Comparison Views

71% willing to recommend

LogRhythm SIEM

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 9, 2024

Stackify and LogRhythm SIEM are solutions competing in the monitoring and security domain. Stackify seems to have the advantage in cost-effectiveness and customer support, while LogRhythm SIEM leads with its feature-rich security capabilities.

Features: Stackify provides application performance monitoring tools, developer workflow optimization, and detailed insights for improving productivity. LogRhythm SIEM offers threat detection, security analytics, and comprehensive response mechanisms.

Room for Improvement: Stackify users seek advanced security enhancements, more integrations, and broader utility. LogRhythm SIEM users desire improved user-friendliness, reduced system overhead, and efficiency in operations.

Ease of Deployment and Customer Service: Stackify offers straightforward setup and responsive support for easy integration. LogRhythm SIEM requires specialized knowledge for deployment yet provides comprehensive support.

Pricing and ROI: Stackify boasts competitive pricing and straightforward ROI, appealing to cost-sensitive buyers. LogRhythm SIEM involves higher initial costs but delivers significant long-term ROI with its security features.

To learn more, read our detailed LogRhythm SIEM vs. Stackify Report (Updated: September 2025).

LogRhythm SIEM vs. Stackify

Download the complete report

Helped 869,760 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

LogRhythm SIEM

Ranking in Log Management

13th

Average Rating

8.4

Reviews Sentiment

6.4

Number of Reviews

175

Ranking in other categories

Security Information and Event Management (SIEM) (8th)

Stackify

Ranking in Log Management

58th

Average Rating

7.8

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (60th), IT Infrastructure Monitoring (59th)

Mindshare comparison

As of October 2025, in the Log Management category, the mindshare of LogRhythm SIEM is 2.3%, down from 2.6% compared to the previous year. The mindshare of Stackify is 0.2%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management Market Share Distribution
Product	Market Share (%)
LogRhythm SIEM	2.3%
Stackify	0.2%
Other	97.5%

Log Management

Featured Reviews

SumitKumar20

Security Engineer at Granicus Inc.

Tool consistently aids in effective threat detection and monitoring but could benefit from improved log source management and resource optimization

One major area for improvement in LogRhythm SIEM is the lack of volume measurement capability in terms of storage. There is currently no way to determine how much data is being consumed in terms of gigabytes, terabytes, or petabytes from particular devices or environments. This information is crucial for planning future storage needs and scalability. The system monitor (collector) agent has issues with resource consumption. Even when not actively collecting data, the agent continues to consume significant CPU and memory resources, which can be particularly problematic for small business environments with limited resources. LogRhythm SIEM could improve by adding more default device support. While they have good default settings for devices such as Palo Alto firewalls, custom log sources often require extensive work. Increasing the number of supported devices with built-in policies and functionality would reduce the need for custom work. Competitive SIEM tools often provide more comprehensive coverage for various devices and vendors.

Read full review

Moses Arigbede

Head of DevOps at Partsimony

Easy to set up with great custom dashboards but needs to improve non-.NET infrastructure

They need to improve non-.NET infrastructure. We always had difficulty when it comes to reporting or metrics that come from Linux operating systems and Docker containers. For anything that runs within the Unix environment, we always had problems with them, however, if it was a document-based application, Stackify was 100%, it gave everything. Now, the aggregation agent, the metric agent for Stackify for Linux, collects everything. When I say everything, I mean, everything. It collects so much information that we now started to term it as useless data as all that ingestion will just come in and overwhelm your log retention limit for the month and really this spike up your cost at the end of the month. You'll need to do a lot in order to train down the data coming in from all your Linux environments, to get to what you really need, which actually takes some time as well. I would like to be able to see metrics about individual running containers on the host machines. Stackify has not really gotten that right, as far as I'm concerned. Netdata has done a better job and New Relic has also done a better job. They need to improve on that. We need to be able to see the individual resource usage of containers running within a particular host.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We use this solution to examine disparate log sources and provide a cohesive method to search for anomalous behavior."

"This solution has improved our organization in many different ways. The biggest benefit is being able to view all information in one dashboard instead of having to look at several different applications and dashboards. I can see information across our entire environment and every aspect of our network."

"Compliance reporting is another great feature of this product. It has built in reports right out of the box."

"Its ability to work with all different sorts of log sources has been extremely valuable."

"LogRhythm SIEM offers advanced features such as AI engine modules, machine learning, and threat intelligence integration, which help reduce false positives. Advanced analytics streamlines incident response processes, enabling incident responders to prioritize and automate alerts."

"SOAR is integrated with the dashboard that we use for threat management. Because it's all integrated, it is useful for us when we deploy something on-prem."

"The most valuable features would be the automation, reporting, and the support."

"It's positively affected our overall rate of efficiency."

More LogRhythm SIEM pros

"The solution is stable and reliable."

"The filter feature on Stackify is one of the features I found valuable. It's awesome. When I want to get the application logs, the solution gives me many filters. For example, if I want to get logs from my test environment, the option is there for me to select the environment from Stackify, and you can also select the particular application, and you'll see the information you need there. The filter feature alone and the fact that Stackify offers a lot of different filters is what I like the most about the solution because I've used other tools with the filter feature, but the filtering was very difficult, versus Stackify that has good filtering. On Stackify, you can filter the information by the last one hour, or the last four hours, and you can also select the date range and specify the timestamp, then the solution will give you the information based on the date range you specified. Another feature I found valuable on Stackify is its rating feature because it tells you how your application is faring. For example, a rating of A means excellent, while a rating of F means very bad, or that your application is not doing well at all. The ratings are from A to F. I also like that Stackify helps you in terms of load management because the solution gives you information on overutilized resources. These are the most valuable features of the solution."

"The deployment is very fast."

"The performance dashboard and the accurate level of details are beneficial."

Cons

"When we originally got LogRhythm, their tech support was fantastic, and I loved them. Now, we don't quite get as quick of a response. I've been disappointed in the more recent tech support. When you call in, they'll say that they will get you somebody, and you'll finally get someone who will contact you back a day or so later. Whereas before, I would get help right away."

"We're still struggling to get a real return on it and finding something that isn't false noise."

"We've had issues with scaling and local support."

"The web and on-premise console interface should be the same instead of having a separate engine for each."

"LogRhythm SIEM needs improvement in data grouping and manipulation capabilities."

"The solution is likely not the best option for a smaller organization."

"We do about 750 million a day and some days we do 715 million. Some days we do 820 million or 1.2 billion. But there's no way to drill in and find out: "Where did I get 400,000 extra logs today?" What was going on in my environment that I was able to absorb that peak? I have no way to identify it without running reports, which will produce a long-running PDF that I have to somehow compare to another long-running PDF... I would like to see like profiling behavior awareness around systems like they've been gunned to do around users with UEBA."

"LogRhythm NextGen SIEM is currently based only on the Windows platform. This means that some of our customers have to purchase a Windows license elsewhere. If LogRhythm can move to a Linux platform or a proprietary platform, it would be very helpful."

More LogRhythm SIEM cons

"The search feature could be improved."

"I've not used Stackify for a while, and I'm currently using a solution now that's not as good as Stackify. Among the solutions I've been using so far, Stackify has been one of the best for me, but there's always room for improvement. For example, I don't know if it's just me, but when I try to get the log from Stackify, sometimes it doesn't appear in real-time. It takes a few minutes before the logs appear. When I redeploy my solution and the application starts, I don't see the logs immediately, and it would take two to three minutes before I see the logs. I don't know if other customers have a similar experience. It's the wait time for the logs to appear that's a concern for me, could be improved, and is what the Stackify team should be looking into. In terms of any additional feature that I'd like added to the solution, I'm not sure if Stackify has a way to export logs out. I've been trying to do it. On the solution, you can click on a spiral-like icon and it shows you the entire error, and I'd prefer an export button that would let me download the error and save that into a text file, for example, so it'll be available on my local machine for me to reference it, especially because the log keeps going and as you're using the solution, the system keeps pushing messages on to Stackify, so if I'm looking at a particular error at 12:05 PM, for example, by the time I go back to my system and would like to revisit the error at 12:25 PM, on Stackify, the logs would have gone past that level and I won't see it again which makes it difficult. When you now go back to that timestamp, you don't tend to see it immediately, but if the solution had an export feature for me to save that particular error information on my local machine for reference at a later time, I won't have to go back to Stackify. I just go to that log, specifically to that particular export that I've received on my local machine. I can get it and review it, and it would be easier that way versus me going back to Stackify to find that particular error and request that particular information."

"I would like to be able to see metrics about individual running containers on the host machines."

"It should be easily scalable and configurable in different instances."

Pricing and Cost Advice

"We did a five-year agreement. We pay close to a quarter of a million dollars for our solution."

"It is a very cost-effective solution."

"The nice thing about LogRhythm is you can either use the agents, getting a certain number of agents with your license depending on how you want to go, and those agents do a lot of cool things, or you can use CIS Log host, then you have like an unlimited number of them."

"The support which allows more customized to the environment when we are deploying new systems is called Professional Service and is very expensive. The technical annual support and there is an annual fee."

"The product is inexpensive than other tools."

"I would recommend that whatever sales quotes to them upfront, they will probably go up. Because they are probably going to outgrow that very quickly or once they start getting everything into it, they are going to have to move up anyway."

"I would rate the pricing 4 out of 5. There are no additional costs to the standard licensing fees."

"If you don't have your staff, absolutely look into the co-pilot and factor that into your cost evaluation."

More LogRhythm SIEM pricing and cost advice

"The price is variable. It depends on how much data we have received in that particular month. Usually, it goes up to $2,000, or, at times, $3,000 USD per month."

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

869,760 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Government

10%

Manufacturing Company

Financial Services Firm

14%

Media Company

Comms Service Provider

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	38
Midsize Enterprise	38
Large Enterprise	83

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	2
Large Enterprise	2

Questions from the Community

What is the difference between log management and SIEM?

Rony, Daniel's answer is right on the money. There are many solutions for each in the market, a lot depends upon your ability to manage such tools and your budget. A small operation may be best s...

See all answers

What needs improvement with LogRhythm NextGen SIEM?

See all answers

What do you like most about LogRhythm SIEM?

I find LogRhythm's log management capabilities to be beneficial.

See all answers

Ask a question

Earn 20 points

Comparisons

IBM Security QRadar vs LogRhythm SIEM

Compared 12% of the time

Splunk Enterprise Security vs LogRhythm SIEM

Compared 10% of the time

Grafana Loki vs LogRhythm SIEM

Compared 6% of the time

Fortinet FortiSIEM vs LogRhythm SIEM

Compared 5% of the time

VMware Aria Operations for Logs vs LogRhythm SIEM

Compared 4% of the time

More LogRhythm SIEM Competitors

New Relic vs Stackify

Compared 46% of the time

Dynatrace vs Stackify

Compared 23% of the time

Splunk Enterprise Security vs Stackify

Compared 18% of the time

Datadog vs Stackify

Compared 14% of the time

More Stackify Competitors

Product Reports

LogRhythm SIEM

Download LogRhythm SIEM product report

Download Stackify product report

Also Known As

LogRhythm NextGen SIEM, LogRhythm, LogRhythm Threat Lifecycle Management, LogRhythm TLM

No data available

Overview

LogRhythm SIEM Platform is an award-winning platform in security analytics. With more than 4,000 customers globally, LogRhythm SIEM is an integrated platform that helps security operations teams protect critical infrastructure and information from emerging cyberthreats. Ultimately, LogRhythm SIEM is an integrated set of modules that contribute to the security team’s fundamental mission: rapid threat monitoring, threat detection, threat investigation, and threat neutralization. LogRhythm SIEM is for organizations that require an on-premises solution and offers:

● Streamlined workflow

● Secure data access

● Real-time visibility

● A unified user experience

● Management customization

Security information and event management (SIEM) solutions have been evolving for over a decade; their core functionality still acts as the most effective foundation for any organization’s technology stack. A SIEM solution enables an organization to centrally collect data across its entire network environment to gain real-time visibility into activity that may pose a risk to the organization. SIEM technology addresses threats before they become significant financial risks while simultaneously helping better manage an organization’s assets.

LogRhythm SIEM has many key features and capabilities, including:

● High-Performance Log Management: LogRhythm SIEM offers structured and unstructured search capabilities which allows users to swiftly search across an organization’s vast data to easily find answers, identify IT and security issues, and troubleshoot issues. Users can efficiently process and index terabytes of log data daily.

● Network and Endpoint Monitoring: Forensic sensors allow users to gain deep visibility into endpoint and network activity. Users can see behavioral anomalies and better respond to incidents.

● SmartResponse™ Automation: LogRhythm SIEM allows users to centrally execute pre-staged actions that automate incident investigatory tasks and responses.

● Automated Machine Analytics: LogRhythm SIEM's AI Engine continuously analyzes all collected security incidents and forensic data. Security teams are delivered precise, real-time intelligence about risk-prioritized threats.

● Case and Security Incident Management: LogRhythm SIEM offers an integrated workflow so that threats don’t slip through the cracks. Collaboration tools help centrally manage and track investigations.

● User and entity behavior analytics (UEBA): Embedded deterministic UEBA monitoring helps protect against insider threats.

● Security orchestration, automation, and response (SOAR): LogRhythm SIEM includes our embedded SOAR solution to increase efficiency and higher-quality incident response with low mean time to response (MTTR).

Benefits to Using LogRhythm SIEM

● The platform offers great value to security and IT operations. Users have the ability to map their security and IT operations to existing frameworks such as NIST and MITRE ATT&CK.

● The platform offers broad integration across security and IT vendors: Users benefit from support for integration with hundreds of security and IT solutions. In turn, this further extends SIEM capabilities and data collection.

● The platform provides compliance adherence, enforcement, and reporting: The prebuilt compliance modules automatically detect violations as they occur and remove the burden of manually reviewing audit logs.

Reviews from Real Users

LogRhythm SIEM stands out among its competitors for a number of reasons. Two major ones are its ability to be customized and its quick performance of queries.

Jason G., a senior cybersecurity engineer, writes, "I have found the Advanced Intelligence Engine has provided the most value to us because we can customize alarms based on our requirements and have created hundreds of alarms that notify different people for different scenarios."

Andy W., principal consultant at ITSEC Asia, notes, “LogRhythm SIEM covers all our primary security analysis needs. It makes it easier for us to analyze threats and improves our response times. It's a versatile platform that performs queries fast compared to other SIEM solutions.”

Exabeam

Stackify is an application performance management (APM) solution that combines application performance monitoring with logs, errors, and reporting. It is a SaaS solution that is developer-focused. Users can quickly scan, identify, and repair issues with applications. Stackify APM offers valuable tools, such as Prefix and Retrace, which help to make it a comprehensive and valuable APM solution. Stackify is now part of the Netreo family of IT Infrastructure Management (ITIM), which is considered one of the fastest-growing IT organizations in the marketplace today.

Stackify Prefix

Stackify Prefix helps developers write better code, faster. The tool examines, tests, and approves code as it is being written. Almost every new application is code-perfect, negating the need for exhausting troubleshooting and frustrating time-consuming code review.

Prefix is able to discover poor-performing SQL queries, ORM queries, potential bottlenecks, and concealed exceptions prior to moving the application into production.

Prefix offers Summary Dashboards, intuitive suggestions, integrated logs, and distributed tracing. Distributed tracing expands visibility to cloud-native applications, microservices, and containers and can also provide additional transparency to cache services, web services, third-party services, and more. Users are able to easily move from logs to traces and back.

This valuable tool ensures developers are able to consistently release the best code possible in the least amount of time, while improving performance, productivity, and profitability.

Prefix is a very robust and easy-to-use tool. It can be used seamlessly with Linux, macOS, and Windows. Prefix integrates well with numerous languages, such as Java, Python, Ruby, PHP, Node.js, .Net, and .Net Core.

Stackify Retrace

Stackify Retrace is a user-friendly, trusted APM solution used in more than fifty countries worldwide. Users know that Retrace is able to ensure they can complete quicker, more efficient application development and consistently enhance overall application performance by suggesting important intuitive suggestions users need.

This solution is beneficial to both developers (Dev) and operations (Ops) personnel to learn to improve code and immediately finetune issues by:

Establishing effortless collaboration between Dev and Ops personnel via an easy-to-use GUI dashboard.
Delivering complete transparency of all stages of the application development process, from pre-development to production.
Utilizing performance protocols, such as error tracking, application logs, and code profiling, in real time in order to thoroughly understand how long a code will take to complete various tasks.
Improving overall efficiency and productivity by immediately discovering and repairing application issues.

Retrace Real User Monitoring (RUM) uses both front-end and back-end monitoring to give users a complete picture of what is going on with the applications. This intuitive dashboard displays performance with a complete breakdown of resource usage and integrates the server-side and client traces into one engaging, user-friendly, extensive view.

Retrace is an out-of-the-box solution that works seamlessly with Java stacks, PHP, Node.js, Ruby, Python, .Net, and .Net Core. It is also compatible with many of today’s popular frameworks, such as AWS, Azure, Elasticsearch, MongoDB, MySQL, Oracle, PostgreSQL, Redis, and SQL Server. Additionally, Retrace will work effectively with many cloud providers, containers, and languages, and offers excellent and easy integration with today's favorite tools such as Jira, Slack, Jenkins, and more.

Sample Customers

Macy's, NASA, Fujitsu, US Air Force, EY, Abbott, HD Supply, SAB Miller, UCLA, Raytheon, Amtrak, Cargill

MyRacePass, ClearSale, Newitts, Carbonite, Boston Software, Children's International, Starkwood Media Group, Fewzion

LogRhythm SIEM vs. Stackify