

Trellix ESM and Logz.io are two prominent solutions in the security information and event management (SIEM) category. While Logz.io appears to have the upper hand due to its advanced features, Trellix ESM offers a cost-effective solution.
Features: Trellix ESM provides integrated threat intelligence, customizable dashboards, and comprehensive support. Logz.io features machine learning capabilities, extensive integrations with other tools, and advanced analytics, making it more robust for complex environments.
Room for Improvement: Trellix ESM requires better reporting functionalities, enhanced real-time analytics, and improved log management. Logz.io needs improvements in log storage capacity, more detailed documentation, and optimized data ingestion processes.
Ease of Deployment and Customer Service: Trellix ESM is known for straightforward deployment and commendable customer support. Logz.io's deployment is slightly more complex, but it offers responsive customer service to mitigate these challenges.
Pricing and ROI: Trellix ESM offers a lower setup cost and faster ROI, making it financially attractive. Logz.io, although higher in initial cost, provides long-term value through its rich features and robust performance.
I would rate support for Trellix ESM 10 out of 10 because if we connect with the support in the UK, we get excellent support.
It's rare for me to need them unless it's an issue with licensing, and they are the best in that regard.
Scalability is quite easier with Trellix ESM, because all we need to do is add more receivers to it, so it can go to any point.
If there is any device which is not covered, there should not be any additional charges for writing the custom parsers on that.
The weakest point is it doesn't cover almost all the devices, so the customer has to be more dependent on the parsers to be written by the Professional Services team.
| Product | Mindshare (%) |
|---|---|
| Trellix ESM | 1.2% |
| Logz.io | 0.8% |
| Other | 98.0% |

| Company Size | Count |
|---|---|
| Small Business | 3 |
| Midsize Enterprise | 1 |
| Large Enterprise | 7 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 6 |
| Large Enterprise | 25 |
Logz.io provides a robust platform designed to streamline log monitoring, offering features like real-time dashboards and AI Insights. It ensures efficient management of environments such as Kubernetes, enhancing operational effectiveness and cost management.
Logz.io is built on an open-source foundation, facilitating quick setup and adaptability for users. Its real-time dashboards are accessible across multiple sub-accounts, allowing seamless scaling and integration into existing services. Log Patterns and Drop Filters improve log clarity by reducing noise, while Kibana visualizations enhance data analysis. Logz.io also supports simultaneous views of metrics and logs, optimizing Kubernetes management and improving logging efficiency. Continuous enhancements in access control, API performance, and documentation are areas for development. Improving AI capabilities and offering better data retention and update management are key focuses for future upgrades.
What are the key features of Logz.io?Logz.io is widely used in industries for log collection, monitoring, and aggregation in environments including cloud and AWS. It's leveraged for monitoring application health, security compliance, live game observability, and server performance. Organizations utilize archived logs for issue resolution and leverage dashboards to monitor microservices, ensuring system stability in development and production environments.
Trellix ESM is an innovative tool designed to enhance security management through its seamless integration, user-friendly deployment, customizable dashboards, and robust threat detection capabilities.
Trellix ESM is essential for comprehensive security management, ensuring effective threat detection and analysis. It integrates seamlessly with third-party systems and provides advanced correlation and security visualization. Capable of managing logs and monitoring network traffic, it enhances security across diverse environments, making it indispensable for security operations. Despite needing improved SaaS integration, API documentation, and addressing stability issues, it remains crucial for user-friendly deployment and incident analysis. Its benefits are complemented by comprehensive reporting and real-time malware protection.
What Are Trellix ESM's Most Important Features?In diverse industries, Trellix ESM is deployed for central log management and security operations, monitoring servers, virtual machines, and hybrid-cloud environments. Companies use it for managed security services and threat detection, analyzing logs and securing data. It finds great use in monitoring network vulnerabilities and event correlation, enabling service providers and MSSPs to effectively manage endpoints and hybrid-cloud setups as well as gather logs from servers and firewalls, offering abundant transparency into security threats and network activities.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.