"The most valuable feature is that it has native MSSP capabilities and maintains perfect data separation. It does all of that in a very easy-to-manage cloud-based solution."
"Those 400 days of hot data mean that people can look for trends and at what happened in the past. And they can not only do so from a security point of view, but even for operational use cases. In the past, our operational norm was to keep live data for only 30 days. Our users were constantly asking us for at least 90 days, and we really couldn't even do that. That's one reason that having 400 days of live data is pretty huge. As our users start to use it and adopt this system, we expect people to be able to do those long-term analytics."
"In traditional BI solutions, you need to wait a lot of time to have the ability to create visualizations with the data and to do searches. With this kind of platform, you have that information in real-time."
"One of the biggest features of the UI is that you see the actual code of what you're doing in the graphical user interface, in a little window on the side. Whatever you're doing, you see the code, what's happening. And you can really quickly switch between using the GUI and using the code. That's really useful."
"Devo helps us to unlock the full power of our data because they have more than 450 parsers, which means that we can ingest pretty much any type of log data."
"Devo provides a multi-tenant, cloud-native architecture. This is critical for managed service provider environments or multinational organizations who may have subsidiaries globally. It gives organizations a way to consolidate their data in a single accessible location, yet keep the data separate. This allows for global views and/or isolated views restricted by access controls by company or business unit."
"The user interface is really modern. As an end-user, there are a lot of possibilities to tailor the platform to your needs, and that can be done without needing much support from Devo. It's really flexible and modular. The UI is very clean."
"Even if it's a relatively technical tool or platform, it's very intuitive and graphical. It's very appealing in terms of the user interface. The UI has a graphically interface with the raw data in a table. The table can be as big as you want it, depending on your use case. You can easily get a report combining your data, along with calculations and graphical dashboards. You don't need a lot of training, because the UI is relatively very intuitive."
"I have made use of technical support and am certainly very satisfied with them."
"ManageEngine EventLog Analyzer is easy to gather reports to give to management. My supervisor has access to the solution and he enjoys the graphs."
"The user interface is very good."
"It is very scalable and can handle a large workload."
"The setup and installation are very easy."
"I would like to have the ability to create more complex dashboards."
"The overall performance of extraction could be a lot faster, but that's a common problem in this space in general. Also, the stock or default alerting and detecting options could definitely be broader and more all-encompassing. The fact that they're not is why we had to write all our own alerts."
"We only use the core functionality and one of the reasons for this is that their security operation center needs improvement."
"The Activeboards feature is not as mature regarding the look and feel. Its functionality is mature, but the look and feel is not there. For example, if you have some data sets and are trying to get some graphics, you cannot change anything. There's just one format for the graphics. You cannot change the size of the font, the font itself, etc."
"There's always room to reduce the learning curve over how to deal with events and machine data. They could make the machine data simpler."
"An admin who is trying to audit user activity usually cannot go beyond a day in the UI. I would like to have access to pages and pages of that data, going back as far as the storage we have, so I could look at every command or search or deletion or anything that a user has run. As an admin, that would really help. Going back just a day in the UI is not going to help, and that means I have to find a different way to do that."
"Some basic reporting mechanisms have room for improvement. Customers can do analysis by building Activeboards, Devo’s name for interactive dashboards. This capability is quite nice, but it is not a reporting engine. Devo does provide mechanisms to allow third-party tools to query data via their API, which is great. However, a lot of folks like or want a reporting engine, per se, and Devo simply doesn't have that. This may or may not be by design."
"Technical support could be better."
"The customization of reports could be a lot easier. It is not difficult but it could be made easier."
"The solution is stable. However, there are limits. For example, we can do 2,500 Syslog events per second, but if we want to do more we have to install the distributor structure, and then we can expand how many events we can do. They could improve the stability."
"The solution should improve on its log capturing capabilities."
"Log retention should have more options for user control."
"It needs better integration with third-party analytics tools."
Earn 20 points
Devo is the only cloud-native logging and security analytics platform that releases the full potential of all your data to empower bold, confident action when it matters most. Only the Devo platform delivers the powerful combination of real-time visibility, high-performance analytics, scalability, multitenancy, and low TCO crucial for monitoring and securing business operations as enterprises accelerate their shift to the cloud.
Your organizations IT infrastructure generate huge amount of logs every day and these machine generated logs have vital information that can provide powerful insights and network security intelligence into user behaviors, network anomalies, system downtime, policy violations, internal threats, regulatory compliance, etc. However, the task of analyzing these event logs and syslogs without automated log analyzer tools can be both time-consuming and painful if done manually.
EventLog Analyzer provides the most cost-effective Security Information and Event Management (SIEM) software on the market. Using this Log Analyzer software, organizations can automate the entire process of managing terabytes of machine generated logs by collecting, analyzing, correlating, searching, reporting, and archiving from one central location. This event log analyzer software helps to monitor file integrity, conduct log forensics analysis, monitor privileged users and comply to different compliance regulatory bodies by intelligently analyzing your logs and instantly generating a variety of reports like user activity reports, historical trend reports, and more.
vRealize Log Insight is a highly scalable intelligent log management solution for applications and infrastructure in any environment. The machine learning solution delivers an actionable and intuitive dashboard, advanced analysis, and comprehensive third-party extensibility across cloud, virtual and physical environments. This enables searching for quicker troubleshooting across the users’ environment, as well as assisting in monitoring and managing machine data at scale through analyzing immense quantities of log data.
vRealize Log Insight offers real-time monitoring search and logs analytics with a dashboard for stored queries, reports, and alerts. The solution can build an index for performing analytics by automatically identifying structures in any machine-generated log data, such as network traces, performance data, application logs, messages, system state dumps, configuration files, and more. In addition, the solution accelerates the correlation of events throughout the whole IT environment.
vRealize Log Insight Web Interface
Organizations can utilize a centralized log management solution to manage data at scale, as well as have comprehensive visibility across their environment and intelligent analytics for troubleshooting. The solutions’ web interface consists of:
Reviews From Real Users
vRealize Log Insight has become a solution of choice for users looking for a centralized log management solution with unified log visibility created for DevOps.
A PeerSpot user who is a systems operations manager at a healthcare company writes, "It is very scalable and can handle a large workload."
See how Devo allows you to free yourself from data management, and make machine data and insights accessible.
ManageEngine EventLog Analyzer is ranked 24th in Log Management with 3 reviews while vRealize Log Insight is ranked 16th in Log Management with 1 review. ManageEngine EventLog Analyzer is rated 7.6, while vRealize Log Insight is rated 8.0. The top reviewer of ManageEngine EventLog Analyzer writes "Simple report gathering, responsive support, but customization could be easier". On the other hand, the top reviewer of vRealize Log Insight writes "A log analysis and alerts system that is inexpensive compared to the competition". ManageEngine EventLog Analyzer is most compared with ManageEngine Log360, Splunk, Fortinet FortiAnalyzer, SolarWinds Kiwi Syslog Server and Graylog, whereas vRealize Log Insight is most compared with Splunk, Elastic Security, Fortinet FortiAnalyzer, Graylog and Sumo Logic Security.
See our list of best Log Management vendors.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.