No more typing reviews! Try our Samantha, our new voice AI agent.

NNT Log Tracker Enterprise vs NetWitness Platform comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NetWitness Platform
Ranking in Log Management
36th
Ranking in Security Information and Event Management (SIEM)
35th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
No ranking in other categories
NNT Log Tracker Enterprise
Ranking in Log Management
53rd
Ranking in Security Information and Event Management (SIEM)
51st
Average Rating
8.2
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Log Management category, the mindshare of NetWitness Platform is 1.2%, up from 0.4% compared to the previous year. The mindshare of NNT Log Tracker Enterprise is 0.9%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
NetWitness Platform1.2%
NNT Log Tracker Enterprise0.9%
Other97.9%
Log Management
 

Featured Reviews

reviewer1130436 - PeerSpot reviewer
Information Technology Security and Infrastructure Expert at a government with 201-500 employees
Helps to deal with potential attacks and is available at a reasonable price
My company has had many benefits from the use of the product in the last eight years. The tool has streamlined our company's incident response process since it serves as a log repository, which allows us to correlate events and access different technology stacks. In our company, we were able to actually find some potential attacks, so it has been very helpful. The tool's integration capability isn't so great. In my company, we managed to integrate it with our Microsoft Azure Subscription, after which we managed to integrate it with other tools. You will face a lot of difficulties if you want to integrate it with your database monitoring tool, PAM solutions, or IAM products. The product has done well overall for my company's teams to deal with their workflow efficiency. I would not recommend the product to others. I rate the tool a seven out of ten.
JT
Senior Infra Manager at a tech vendor with 10,001+ employees
Great for PCI compliance but issues with stability and large amounts of data
I mainly use this solution to meet PCI compliance The automation of compliance reports and the correlation of the log have been major improvements.  The most valuable feature is the predefined reports for PCI compliance. The correlation suite needs to be improved. I also think they need to…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Setting up NetWitness is straightforward. There are multiple connectors, including standard and specialized connectors. One purpose of the connectors is the enhanced capability integrate the custom applications. NetWitness comes with E6 appliances and application images that we use for the initial configurations and for the OS stack information. From there, you can consider the correlation rules, integrate the different log sources, and easily create correlation rules and backlog reports."
"Prior to implementing the solution, the customers had no visibility of their assets, however, after adopting the solution, they have gained complete visibility over all their assets, including a comprehensive understanding of the network and attack symptoms."
"In my opinion, the solution's most valuable feature is its capacity to monitor network traffic, logs from devices within the network, and network captures. This capability extends beyond logs to include full network capturing."
"The most valuable features are its ingestion of logs and raising of alerts based on those logs."
"The most valuable feature is the ability to write rules and triggers for network communication and then being able to investigate based on that, where you can see the payload and deconstruct the packets."
"Overall, it is easy to implement."
"The most valuable features are the integration and ease of use."
"Overall, I feel that the product is very good and my biggest complaint is about their support."
"File integrity monitoring is a very important function."
"The Change Tracker tool is very good and will reduce your overall workload."
"The FIM features in the Change Tracker and the Log Tracker are the most valuable."
"This is a very easy-to-use interface with a quick ramp-up time."
"The automation of compliance reports and the correlation of the log have been major improvements."
"Customer Service: The service we've seen from NNT to date has been extraordinarily good."
"If you want to deploy a SIEM and you want it to be simple, and not deal with much maintenance or help from the OEM, then I would say that NNT is the one."
"The most valuable feature is the predefined reports for PCI compliance."
 

Cons

"They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams."
"The implementation needs assistance."
"The documentation is not as structured as I would like, personally, and I think that it can be improved and made much more user-friendly."
"Lots of competing products have vulnerability protection built into their products, and this solution would be improved by including that support."
"The initial setup is very complex and should be simplified."
"Security needs improvement. We would still like to know how the traffic is entering the organization."
"I cannot say that the solution was stable because it tended to crash."
"I believe they could improve their support, there are often delays."
"The correlation suite needs to be improved."
"Only one minor deployment issue came up and it was resolved quickly. No other areas of improvement come to mind yet."
"There are some issues with the stability - the correlation engine has failed multiple times, and the reports sometimes take too long, so we have to involve the tech team to get them."
"I would like to see the integration of AI technology, so rather than manually monitoring the logs, the tool will understand it and take care of it."
"For the NNT Log Tracker and Change Tracker, they have to make their knowledge base available online because there is very little information available on the internet."
"It is able to identify the vulnerability, however, they need an option to auto-mitigate."
 

Pricing and Cost Advice

"It is cheap."
"RSA NetWitness Logs and Packets do not have a subscription model, it's a one-time purchase. There is only a perpetual license."
"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
"It provides tools to assist in selecting the appropriate license and usage scenarios."
"The new pricing and licensing mechanisms are fair. I would advise always to get the full solution (i.e., not only Logs)."
"The product is expensive."
"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."
"Our license is for one year."
"Consider both their on-premises solution and their hosted solution. Both are reasonably priced."
"We have selected a perpetual license along with support."
"NNT's pricing is moderate - I would rate their pricing two-and-a-half out of ten."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
915,383 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Comms Service Provider
10%
Outsourcing Company
10%
Construction Company
20%
Comms Service Provider
14%
Manufacturing Company
11%
Healthcare Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
Ask a question
Earn 20 points
 

Also Known As

RSA Security Analytics
No data available
 

Overview

 

Sample Customers

Los Angeles World Airports, Reply
Wonga, WHSmith
Find out what your peers are saying about NNT Log Tracker Enterprise vs. NetWitness Platform and other solutions. Updated: September 2026.
915,383 professionals have used our research since 2012.