Try our new research platform with insights from 80,000+ expert users

NetWitness Platform vs Pandora FMS comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NetWitness Platform
Ranking in Log Management
34th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Security Information and Event Management (SIEM) (31st)
Pandora FMS
Ranking in Log Management
63rd
Average Rating
9.2
Reviews Sentiment
7.6
Number of Reviews
22
Ranking in other categories
Network Monitoring Software (78th), Server Monitoring (25th), IT Infrastructure Monitoring (55th), Cloud Monitoring Software (45th)
 

Mindshare comparison

As of January 2026, in the Log Management category, the mindshare of NetWitness Platform is 0.6%, up from 0.3% compared to the previous year. The mindshare of Pandora FMS is 0.4%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Market Share Distribution
ProductMarket Share (%)
NetWitness Platform0.6%
Pandora FMS0.4%
Other99.0%
Log Management
 

Featured Reviews

MOTASHIM Al Razi - PeerSpot reviewer
CISO at One Bank Limited
It is a stable solution, but they should make the user interface easier to understand
The solution's initial setup takes work. We have to organize multiple paths and many features. The deployment process takes less than a week. But it takes a month to complete if we want to make the solution smarter by integrating it with various devices. I rate the process as a six out of ten.
Gabriel Glusgold - PeerSpot reviewer
Asociado/ at Infraestructura Informática
Personalized metrics; simplicity of data
My primary use case for Pandora is monitoring This solution has helped us improve our organization by allowing us to create a lot of metrics on several platforms, including Windows, Linux, and Unix. We then use these Pandora metrics to create an interface. We then pass the interface off to the…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product has a user-friendly interface and a valuable feature for threat intelligence integration."
"In my opinion, the solution's most valuable feature is its capacity to monitor network traffic, logs from devices within the network, and network captures. This capability extends beyond logs to include full network capturing."
"The most valuable feature of RSA NetWitness Logs and Packets are the alerts and correlations tools."
"The most valuable features are the packet inspection and the automated incident response."
"What we are mainly using are the RSA concentrator, RSA Decoder, Archiver, Broker, and Log Decoder."
"The most valuable features are the integration and ease of use."
"The most valuable feature is that we can create our own connectors for any application, and NetWitness provides the training and tools to do it."
"The most valuable feature is the ability to write rules and triggers for network communication, and then being able to investigate based on that."
"The solution is so lightweight that with only 4GB of ram, it allows keeping track of up to two hundred agents from a single console."
"Pandora's architecture is interesting. It's open so you can easily extend and enhance it. It's simpler to customize Pandora compared to other solutions. It's also scalable enough to support large environments."
"Features I have found most valuable with Pandora are the personalized metrics and the simplicity of data."
"The solution has good dashboards and graphics."
"The official forum is active enough to answer most of the high-end technical questions that you may have."
"The most valuable feature is that it is an all-in-one monitoring system."
"It allows me to quickly see the status of all of my printers, switches, computers, and virtual machines to determine if any system has fallen."
"You can configure several types of architecture for high availability or load balancing."
 

Cons

"They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams."
"RSA NetWitness Logs and Packets can improve the threat level aspect, it is lacking compared to other solutions. Whenever any hacking activity or any other threat factor occurred they used to provide the coverages very fast when comparing RSA NetWitness Logs and Packets. I heard the other three solutions, from a discussion with my team members who had experience in other solutions, they used to say that. Whenever any issues happened across the globe RSA NetWitness Logs and Packets are a little bit slow improving those detection mechanisms."
"Health monitoring of the event sources and devices."
"The log system is a bit complex and has room for improvement."
"I'd like to see improvement in its ease of use. It's basically unusable. It's overly complex."
"The solution should have more integration capabilities with different platforms."
"The initial setup is very complex and should be simplified."
"The implementation needs assistance."
"I would like for the solution to be faster and have a better tolerance between parallel servers for Pandora and Pest Control."
"A nice feature in the next release would be an automation module to run workflow actions."
"I would like to have a dashboard with all assets displayed, with a quick hover-over status."
"It would be helpful to include the generation of reports for times that the network was out of service."
"In the future, we may have double the number of devices, and we do not want to have any issues with performance in the data display."
"Their support is good, but it is just online communication. It would be great to be able to just call someone and talk to them instead of always writing. It works well for me because I am a decent communicator in email, but some people might find it difficult to describe in a written fashion and communicate with them that way. There is a learning curve to the interface, but once you get used to it, it is actually very powerful. They have a lot of options, but people struggle with the interface. They've improved it though, and it is getting better. They need to keep improving the learning curve to help buy-in. I'm the guy that manages it, so I'm comfortable with it. They can refine the upgrade agents to be easier. They can also do more refinement in end-user usability because not everyone is strong technically, and people who aren't strong technically might be averse to the product, even though it has come a long way. It has a complete GUI and everything."
"Third-party integration should be improved for some commonly used products."
"We would like to see improvement in the mainframe integration that this solution is capable of."
 

Pricing and Cost Advice

"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."
"The product is expensive."
"It provides tools to assist in selecting the appropriate license and usage scenarios."
"We are on an annual license for the use of the solution."
"The licenses are good but the cost is very expensive."
"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
"This is a pricey solution; it's not cheap."
"It is cheap."
"In terms of money, the Enterprise version is the cheapest that I have found after a market study."
"You have to pay for the number of agents and models that you are monitoring. I would rate the cost at three with one being the most expensive and five being the cheapest."
"They are very competitive on the pricing side. That's one reason why my manager keeps using it."
"The Open Source Community Edition is great to just explore the software, or use it on medium-sized infrastructures."
"Pandora FMS is easy to implement and the pricing of licenses is competitive."
"You get the license and it includes updates, new versions, and access to the complete library of modules."
"Only one payment and it includes support, updates, new versions, and access to the complete library of plugins except for SAP and z/OS."
"The open-source version offers 100% functionality and the hardware requirements for a solution like this one are very modest."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Performing Arts
9%
Computer Software Company
8%
Manufacturing Company
7%
Comms Service Provider
12%
Government
10%
Outsourcing Company
10%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise4
Large Enterprise3
 

Questions from the Community

What do you like most about NetWitness Platform?
The product's initial setup phase was not at all difficult.
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
Ask a question
Earn 20 points
 

Also Known As

RSA Security Analytics
No data available
 

Overview

 

Sample Customers

Los Angeles World Airports, Reply
Rakuten, Prosegur, Repsol, Teléfonica, Allianz, Ottawa Hospital, Hughes
Find out what your peers are saying about NetWitness Platform vs. Pandora FMS and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.