No more typing reviews! Try our Samantha, our new voice AI agent.

NetWitness Platform vs VMware Aria Operations for Logs comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NetWitness Platform
Ranking in Log Management
32nd
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Security Information and Event Management (SIEM) (34th)
VMware Aria Operations for ...
Ranking in Log Management
26th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
28
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2026, in the Log Management category, the mindshare of NetWitness Platform is 0.9%, up from 0.3% compared to the previous year. The mindshare of VMware Aria Operations for Logs is 1.4%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
VMware Aria Operations for Logs1.4%
NetWitness Platform0.9%
Other97.7%
Log Management
 

Featured Reviews

reviewer2256927 - PeerSpot reviewer
Head of Information Security, Cyber Defense and IT Risk Management at HCT. at a transportation company with 201-500 employees
A solid SIEM solution that should improve technical support and online resources to be easier to use
A big problem with the product is that we don't have much professional experience in Israel installing, implementing, and integrating this product. There is not enough of a knowledge base. There is no support for this product in this country, so problems have to be resolved through global technical teams. We like to work locally because of the language, and when the product is only supported outside the country, it's a little difficult to implement and use this product. Moreover, AI is something that must be added immediately. Artificial intelligence is a part of the competitors' products, and it's not been implemented for us.
reviewer2668767 - PeerSpot reviewer
Cloud Solution Engineer at a comms service provider with 10,001+ employees
Dashboard personalization enhances troubleshooting capabilities
A valuable feature of VMware Aria Operations for Logs is its ability to allow personalization of dashboards and requests. This personalization capability is crucial because it helps tailor the tool to specific needs. It also has many effective features for log analysis, making it a competent tool despite not having a comprehensive comparison with other tools.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Incident management is its most valuable feature."
"Performance and reporting are very good."
"Overall, this is a good solution with suitable features and it very well fits our needs."
"The most valuable feature is the correlation, as it can report in real-time and monitor the management."
"This solution has a very good dashboard with a separate tab for incidents and alerts."
"Stability has not been an issue with this product."
"The detection of ransomware in the internal network has benefited my organization."
"Packet Solution: Allows analyst proactive hunting and alerting on daily sophisticated APTs."
"The most valuable feature is server virtualization, it's been very useful."
"The interface of the solution is good."
"Our current costs are too high, and this tool will help us to better optimize our infrastructure."
"One of the things I like about it is its interface. When it comes to generating reports on VMs and stuff, it's very quick. This is very handy for the technical team, who need to generate reports quickly. So that's really good."
"The solution's simplicity, flexibility, and extensibility are valuable features as we can integrate everything in vRealize."
"The ability to narrow into a specific time to filter heavy hitters and anomalies is extremely valuable."
"One of the most valuable features of vRealize Log Insight is that it gives you a clear forecast about your existing machines, for example, how long your machines could be supported and how long the remaining capacity is to host your machines. This is one of the best options available within vRealize Log Insight. Another valuable feature of the solution is automation. My company deploys a lot of automation when required in a very, very short period, and in a very uniform manner, and even if the automation is being deployed for different processes and departments, it's pretty much the same across the environment, so vRealize Log Insight helps reduce a lot of ambiguities and helps my company manage operational efficiencies well."
"The most valuable features are log centralization and long-term retention for logs."
 

Cons

"RSA NetWitness Logs and Packets is far behind the competition."
"The initial setup is very complex and should be simplified."
"Lots of competing products have vulnerability protection built into their products, and this solution would be improved by including that support."
"The system looks like it is a mix of a bunch of different systems, and nothing looked like it was quite together."
"The initial setup is complex. It requires some knowledge in order to set it up."
"The initial setup was complex because it took a lot of time to complete the implementation."
"We have encountered issues with unresolved crashes."
"The product continues to crash. Even with tech support help, it does not resolve itself."
"If data migration occurs during a search, it alters performance, causing delays."
"In vRealize login files, we have limitations regarding log partitions."
"The tool could benefit from improved filter settings and dashboarding."
"My experience, however, is that Log Insight is not user friendly."
"The solution isn't user-friendly for admins."
"The product's price falls on the higher end of the spectrum, making it an area of concern."
"It's great for VMware, but it would be good if they had third-party logins."
"Paid or free does not matter, but it is complex to find good training material for vRealize Log Insight."
 

Pricing and Cost Advice

"It’s cheaper to run virtual machines in a VMware environment."
"The new pricing and licensing mechanisms are fair. I would advise always to get the full solution (i.e., not only Logs)."
"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
"The product price was reasonable for my region and the market."
"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."
"This is a pricey solution; it's not cheap."
"Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."
"We are on an annual license for the use of the solution."
"The licensing cost for vRealize Log Insight is a little higher, so in terms of cost, it all depends upon what kind of environment you have. If you have a complete virtualized environment, or at least you're using a ninety-five percent virtualized environment, then vRealize Log Insight will play a very good role because it is a VMware component, so it has very tight integration with other VMware components and systems. This means you don't have to procure any other monitoring and management tool, and you don't need a separate automation tool. vRealize Log Insight will have an upper hand if your environment is purely virtualized on VMware. If you're using a mix of physical and virtual components, for example, a 50:50 ratio, then you need to have a third-party component to manage overall monitoring."
"I think it is a reasonably priced product."
"Pricing is good because it is part of the suite package. It comes in a bundle for us."
"I am not sure what the exact cost is. However, I believe the vRealize suite costs $2,500.00 per year."
"Pricing could always be lower. If it were free, I would be more satisfied."
"The pricing has been updated recently."
"The product's price is reasonable, but when it comes to SQL licensing, it's a bit expensive."
"I rate the product's price a six on a scale of one to ten, where one is cheap, and ten is expensive."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
886,719 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Construction Company
8%
Performing Arts
7%
Comms Service Provider
7%
Government
11%
Financial Services Firm
11%
Computer Software Company
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise9
Large Enterprise12
 

Questions from the Community

What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
What is your experience regarding pricing and costs for vRealize Log Insight?
The cost of using VMware Aria Operations for Logs was very high, around two to three million dollars, although the exact figure is uncertain. The price was proving to be too much, especially with t...
What needs improvement with vRealize Log Insight?
VMware Aria Operations for Logs is not a cost-effective tool. Changing any telemetry requires creating a new template, such as changes to the VM disk size. Always having to create a new template ma...
What is your primary use case for vRealize Log Insight?
I work as a Server Virtualization and Data Storage Solutions specialist for Debilisim. We use VMware products, and as an outsourced personnel, I transitioned our virtualization platform to Proxmox ...
 

Also Known As

RSA Security Analytics
vRealize Log Insight
 

Overview

 

Sample Customers

Los Angeles World Airports, Reply
Wildlands Adventure Zoo, Medic Mobile, IBM, Seventy Seven Energy, Baystate Health, Osis, Oxford University, Columbia University, Siemens, Cardinal Health, Ashdod Port, Vasakronan, Sydney Adventist Hospital, University of Derby
Find out what your peers are saying about NetWitness Platform vs. VMware Aria Operations for Logs and other solutions. Updated: April 2026.
886,719 professionals have used our research since 2012.