USM Anywhere vs syslog-ng comparison

Cancel
You must select at least 2 products to compare!
One Identity Logo
4,321 views|3,466 comparisons
100% willing to recommend
AT&T Logo
4,233 views|2,832 comparisons
92% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between syslog-ng and USM Anywhere based on real PeerSpot user reviews.

Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed USM Anywhere vs. syslog-ng Report (Updated: April 2024).
769,479 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"Syslog-ng has a separate config file in addition to the core configuration.""Syslog-ng has built-in features that we can use to create alerts for a SIEM solution. It isn't a true SIEM solution, but it's sufficient for the time being.""Syslog-ng provides easy access to all my logs. It helps me show managers and other clients precisely where an incident occurred. I also like it because you can integrate syslog-ng with multiple solutions to allow real-time monitoring.""For us, the most valuable feature is the use of compound search for searching logs at a specific time, by a specific user, or specific behavior.""The ability to extract and store the logs is the most valuable feature of syslog-ng."

More syslog-ng Pros →

"On any given day I could give you a different answer regarding the most valuable features of the product. The feature that is most important is the fact that it has a lot of features, that it's not just a log collection and correlation system, that it has a lot of other components built in. The bundle of features is really the killer feature.""It has allowed us to see what is happening on our servers.""AlientVault has helped us in improving our visualization and incident response during cybersecurity situations.""Vulnerability scanning helped out shortcomings of what was not patched in the past and what needed to be patched. This assisted with fine tuning the environment for compliance.""Ease of deployment across various environments.""The most valuable feature of this solution is security management for PCI DSS.""The solution is stable.""Using the communication within the security device, it is easier to create plugins."

More USM Anywhere Pros →

Cons
"Syslog-ng has built-in features that we can use to create alerts for a SIEM solution. It isn't a true SIEM solution, but it's sufficient for the time being.""It's hard to find people who know how to use syslog-ng. I often find problems with configurations, and solutions aren't integrated correctly with syslog-ng. For example, there might be data with extra decimals, or the collector agents are incorrectly named. It isn't a problem with the solution; it's a lack of professionals.""There is always the potential for additional integration and protocol extensions.""There is room for improvement in terms of observability.""The filtering has room for improvement."

More syslog-ng Cons →

"Its reporting tools need improvements. It would be good if they can provide integration with other ticketing systems. Currently, we only have integration with Slack and Jira. It is also a bit slow, and its replication engine can be improved.""There are many reports included but would be nice to have better access to the data.""The solution already has quite good tools, however, they need better integration tools for linking with Office 365, Google Suite, and so on.""I want to see more compliance management capability. The quality of integrations seems to be a little bit low.""The reporting is mediocre and is something that needs to be improved.""Sometimes the log is unclear, and the report is a bit ambiguous.""One area that has room for improvement is storage. AllienVault is a good place to put logs, but sometimes it's a tough place to go get logs... The logger can only hold so much data. If they improved that, that would help.""I've been told that AlienVault doesn't have a full version of NES running in there, but I'm not sure if that's accurate or if my engineer made it that way. I'm not sure he was completely honest either because we had NES in the environment before. Those tools could be improved because AlienVault is a SIEM, and it added all these other features."

More USM Anywhere Cons →

Pricing and Cost Advice
  • "Syslog-ng is a free open-source solution."
  • "Syslog-ng is open-source."
  • More syslog-ng Pricing and Cost Advice →

  • "AlienVault is flexible on their pricing for unlimited licenses."
  • "Pricing is very competitive with other products and you get much more functionality from AlienVault."
  • "QRadar, ArcSight and Splunk are some of the most expensive SIEM products out there in the market and not everyone has the budget to buy them. In such cases, AV USM is a very cost effective alternative."
  • "Do the one month trial and try to work out the kinks during it, as it has free support and service hours."
  • "We checked out several competitors. For what it can do and the cost, it was the best option!"
  • "Use the AlienVault team. They are helpful and the documentation that they provide is second to none."
  • "​The price point is good.​"
  • "It has good pricing."
  • More USM Anywhere Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Log Management solutions are best for your needs.
    769,479 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:For us, the most valuable feature is the use of compound search for searching logs at a specific time, by a specific user, or specific behavior.
    Top Answer:The pricing is in the middle. I would rate the pricing a six out of ten, with one being expensive and ten being cheap.
    Top Answer:There is room for improvement in terms of observability. Additionally, a possible new feature could be Kafka integration.
    Top Answer:The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.
    Top Answer:It is a product that is priced in a medium range, making it neither a cheap nor a costly product.
    Top Answer:The vulnerability scanning feature is one of the areas where the product has certain shortcomings and needs to improve. The tool has vulnerability scanning, but it is not that efficient. A mobile app… more »
    Ranking
    18th
    out of 95 in Log Management
    Views
    4,321
    Comparisons
    3,466
    Reviews
    5
    Average Words per Review
    378
    Rating
    8.6
    15th
    out of 95 in Log Management
    Views
    4,233
    Comparisons
    2,832
    Reviews
    10
    Average Words per Review
    551
    Rating
    7.7
    Comparisons
    Also Known As
    AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
    Learn More
    Overview

    Optimizing SIEM
    syslog-ng is the log management solution that improves the performance of your SIEM solution by reducing the amount and improving the quality of data feeding your SIEM.

    Rapid search and troubleshooting
    With syslog-ng Store Box, you can find the answer. Search billions of logs in seconds using full text queries with Boolean operators to pinpoint critical logs.

    Meeting compliance requirements
    syslog-ng Store Box provides secure, tamper-proof storage and custom reporting to demonstrate compliance.

    Big data ingestion
    syslog-ng can deliver data from a wide variety of sources to Hadoop, Elasticsearch, MongoDB, and Kafka as well as many others.

    Universal log collection and routing
    syslog-ng flexibly routes log data from X sources to Y destinations. Instead of deploying multiple agents on hosts, organizations can unify their log data collection and management.

    Secure data archive
    syslog-ng Store Box provides automated archiving, tamper-proof encrypted storage, granular access controls to protect log data. The largest appliance can store up to 10TB of raw logs.

    USM Anywhere centralizes security monitoring of networks and devices in the cloud, on premises, and in remote locations, helping you to detect threats virtually anywhere.

    Discover

    • Network asset discovery
    • Software & services discovery
    • AWS asset discovery
    • Azure asset discovery
    • Google Cloud Platform asset discovery

    Analyze

    • SIEM event correlation, auto-prioritized alarms
    • User activity monitoring
    • Up to 90-days of online, searchable events

    Detect

    • Cloud intrusion detection (AWS, Azure, GCP)
    • Network intrusion detection (NIDS)
    • Host intrusion detection (HIDS)
    • Endpoint Detection and Response (EDR)

    Respond

    • Forensics querying
    • Automate & orchestrate response
    • Notifications and ticketing

    Assess

    • Vulnerability scanning
    • Cloud infrastructure assessment
    • User & asset configuration
    • Dark web monitoring

    Report

    • Pre-built compliance reporting templates
    • Pre-built event reporting templates
    • Customizable views and dashboards
    • Log storage
    Sample Customers
    Tecnocom, University of Victoria, University of Exeter, Datapath
    Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
    Top Industries
    VISITORS READING REVIEWS
    Computer Software Company14%
    Government13%
    Financial Services Firm9%
    Comms Service Provider7%
    REVIEWERS
    Financial Services Firm20%
    Healthcare Company17%
    Computer Software Company9%
    Comms Service Provider7%
    VISITORS READING REVIEWS
    Computer Software Company17%
    Comms Service Provider8%
    Government8%
    Educational Organization7%
    Company Size
    VISITORS READING REVIEWS
    Small Business26%
    Midsize Enterprise15%
    Large Enterprise59%
    REVIEWERS
    Small Business54%
    Midsize Enterprise25%
    Large Enterprise21%
    VISITORS READING REVIEWS
    Small Business35%
    Midsize Enterprise19%
    Large Enterprise46%
    Buyer's Guide
    USM Anywhere vs. syslog-ng
    April 2024
    Find out what your peers are saying about USM Anywhere vs. syslog-ng and other solutions. Updated: April 2024.
    769,479 professionals have used our research since 2012.

    syslog-ng is ranked 18th in Log Management with 5 reviews while USM Anywhere is ranked 15th in Log Management with 113 reviews. syslog-ng is rated 8.6, while USM Anywhere is rated 8.4. The top reviewer of syslog-ng writes "It's a user-friendly open-source solution that can replace or augment a commercial product in some cases". On the other hand, the top reviewer of USM Anywhere writes "Easy to use and affordable". syslog-ng is most compared with SolarWinds Kiwi Syslog Server, Graylog, Grafana Loki, Logstash and Elastic Security, whereas USM Anywhere is most compared with Wazuh, AlienVault OSSIM, IBM Security QRadar, Splunk Enterprise Security and Microsoft Sentinel. See our USM Anywhere vs. syslog-ng report.

    See our list of best Log Management vendors.

    We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.