LogPoint pros and cons

It is a very comprehensive solution for gathering data. It has got a lot of capabilities for collecting logs from different systems. Logs are notoriously difficult to collect because they come in all formats. LogPoint has a very sophisticated mechanism for you to be able to connect to or listen to a system, get the data, and parse it. Logs come in text formats that are not easily parseable because all logs are not the same, but with LogPoint, you can define a policy for collecting the data. You can create a parser very quickly to get the logs into a structured mechanism so that you can analyze them.

The solution's most valuable aspect is the combination of the software and the support that they have.

They basically charge you in a better way.

The most valuable features are the ones that we use the most, which are the search and report facilities.

It is an AI technology because it is using machine learning technology. So far, there is nothing better out there for UEBA in terms of monitoring endpoints and user activity. It is using machine learning language, so it is right at the top. It provides that capability and monitors all the activities. It devises a baseline and monitors if there is any deviation from the baseline.

The search feature is valuable. The dashboards are also valuable for our bosses. Another valuable feature, which is the main feature of the product, is the centralization of all the logs.

The most valuable feature of LogPoint is that they have the SIEM and SOAR combined in one solution. They are not on a separate platform.

The thing that makes it a little bit challenging is when you run into a situation where you have logs that are not easily parsable. If a log has a very specific structure, it is very easy to parse and create a parser for it, but if a log has a free form, meaning that it is of any length or it can change at any time, handling such a log is very challenging, not just in LogPoint but also in everything else. Everybody struggles with that scenario, and LogPoint is also in the same boat. One-third of logs are of free form or not of a specific length, and you can run into situations where it is almost impossible to parse the log, even if they try to help you. It is just the nature of the beast.

One of the downsides is it is not a SaaS solution. It must be on-premises.

The general public wasn't looking for that type of product unless you had a company that was medical or financial and needed 24-hour responsiveness.

I know that they have user behavior analytics, but it's an extra cost for this feature. It would be nice if it was in with the standard products.

In terms of functionality, it is very good. The only issue is the documentation. Its documentation should be improved.

It is a good product, but its interface or GUI could be better.

LogPoint can improve its dashboards. We are not able to customize the dashboard when creating them. They only have preset dashboards which do not have exactly what we are looking for.