Elastic Stack Reviews

Name: Elastic Stack
Brand: Elastic
Rating: 4 (14 reviews)

4.0 out of 5

14 reviews
100% willing to recommend

What is Elastic Stack?

Elastic Stack is a comprehensive tool for log management, observability, indexing, and security, widely adopted for managing logs, alert creation, SIEM, SOC, and threat analysis. It integrates with CloudStrike and Endpoint Security, enhancing search capabilities and Application Performance Monitoring.

Get the Elastic Stack Buyer's Guide and find out what your peers are saying about Elastic Stack, Wazuh, Dynatrace and more!

Elastic Stack is the #12 ranked solution in Log Management Software. PeerSpot users give Elastic Stack an average rating of 8.0 out of 10. Elastic Stack is most commonly compared to Wazuh: Elastic Stack vs Wazuh. Elastic Stack is popular among the large enterprise segment, accounting for 54% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 14% of all views.

Helped 814,649 peers since 2012

Featured reviews

Mahesh Ramichetty

Senior Solution Architect at a consultancy with 11-50 employees

Elastic Stack provides all sorts of things, so it provides Elasticsearch for the transformations into a specific format, and pipelines can be defined for distributed applications along with the logs that come in the JSON format, which is clean. It's only the enhancements or the security that the product lacks and needs to be enhanced. I don't think further enhancement of the features needs to be added to the solution because it is already equivalent to a monitoring or alerting system, like Dynatrace and other tools. Some developments in the area of AI, which Elastic Stack is currently working on, should be fine in terms of the enhancements. Whenever some critical issue happens, there should be some kind of a co-pilot that helps resolve the issue. The tool should learn from its own previous issues. If you take Databricks, you see that it provides a co-pilot for Python, so a similar kind of development in Elastic Stack would be a real asset for it. AI would be considered a good way to enable the tool further for more in 2024, and even a beta launch would be helpful. If you take any sort of cloud-native monitoring product, like Azure Monitor or AWS CloudWatch, you see that such products don't provide much of the insights. If you go with Azure Monitor for any sort of ML models to be there, Sentinel needs to be used from Azure, which is very costly. AI-enablement would be a big improvement in Elastic Stack. Everyone in the monitoring space, including Dynatrace and New Relic, has lately been discussing AI, but it doesn't seem to be coming out. If there is room for an ML model in Elastic Stack, then it would be good.

Read full review

SRIDHAR KARRA

Chief Operating Officer at Integra Micro Software Services, Bangalore

Elastic Stack is used for advanced search and observability purposes. It is utilized for Application Performance Monitoring and log monitoring in daily operations. Elastic Stack is mainly used to monitor servers and APIs. It helps ensure the software's availability and sends notifications at the…

Read full review

Charan Teja Sana

Senior Consultant at HGS - Hinduja Global Solutions

We're using Elastic Stack for logging as part of our MDR solution within a SIEM system. We have developed our user interface on top of the Elastic Stack. We leverage Elastic for its storage and parsing capabilities It provides a faster response. It supports various integrations. It's open source…

Read full review

Elastic Stack mindshare

As of November 2024, the mindshare of Elastic Stack in the Log Management category stands at 3.5%, up from 0.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Log Management

Key learnings from peers

Last updated Oct 9, 2024

Valuable Features

Elastic Stack excels in search engine capabilities, ease of implementation, and log management. Its anomaly detection, machine learning, and real-time monitoring are valued. Security monitoring is simplified through Elastic Defense. Users appreciate the integration capabilities, archiving strengths, and automatic analysis features. Community support and open source nature contribute to its popularity. The ability to handle large data sets, provide fast log retrieval, and deliver superior alerting increase its effectiveness. Hybrid cloud integration is a significant asset.

"It supports various integrations. It's open source and has excellent community support."
"We can group a lot of alarms into one automation alarm supervision. The alarm supervision allows us to put the alarm under the same. It's quite helpful for us. We used that to suppress our alarms. Elastic already provides the agent. It is easy to integrate Elastic Stack with other devices and vendors."
"The detection rules in Elastic Stack are the most valuable feature. The search capabilities are excellent and fast. As we collect logs from workstations and devices, the detection rules run on top of the logs and detect any suspicious activity, raising alerts accordingly. Integration with Elastic Stack depends on the specific integration. Elastic provides some bridging integrations that make it easy, but require custom integration. Most integrations are simple, but customization can be challenging because we need to do some parsing. There's something called Elastic Common Schema, and we need to parse the source logs to match this schema, which can be a bit challenging."

Room for Improvement

Elastic Stack requires enhancements in dashboard ease-of-use, integration with external data sources, and licensing compatibility. It lacks a clear NDR feature and needs better support and automation capabilities. Search functionality and pricing can also improve. Users face challenges with on-premise deployment and configuration. Enhancing AI features would be beneficial, alongside integration with TIP tools. Improved documentation and error codes are needed, and the platform should handle large Yara queries more efficiently. Training and certification costs are high.

"There could be better documentation."
"Support could be improved. The error code is not helpful. We have to ask for it or pass it on to community forums."
"Improving integration capabilities, especially with authentication systems, firewalls, and security controls, is a crucial area for improvement in Elastic Stack. Additionally, enhancing functionality to handle large Yara queries more efficiently would be beneficial, as many EDR solutions can run such queries faster than Elastic Stack's current limitations."

Pricing

Elastic Stack offers a flexible pricing model with free open-source options and competitive pricing on its licensed versions. Users find it economical compared to other market solutions like IBM QRadar and LogRhythm, although opinions vary with some considering it expensive. Pricing depends on usage specifics and capacity planning. The availability of certain free modules adds value. Overall, enterprise buyers rate the pricing between five to seven out of ten, highlighting its cost-effectiveness for specific use cases.

"I rate the solution's pricing a six out of ten."
"If I compare Elastic Stack to the other products in the market, I would say that the tool is available at a competitive price."
"Ultimately, the pricing depends upon the capacity planning that the enterprise architect does."

Popular Use Cases

Companies primarily use Elastic Stack for log management and observability. It is deployed for security purposes, threat analysis, and SIEM integration, while also supporting integration with tools like CloudStrike. Elastic Stack enables advanced search capabilities across various industries, aids in managing data lakes, and enhances DevOps workflows. Some organizations use it for Application Performance Monitoring, visualization, and as a database backend. Others employ it for threat intelligence and network virus detection.

Service and Support

Elastic Stack's customer service receives mixed feedback. Many find the technical support team responsive and helpful, yet others experience delays and unresolved tickets. Communities and forums often provide faster assistance. Organizations value the support's knowledge but are frustrated by slow response times. Some utilize the Slack community for effective help. While some rate technical support positively, others suggest improvement, especially concerning response efficiency. Users find it helpful due to widespread familiarity and the tool's free version.

Deployment

Users found Elastic Stack's initial setup generally easy due to comprehensive documentation and videos. While deployment was straightforward for cloud and on-premises use, complexities in configuring buffers were noted, though AI assistance has simplified this. Some utilized scripts for automation. The setup was manageable with one or few individuals, though DevOps maintenance posed challenges, especially for beginners. On-premise and cloud implementations varied by client needs, with cloud solutions often preferred for convenience.

Scalability

Elastic Stack demonstrates strong scalability, scoring high ratings from users. Many appreciate its ability to handle large data volumes and diverse user bases effectively. While Elastic Stack accommodates various user infrastructures, scaling remains dependent on efficient configuration and usage of features like indexes. Users note its auto-scaling capacities with Kubernetes, solid scaling compared to competitors, and adaptability to both small and large enterprises. Proper initial sizing and tier management are crucial for optimal performance.

Stability

Users report mixed experiences regarding Elastic Stack's stability. Some rate its stability high, citing no lag and effective parameter fine-tuning. Others note issues like downtime, glitches, and challenges in administration as their organizations grow. Ratings vary from 4 to 9 out of 10, with stability often dependent on server quality and utilized features. Elastic Stack is generally stable, especially when compared to products like LogRhythm and ArcSight, though infrastructure can impact performance.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Elastic Stack Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

14%

Financial Services Firm

12%

Government

University

Comms Service Provider

Manufacturing Company

Healthcare Company

Educational Organization

Media Company

Construction Company

Energy/Utilities Company

Outsourcing Company

Non Profit

Hospitality Company

Retailer

Insurance Company

Consumer Goods Company

Wholesaler/Distributor

Transportation Company

Real Estate/Law Firm

Pharma/Biotech Company

Aerospace/Defense Firm

Marketing Services Firm

Legal Firm

Compare Elastic Stack with alternative products

Learn more about Elastic Stack

Elastic Stack offers powerful solutions for logging, data storage, and visualization with Kibana. It allows MSSPs to efficiently manage security and assists companies with data analysis. It's known for its easy implementation, scalability, real-time monitoring, and extensive integrations. The open-source nature and community support add significant value, making it a popular choice across industries. While highly capable, there is a need for enhancement in dashboard implementation, data integration, and certain advanced features. Licensing, compatibility, and cost-related improvements can further elevate its efficacy.

What are the key features of Elastic Stack?

Powerful Search Capabilities: Offers robust, efficient searching across vast datasets
Scalability: Easily handles large volumes of data
Anomaly Detection: Identifies irregular patterns in data
Machine Learning: Enhances data analysis with intelligent insights
Real-Time Monitoring: Provides up-to-date monitoring of applications and systems
Extensive Integration: Supports diverse tools and solutions

What benefits should users consider?

Ease of Implementation: Quick setup and integration into existing systems
Robust Security: Comprehensive monitoring and analysis capabilities
Community Support: Ongoing improvements and guidance from a dedicated community
Hybrid Deployment: Flexibility in using both cloud and on-premise solutions

In healthcare, Elastic Stack enhances database search capabilities, aiding in patient record management and data retrieval. Managed Security Service Providers use it for comprehensive security management, integrating it with tools like firewalls and authentication systems. Companies benefit from its application in Application Performance Monitoring and its flexibility in adapting to hybrid environments.