Cribl vs Devo comparison

Cribl and Devo are both solutions in the Log Management category. Cribl is ranked #13 with an average rating of 8.3, while Devo is ranked #25 with an average rating of 8.3. Cribl holds a 1.0% mindshare in LM, compared to Devo’s 0.7% mindshare. Additionally, 90% of Cribl users are willing to recommend the solution, compared to 95% of Devo users who would recommend it.

Cribl

Read 10 Cribl reviews

993 Views
791 Comparison Views

90% willing to recommend

Devo

Read 22 Devo reviews

2,786 Views
1,214 Comparison Views

95% willing to recommend

Cribl

Devo

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Nov 24, 2024

Devo and Cribl compete in data analysis and management. Devo has an edge due to its robust data visualization and analytics features, while Cribl excels in data routing and integration.

Features: Devo's standout feature is its Activeboards, offering exceptional data visualization and real-time analytics capabilities. It supports a multi-tenant architecture and maintains high-speed performance across large datasets. The UI is modern, user-friendly, and customizable, providing seamless integration with CyberChef for IT data manipulation. Cribl focuses on data transformation and routing, providing efficient real-time data processing and system integration. It features Cribl Stream and LogStream for routing data with security measures and creating firewalls on pipelines. Cribl also facilitates a straightforward log collection process and simplifies routing data to multiple destinations simultaneously.

Room for Improvement: Devo requires enhanced pricing transparency due to its metadata charging model and improved integration with third-party systems. The customization of Activeboards and visuals also needs refinement. Cribl could improve its user interface customization for a more intuitive experience, as well as enhance logging capabilities. Better integration with other enterprise products would bolster overall functionality.

Ease of Deployment and Customer Service: Devo provides flexible deployment options through public, private, and hybrid clouds, with positive feedback on the hands-on support. However, response times can be inconsistent. Cribl relies on on-premises and hybrid cloud deployments and offers an average support experience, sometimes requiring users to escalate issues for quicker resolution, but its professional services are well-regarded.

Pricing and ROI: Devo uses a data ingestion-based model, leading to unforeseen costs due to metadata charges. It offers value in reduced MTTR and improved analysis capabilities. Cribl is often seen as cost-effective compared to competitors like Splunk, maintaining efficiency in handling large data volumes without excessive costs, and providing solid ROI.

To learn more, read our detailed Cribl vs. Devo Report (Updated: December 2024).

Buyer's Guide

Cribl vs. Devo

December 2024

Download the complete report

Helped 824,053 peers since 2012

Categories and Ranking

Cribl

Ranking in Log Management

13th

Average Rating

8.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (14th), Data Integration (17th), Cloud Data Integration (13th), Data Preparation Tools (4th)

Devo

Ranking in Log Management

25th

Average Rating

8.4

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (28th), IT Operations Analytics (4th), AIOps (16th)

Mindshare comparison

As of December 2024, in the Log Management category, the mindshare of Cribl is 1.0%, up from 0.1% compared to the previous year. The mindshare of Devo is 0.7%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Hariram G

Lead Engineer at a tech vendor with 1-10 employees

Collects logs from various cloud sources with reduced costs and improved efficiency

Cribl has simplified many aspects of the onboarding process, but there's still room for improvement. Currently, no other tools in the market truly compete with Cribl in its niche. Splunk is trying to retain customers by developing ingest actions to reduce licensing costs, hoping to prevent them from switching to Cribl. There is no alerting mechanism for the leader/worker nodes status. Since Cribl plays a major role in the mid-layer between the source and destination, there's a slight risk of losing data at some points while receiving real time data. It would be helpful if Cribl could temporarily store or index the data for a specific time range. This would prevent data loss during downtime. Additionally, there's room for improvement in how Cribl handles historical data. Currently, I can't view trends beyond a week, and even then, it’s often limited to just 24 hours. Since Cribl doesn’t index the data but only forwards it, extending the period for viewing statistics and monitoring trends would be a valuable enhancement.

Read full review

Michael Wenn

CEO / Co-Founder at Aiops ltd

Has cloud-first architecture with SIEM technology to run security operations

When it comes to scale, they're architected quite well. They handle some of the biggest customers globally, with significant throughput on their platform, managing thousands of customers. One of the most impressive aspects of Devo is its customer community. A large majority, over 80 percent of their customers, actively participate on a Devo-specific community page. They're contributing to product development and support, events, and user group information, helping each other out. This high level of engagement is rare and demonstrates both the loyalty of their customer base and the quality of their product. They offer a range of small, medium, and large options to cater to everyone. I sold Devo products while working with them, focusing on enterprise solutions. However, as a small reseller, my customers were typically smaller businesses. I rate the solution's scalability a nine out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I'd rate the solution ten out of ten."

"Features such as Cribl Stream, Cribl LogStream, and Cribl Edge have been the most beneficial. The Cribl LogStream, in particular, is valuable for routing data, creating firewalls on pipelines, and putting security measures in place to ensure data reaches its destination without issues."

"The capability to reduce logs in a user-friendly manner is a standout feature. Cribl allows us to view logs live as they are being processed, giving us quick feedback on the changes made."

"My favorite option in Cribl is the Stream product."

"The platform's most valuable feature is the ability to transform data in real-time within the pipeline without sending it to a destination."

"Cribl offers easy plugin configurations and source collection settings, allowing us to collect logs from any source."

"The product's most valuable features include the internal management of events, coding perspective, data processing, and serialization."

"Cribl offers other valuable features. For instance, you can replay data from an edge device, store your daily data in a stream, and replay specific event data into Splunk if a security incident occurs"

More Cribl pros

"The user interface is really modern. As an end-user, there are a lot of possibilities to tailor the platform to your needs, and that can be done without needing much support from Devo. It's really flexible and modular. The UI is very clean."

"Devo helps us to unlock the full power of our data because they have more than 450 parsers, which means that we can ingest pretty much any type of log data."

"The alerting is much better than I anticipated. We don't get as many alerts as I thought we would, but that nobody's fault, it's just the way it is."

"The most useful feature for us, because of some of the issues we had previously, was the simplicity of log integrations. It's much easier with this platform to integrate log sources that might not have standard logging and things like that."

"Devo has a really good website for creating custom configurations."

"Those 400 days of hot data mean that people can look for trends and at what happened in the past. And they can not only do so from a security point of view, but even for operational use cases. In the past, our operational norm was to keep live data for only 30 days. Our users were constantly asking us for at least 90 days, and we really couldn't even do that. That's one reason that having 400 days of live data is pretty huge. As our users start to use it and adopt this system, we expect people to be able to do those long-term analytics."

"It's very, very versatile."

"The most valuable feature is that it has native MSSP capabilities and maintains perfect data separation. It does all of that in a very easy-to-manage cloud-based solution."

More Devo pros

Cons

"Cribl could improve by offering easier integrations with enterprise products, similar to what Splunk provides."

"Cribl could have developed some version that can give backward compatibility."

"There have been several administrative issues. Another point is that the browsing functions aren't very intuitive."

"There is room for improvement in the documentation and knowledge base, particularly regarding configurations like sources where logs are being ingested"

"There is no alerting mechanism for the leader/worker nodes status."

"Perhaps more flexibility in terms of metrics would be helpful."

"Cribl doesn't have as many packs available"

"Cribl should consider adding more features that are applicable to smaller firms, allowing broader access to their data migration through Cribl."

More Cribl cons

"Some of the documentation could be improved a little bit. A lot of times it doesn't go as deep into some of the critical issues you might run into. They've been really good to shore us up with support, but some of the documentation could be a little bit better."

"Some third-parties don't have specific API connectors built, so we had to work with Devo to get the logs and parse the data using custom parsers, rather than an out-of-the-box solution."

"One major area for improvement for Devo... is to provide more capabilities around pre-built monitoring. They're working on integrations with different types of systems, but that integration needs to go beyond just onboarding to the platform. It needs to include applications, out-of-the-box, that immediately help people to start monitoring their systems. Such applications would include dashboards and alerts, and then people could customize them for their own needs so that they aren't starting from a blank slate."

"The Activeboards feature is not as mature regarding the look and feel. Its functionality is mature, but the look and feel is not there. For example, if you have some data sets and are trying to get some graphics, you cannot change anything. There's just one format for the graphics. You cannot change the size of the font, the font itself, etc."

"There is room for improvement in the ability to parse different log types. I would go as far as to say the product is deficient in its ability to parse multiple, different log types, including logs from major vendors that are supported by competitors. Additionally, the time that it takes to turn around a supported parser for customers and common log source types, which are generally accepted standards in the industry, is not acceptable. This has impacted customer onboarding and customer relationships for us on multiple fronts."

"From our experience, the Devo agent needs some work. They built it on top of OS Query's open-source framework. It seems like it wasn't tuned properly to handle a large volume of Windows event logs. In our experience, there would definitely be some room for improvement. A lot of SIEMs on the market have their own agent infrastructure. I think Devo's working towards that, but I think that it needs some improvement as far as keeping up with high-volume environments."

"Some basic reporting mechanisms have room for improvement. Customers can do analysis by building Activeboards, Devo’s name for interactive dashboards. This capability is quite nice, but it is not a reporting engine. Devo does provide mechanisms to allow third-party tools to query data via their API, which is great. However, a lot of folks like or want a reporting engine, per se, and Devo simply doesn't have that. This may or may not be by design."

"My opinion on the solution's technical support is not as great as it could be because of the issues I have faced regarding the service management element."

More Devo cons

Pricing and Cost Advice

"I would not say it is a cheaply priced tool as it has been doing wonders in the market. The tool has been budget-friendly for organizations."

"The product pricing is reasonable compared to other solutions."

"Pricing is based on the number of gigabytes of ingestion by volume, and it's on a 30-day average. If you go over one day, that's not a big deal as long as the average is what you expected it to be."

"We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."

"I like the pricing very much. They keep it simple. It is a single price based on data ingested, and they do it on an average. If you get a spike of data that flows in, they will not stick it to you or charge you for that. They are very fair about that."

"[Devo was] in the ballpark with at least a couple of the other front-runners that we were looking at. Devo is a good value and, given the quality of the product, I would expect to pay more."

"Be cautious of metadata inclusion for log types in pricing, as there are some "gotchas" with that."

"It's a per gigabyte cost for ingestion of data. For every gigabyte that you ingest, it's whatever you negotiated your price for. Compared to other contracts that we've had for cloud providers, it's significantly less."

"Devo was very cost-competitive... Devo did come with that 400 days of hot data, and that was not the case with other products."

"I'm not involved in the financial aspect, but I think the licensing costs are similar to other solutions. If all the solutions have a similar cost, Devo provides more for the money."

More Devo pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

824,053 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

19%

Computer Software Company

10%

Healthcare Company

Government

Computer Software Company

17%

Financial Services Firm

13%

Government

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your experience regarding pricing and costs for Cribl?

I am not aware of the pricing details, however, I know they use a credit format for billing.

See all answers

What needs improvement with Cribl?

At the moment, I don't have specific feedback on what can be improved as I do not work with Cribl daily. Perhaps more flexibility in terms of metrics would be helpful.

See all answers

What is your primary use case for Cribl?

I am using Cribl to have everything centralized in one tool in terms of data collection. We were working with different Splunk customers, and Cribl helps collect data and then send it to an S3 buck...

See all answers

What do you like most about Devo?

Devo has a really good website for creating custom configurations.

See all answers

What is your experience regarding pricing and costs for Devo?

Compared to Splunk or SentinelOne, it is really expensive. I rate the product’s pricing a nine out of ten, where one is cheap and ten is expensive.

See all answers

What needs improvement with Devo?

They can improve their AI capabilities. If you look at some integrations like XDR or AI, which add to the platform to correlate situations in events, there are areas for enhancement. For instance, ...

See all answers

Comparisons

Elastic Stack vs Cribl

Compared 15% of the time

Logstash vs Cribl

Compared 14% of the time

BindPlane OP vs Cribl

Compared 9% of the time

Wazuh vs Cribl

Compared 6% of the time

Splunk Synthetic Monitoring vs Cribl

Compared 6% of the time

More Cribl Competitors

Splunk Enterprise Security vs Devo

Compared 22% of the time

IBM Security QRadar vs Devo

Compared 19% of the time

Microsoft Sentinel vs Devo

Compared 15% of the time

LogRhythm SIEM vs Devo

Compared 8% of the time

Wazuh vs Devo

Compared 7% of the time

More Devo Competitors

Product Reports

Buyer's Guide

Cribl

December 2024

Download Cribl product report

Buyer's Guide

Devo

December 2024

Download Devo product report

Learn More

Cribl

Devo

Overview

Cribl optimizes log collection, data processing, and migration to Splunk Cloud, ensuring efficient data ingestion and management for improved operational efficiency.

Cribl offers seamless log collection directly from cloud sources, allowing users to visually extract necessary data and replay specific events for in-depth analysis. It provides robust management of events, parsing, and enrichment of data, along with effective log size reduction. Cribl is particularly beneficial for migrating enterprise logs, optimizing usage, and reducing costs while streamlining the transition between different log management tools.

What are Cribl's most important features?

Real-Time Data Transformation: Enables immediate data processing for accurate insights.
Simplified Log Collection: Gathers data from diverse sources effortlessly.
Powerful Data Reduction: Reduces log size without losing critical information.
Inbuilt Packs: Ready-to-use functions simplify complex tasks.
Live Testing: Allows testing before production deployment for reliability.
Master Node Updates: Manages worker groups efficiently for consistent performance.
Advanced Data Processing: Offers robust data serialization and coding perspectives.
Easy Plugin Configurations: Facilitates direct integration with reduced setup time.

What benefits and ROI should users look for?

Optimized Usage: Ensures effective resource management and cost reduction.
Streamlined Migration: Simplifies the transition between log management tools.
Enhanced Data Management: Improves data quality and processing efficiency.
Reduced Time and Effort: Direct-to-production capabilities save operational time.

Cribl is widely implemented in industries requiring extensive data management, such as technology and finance. Users leverage Cribl to handle log collection, processing, and migration efficiently, ensuring smooth operation and effective data analysis. It aids in managing temporary data storage during downtimes and better handling historical data, preventing data loss and allowing extended periods for viewing statistics and monitoring trends.

Devo is the only cloud-native logging and security analytics platform that releases the full potential of all your data to empower bold, confident action when it matters most. Only the Devo platform delivers the powerful combination of real-time visibility, high-performance analytics, scalability, multitenancy, and low TCO crucial for monitoring and securing business operations as enterprises accelerate their shift to the cloud.

Sample Customers

Information Not Available

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

Buyer's Guide

Cribl vs. Devo

December 2024

Free Report: Cribl vs. Devo

Find out what your peers are saying about Cribl vs. Devo and other solutions. Updated: December 2024.

DOWNLOAD NOW

824,053 professionals have used our research since 2012.

See our Cribl vs. Devo report.

See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.