Try our new research platform with insights from 80,000+ expert users

Cribl vs Elastic Stack comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 24, 2024
 

Categories and Ranking

Cribl
Ranking in Log Management
13th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
10
Ranking in other categories
Application Performance Monitoring (APM) and Observability (14th), Data Integration (17th), Cloud Data Integration (13th), Data Preparation Tools (4th)
Elastic Stack
Ranking in Log Management
14th
Average Rating
7.8
Reviews Sentiment
6.0
Number of Reviews
15
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of December 2024, in the Log Management category, the mindshare of Cribl is 1.0%, up from 0.1% compared to the previous year. The mindshare of Elastic Stack is 4.0%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

Hariram G - PeerSpot reviewer
Collects logs from various cloud sources with reduced costs and improved efficiency
Cribl has simplified many aspects of the onboarding process, but there's still room for improvement. Currently, no other tools in the market truly compete with Cribl in its niche. Splunk is trying to retain customers by developing ingest actions to reduce licensing costs, hoping to prevent them from switching to Cribl. There is no alerting mechanism for the leader/worker nodes status. Since Cribl plays a major role in the mid-layer between the source and destination, there's a slight risk of losing data at some points while receiving real time data. It would be helpful if Cribl could temporarily store or index the data for a specific time range. This would prevent data loss during downtime. Additionally, there's room for improvement in how Cribl handles historical data. Currently, I can't view trends beyond a week, and even then, it’s often limited to just 24 hours. Since Cribl doesn’t index the data but only forwards it, extending the period for viewing statistics and monitoring trends would be a valuable enhancement.
Mahesh Ramichetty - PeerSpot reviewer
A stable product that can be fine-tuned easily
Elastic Stack provides all sorts of things, so it provides Elasticsearch for the transformations into a specific format, and pipelines can be defined for distributed applications along with the logs that come in the JSON format, which is clean. It's only the enhancements or the security that the product lacks and needs to be enhanced. I don't think further enhancement of the features needs to be added to the solution because it is already equivalent to a monitoring or alerting system, like Dynatrace and other tools. Some developments in the area of AI, which Elastic Stack is currently working on, should be fine in terms of the enhancements. Whenever some critical issue happens, there should be some kind of a co-pilot that helps resolve the issue. The tool should learn from its own previous issues. If you take Databricks, you see that it provides a co-pilot for Python, so a similar kind of development in Elastic Stack would be a real asset for it. AI would be considered a good way to enable the tool further for more in 2024, and even a beta launch would be helpful. If you take any sort of cloud-native monitoring product, like Azure Monitor or AWS CloudWatch, you see that such products don't provide much of the insights. If you go with Azure Monitor for any sort of ML models to be there, Sentinel needs to be used from Azure, which is very costly. AI-enablement would be a big improvement in Elastic Stack. Everyone in the monitoring space, including Dynatrace and New Relic, has lately been discussing AI, but it doesn't seem to be coming out. If there is room for an ML model in Elastic Stack, then it would be good.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Features such as Cribl Stream, Cribl LogStream, and Cribl Edge have been the most beneficial. The Cribl LogStream, in particular, is valuable for routing data, creating firewalls on pipelines, and putting security measures in place to ensure data reaches its destination without issues."
"My favorite option in Cribl is the Stream product."
"The support team was very helpful and managed to get everything production-ready."
"I'd rate the solution ten out of ten."
"When it comes to the product's installation phase, it is not tough for people who have good knowledge...The tool is worth the investment."
"The platform's most valuable feature is the ability to transform data in real-time within the pipeline without sending it to a destination."
"Cribl offers other valuable features. For instance, you can replay data from an edge device, store your daily data in a stream, and replay specific event data into Splunk if a security incident occurs"
"Cribl offers easy plugin configurations and source collection settings, allowing us to collect logs from any source."
"I have experienced a return on investment from the use of the solution."
"It supports various integrations. It's open source and has excellent community support."
"The only beneficial aspect of Elastic Stack is that it's open source."
"The biggest strength of Elastic Stack is its brilliant archiving capabilities."
"Prior to the latest updates, data lake management was a standout feature. The hybrid capability for on-premise and cloud integration was also crucial. Now, with Elastic Defense, the agent simplifies security monitoring, making it a key asset."
"The tool's most powerful aspect is its search engine capability. It's a highly effective and powerful solution for searching. We use it in professional and student projects at universities, and it delivers promising results."
"The solution's technical support is good...Elastic Stack offers good value for value for money based on the product's features and what they offer."
"Elastic Stack is mainly used to monitor servers and APIs. It helps ensure the software's availability and sends notifications at the right time so the system is not down for a long time. The tool's stability and advanced features, such as anomaly detection, are the most valuable features. The benefit of using it is real-time monitoring."
 

Cons

"Cribl could have developed some version that can give backward compatibility."
"There is no alerting mechanism for the leader/worker nodes status."
"There have been several administrative issues. Another point is that the browsing functions aren't very intuitive."
"Cribl could improve by offering easier integrations with enterprise products, similar to what Splunk provides."
"There is room for improvement in the documentation and knowledge base, particularly regarding configurations like sources where logs are being ingested"
"Perhaps more flexibility in terms of metrics would be helpful."
"Cribl should consider adding more features that are applicable to smaller firms, allowing broader access to their data migration through Cribl."
"The sys logging could be enhanced to make it easier to identify errors, especially when dealing with multiple functions."
"Improvements are needed in the solution in areas like SOAR and TIP, where there are certain shortcomings."
"The solution is expensive, particularly the training and certification. If customers want to increase their use of Elastic Stack, they should consider reducing the cost of certification and training."
"The stability of the solution is rated as three or four out of ten as we frequently encounter issues."
"When people try to move the data from another source to Elastic Stack for visualization, they face challenges when connecting to Elastic Stack from such different sources."
"Improving integration capabilities, especially with authentication systems, firewalls, and security controls, is a crucial area for improvement in Elastic Stack. Additionally, enhancing functionality to handle large Yara queries more efficiently would be beneficial, as many EDR solutions can run such queries faster than Elastic Stack's current limitations."
"AI-enablement would be a big improvement in Elastic Stack...If there is room for an ML model in Elastic Stack, then it would be good."
"The implementation of dashboards in the solution needs to be made easier...I had some issues with the ports and configuration since it was kind of complex to implement with Docker."
"Support could be improved. The error code is not helpful. We have to ask for it or pass it on to community forums."
 

Pricing and Cost Advice

"I would not say it is a cheaply priced tool as it has been doing wonders in the market. The tool has been budget-friendly for organizations."
"The product pricing is reasonable compared to other solutions."
"I used the open-source version of Elastic Stack, because of which I did not have to pay anything."
"Ultimately, the pricing depends upon the capacity planning that the enterprise architect does."
"It depends on the specifics, but generally, Elastic is economical for certain use cases."
"The product is expensive."
"If I compare Elastic Stack to the other products in the market, I would say that the tool is available at a competitive price."
"I rate the solution's pricing a six out of ten."
"We are using the open-source community version of the product."
"The pricing is reasonable."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Computer Software Company
10%
Healthcare Company
8%
Government
7%
Computer Software Company
13%
Financial Services Firm
12%
Comms Service Provider
9%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for Cribl?
I am not aware of the pricing details, however, I know they use a credit format for billing.
What needs improvement with Cribl?
At the moment, I don't have specific feedback on what can be improved as I do not work with Cribl daily. Perhaps more flexibility in terms of metrics would be helpful.
What is your primary use case for Cribl?
I am using Cribl to have everything centralized in one tool in terms of data collection. We were working with different Splunk customers, and Cribl helps collect data and then send it to an S3 buck...
What do you like most about Elastic Stack?
The tool is huge, and it performs brilliantly. I tested it for malware, and within two weeks of launching, the product alerted me about a network intrusion. This was a tough test for it, but it per...
What is your experience regarding pricing and costs for Elastic Stack?
We use Elastic Stack's open source version, so it is free for us.
What needs improvement with Elastic Stack?
Elastic Stack needs more features similar to other SIEM tools such as Sentinel or the ability to create automations. Additionally, it should facilitate easier manual integration.
 

Comparisons

 

Learn More

 

Overview

Find out what your peers are saying about Cribl vs. Elastic Stack and other solutions. Updated: December 2024.
824,053 professionals have used our research since 2012.