No more typing reviews! Try our Samantha, our new voice AI agent.

Cribl vs Logsign Next-Gen SIEM comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cribl
Ranking in Log Management
3rd
Ranking in Security Information and Event Management (SIEM)
5th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
65
Ranking in other categories
Application Performance Monitoring (APM) and Observability (6th), Observability Pipeline Software (1st)
Logsign Next-Gen SIEM
Ranking in Log Management
48th
Ranking in Security Information and Event Management (SIEM)
47th
Average Rating
7.6
Reviews Sentiment
7.1
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Cribl is 1.3%, up from 1.0% compared to the previous year. The mindshare of Logsign Next-Gen SIEM is 1.0%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Cribl1.3%
Logsign Next-Gen SIEM1.0%
Other97.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

JigarHirani - PeerSpot reviewer
Splunk Engineer at a recruiting/HR firm with 11-50 employees
Log pipelines have reduced daily data volume and now simplify traffic analysis
Overall, the pipelines and all the features are good with Cribl. The UI is good. Just sometimes, when I actually started using Cribl, I faced the issue where I was not able to connect the nodes. The pipeline is structured in a certain way, then the data will be routed to there, and something of that nature. I was very much confused about their whole products, such as Data Lake and pipelines. It's possible that at that time I didn't take any university courses, which is why I did not know much. But if they can give an intro on how we can connect nodes, or they can provide simple use cases showing what you can do with Cribl, it would help. If you just need to add the source and the destination and pre-build some proper workflow, then it will be easy for new customers to navigate through Cribl.
Thanuja Karunarathne - PeerSpot reviewer
Engineer at Connex Information Technologies
Real-time monitoring and analytics are very easy and fast and very easy to use
The alerting and real-time analytics helped the security team. They are using a Hadoop database, so real-time monitoring and analytics are very easy and fast. Queries return results quickly and in very small time. It has full automation and automated SIEM responses. We are currently only testing Logsign, but in a few months, we plan to integrate our servers, routers, firewalls, and endpoints into our company's Logsign instance. Then, we can manage everything using Logsign.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I like most about Cribl is the overall pipeline structure and easiness."
"Features such as Cribl Stream, Cribl LogStream, and Cribl Edge have been the most beneficial. The Cribl LogStream, in particular, is valuable for routing data, creating firewalls on pipelines, and putting security measures in place to ensure data reaches its destination without issues."
"There are no complaints, but it has been a very good experience using Cribl."
"Cribl is specifically designed to reduce the data costs associated with the destination platform, which is one of its core offerings."
"Cribl is intuitive, and a user can easily see how the payload or log looks before conversion and how it looks after conversion, and what has been transferred to the destination."
"The capability to reduce logs in a user-friendly manner is a standout feature. Cribl allows us to view logs live as they are being processed, giving us quick feedback on the changes made."
"I think Cribl is an excellent tool for helping to manage data cost and keep it down as well as manage complexity."
"The ease of management and configuration of Cribl Edge features is highly beneficial—I have many thousands of Cribl Edge nodes deployed, and it's very easy to make configuration changes across the board or update the agent."
"It has full automation and automated SIEM responses."
"The most valuable features of Logsign SIEM are its cloud capabilities, alerting functionality, integration with Elastic Search, and configuration options."
"Logsign provides sample logs within the product, allowing users to see how logs will appear before integration, which is a valuable feature for testing and understanding log formats."
 

Cons

"Improvement could be made in the logging area, as sometimes we encounter issues in a pipeline or something, and it's not immediately obvious when you look at the logs that the pipeline is failing."
"If you're a customer who has no idea how to use Cribl and just buy it hoping to solve your problems, it doesn't work that way."
"One thing I think is that Cribl is very dependent on the packs. If you don't have packs and you need to do things on your own, it's not trivial."
"I think Cribl can be improved because I do not believe it is a mature product. It has gone down many times and when we are doing upgrades, many things break and we face a lot of issues, especially with scaling."
"The speed was fast. The quality, however, there wasn't a solution just because I think it was a bug and it was never fixed as far as I know."
"One area that could be improved is the aggregation functionality within Cribl."
"Regarding Cribl's ability to contain data cost and complexity, if they can reduce their cost, that will make them more competitive."
"However, the endpoint plug-in tool can use some refinement, as it tends to hit system resources and can sometimes be detrimental to systems to the point where it must be turned off and a scan restarted when a user is offline."
"Improvements needed in Logsign SIEM are providing specific security alerts that can be filtered and configured more effectively."
"I hope they address the pricing model for Logsign Next-Gen SIEM, especially regarding regional variations. The pricing should not differ based on the country of operation as it can lead to dissatisfaction among customers. A fixed pricing structure would be more favorable for us. I would also suggest enhancing the GUI interface and adding features similar to xFi Exchange from IBM Pure. This would streamline operations and save time for analysts."
"AI and machine learning need to be developed. If they develop those features, I think everything will be fine."
 

Pricing and Cost Advice

"The product pricing is reasonable compared to other solutions."
"I would not say it is a cheaply priced tool as it has been doing wonders in the market. The tool has been budget-friendly for organizations."
"Compared to other SIEMs, it has low pricing."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
910,409 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Manufacturing Company
11%
Healthcare Company
7%
Government
5%
Financial Services Firm
13%
Comms Service Provider
11%
Construction Company
6%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise8
Large Enterprise35
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Cribl?
I find the pricing of Cribl to be cost-efficient because it has helped us save costs for data storage by removing unwanted logs.
What needs improvement with Cribl?
Currently, Cribl is perfectly fine for us, and we have not observed any such issues. However, if we find anything later on, we will document it and share it with you. Cribl could respond more quick...
What is your primary use case for Cribl?
We are using Cribl for log trimming with a vast majority of log sources that have different log patterns or log types. Some logs come in syslog format, some are in JSON, and some are in other HTML ...
Ask a question
Earn 20 points
 

Comparisons

 

Overview

 

Sample Customers

Information Not Available
Turkish Petroleum, Tırsan, DP World, SAC American Colleges, Robert College, Unlu&Co, UniCo Insurance Company, ETSTur, CK Energy, UEDAS Energy, Wilo, Eurocross Assistance, Deloitte Turkey, Incı GS Yuasa, Pappara, Bilgi University, Anadolu University, İstanbul University, The Ministry of Energy and Natural Resources, TRT, Anadolu Media Agency, Ministry of Family, Labour and Social Services, Ispark, Spor AS and wide range of enterprises in different industries. 
Find out what your peers are saying about Cribl vs. Logsign Next-Gen SIEM and other solutions. Updated: August 2026.
910,409 professionals have used our research since 2012.