No more typing reviews! Try our Samantha, our new voice AI agent.

Cribl vs Logsign Next-Gen SIEM comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cribl
Ranking in Log Management
3rd
Ranking in Security Information and Event Management (SIEM)
4th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
65
Ranking in other categories
Application Performance Monitoring (APM) and Observability (7th), Observability Pipeline Software (1st)
Logsign Next-Gen SIEM
Ranking in Log Management
44th
Ranking in Security Information and Event Management (SIEM)
47th
Average Rating
7.6
Reviews Sentiment
7.1
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Cribl is 1.4%, up from 1.3% compared to the previous year. The mindshare of Logsign Next-Gen SIEM is 1.0%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Cribl1.4%
Logsign Next-Gen SIEM1.0%
Other97.6%
Security Information and Event Management (SIEM)
 

Featured Reviews

JigarHirani - PeerSpot reviewer
Splunk Engineer at a recruiting/HR firm with 11-50 employees
Log pipelines have reduced daily data volume and now simplify traffic analysis
Overall, the pipelines and all the features are good with Cribl. The UI is good. Just sometimes, when I actually started using Cribl, I faced the issue where I was not able to connect the nodes. The pipeline is structured in a certain way, then the data will be routed to there, and something of that nature. I was very much confused about their whole products, such as Data Lake and pipelines. It's possible that at that time I didn't take any university courses, which is why I did not know much. But if they can give an intro on how we can connect nodes, or they can provide simple use cases showing what you can do with Cribl, it would help. If you just need to add the source and the destination and pre-build some proper workflow, then it will be easy for new customers to navigate through Cribl.
Thanuja Karunarathne - PeerSpot reviewer
Engineer at Connex Information Technologies
Real-time monitoring and analytics are very easy and fast and very easy to use
The alerting and real-time analytics helped the security team. They are using a Hadoop database, so real-time monitoring and analytics are very easy and fast. Queries return results quickly and in very small time. It has full automation and automated SIEM responses. We are currently only testing Logsign, but in a few months, we plan to integrate our servers, routers, firewalls, and endpoints into our company's Logsign instance. Then, we can manage everything using Logsign.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We save around 2.2 TB every day using Cribl by filtering out unwanted logs coming from syslog devices and other networking devices, which saves our license."
"I'd highly recommend other organizations to use Cribl Search because it did help us a lot with data processing and everything."
"Mostly because of the positive reasons, I would say it is easy to use, it is sustainable, the support is nice, the coding is quite easy to understand, there are a lot of functionalities there, you can do a lot of things, and the data migration is very easy."
"One of the biggest advantages for my organization is better control over log data."
"When we had Cribl in place, it provided a vision and a platform for us to control what we send and how we send it in terms of data passing, data enrichment, and many more things, with massaging the data."
"Cribl brings significant benefits like cost-effectiveness, reducing CM costs, and making our data vendor-agnostic since data flows through Cribl."
"Overall, flexibility and control over observability data are the things I appreciate most about Cribl."
"Cribl intelligently formats syslogs, extracting the data and reducing their size by almost 30 to 40 percent in my experience, stripping out null values and discarding what is not required so only what is needed is presented."
"The most valuable features of Logsign SIEM are its cloud capabilities, alerting functionality, integration with Elastic Search, and configuration options."
"Logsign provides sample logs within the product, allowing users to see how logs will appear before integration, which is a valuable feature for testing and understanding log formats."
"It has full automation and automated SIEM responses."
 

Cons

"Regarding Cribl's ability to contain data cost and complexity, if they can reduce their cost, that will make them more competitive."
"Cribl should consider adding more features that are applicable to smaller firms, allowing broader access to their data migration through Cribl."
"On the other hand, I would like to see improvements in pack management, which is currently a mess with no way to manage packs differently across worker groups."
"To develop user skills in Cribl, it needs to improve some certifications, as the ones I have taken are not entirely helpful in the main projects for the clients."
"The sys logging could be enhanced to make it easier to identify errors, especially when dealing with multiple functions."
"There is no alerting mechanism for the leader/worker nodes status."
"The user interface of Cribl Search can be more simplified because for non-technical users, it is quite difficult to grasp."
"Improvement could be made in the logging area, as sometimes we encounter issues in a pipeline or something, and it's not immediately obvious when you look at the logs that the pipeline is failing."
"AI and machine learning need to be developed. If they develop those features, I think everything will be fine."
"Improvements needed in Logsign SIEM are providing specific security alerts that can be filtered and configured more effectively."
"I hope they address the pricing model for Logsign Next-Gen SIEM, especially regarding regional variations. The pricing should not differ based on the country of operation as it can lead to dissatisfaction among customers. A fixed pricing structure would be more favorable for us. I would also suggest enhancing the GUI interface and adding features similar to xFi Exchange from IBM Pure. This would streamline operations and save time for analysts."
 

Pricing and Cost Advice

"I would not say it is a cheaply priced tool as it has been doing wonders in the market. The tool has been budget-friendly for organizations."
"The product pricing is reasonable compared to other solutions."
"Compared to other SIEMs, it has low pricing."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
921,749 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Manufacturing Company
11%
Healthcare Company
6%
Outsourcing Company
6%
Comms Service Provider
13%
Financial Services Firm
12%
Construction Company
8%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business52
Midsize Enterprise8
Large Enterprise36
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Cribl?
I have a direct contract with Cribl. My experience with pricing, setup cost, and licensing is straightforward; we talked with Cribl directly and established a contract with them.
What needs improvement with Cribl?
Regarding Cribl's improvements, I don't think it could be better. I don't have anything specific to improve at this time. I really appreciate the way that it works and how it is designe...
What is your primary use case for Cribl?
Cribl serves as our SIEM. A specific example of how we use Cribl as our SIEM is that we have substantial data and numerous alerts that we gather from Cribl, and we create incidents in ServiceNow us...
Ask a question
Earn 20 points
 

Overview

 

Sample Customers

Information Not Available
Turkish Petroleum, Tırsan, DP World, SAC American Colleges, Robert College, Unlu&Co, UniCo Insurance Company, ETSTur, CK Energy, UEDAS Energy, Wilo, Eurocross Assistance, Deloitte Turkey, Incı GS Yuasa, Pappara, Bilgi University, Anadolu University, İstanbul University, The Ministry of Energy and Natural Resources, TRT, Anadolu Media Agency, Ministry of Family, Labour and Social Services, Ispark, Spor AS and wide range of enterprises in different industries. 
Find out what your peers are saying about Cribl vs. Logsign Next-Gen SIEM and other solutions. Updated: November 2026.
921,749 professionals have used our research since 2012.