Try our new research platform with insights from 80,000+ expert users

Cribl vs syslog-ng comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 24, 2024
 

Categories and Ranking

Cribl
Ranking in Log Management
37th
Average Rating
8.6
Number of Reviews
4
Ranking in other categories
Application Performance Monitoring (APM) and Observability (36th), Data Integration (37th), Cloud Data Integration (23rd), Data Preparation Tools (6th)
syslog-ng
Ranking in Log Management
16th
Average Rating
8.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2024, in the Log Management category, the mindshare of Cribl is 0.6%, up from 0.0% compared to the previous year. The mindshare of syslog-ng is 2.9%, up from 1.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

Pawel Kwiatkowski - PeerSpot reviewer
Aug 7, 2024
Provides a robust framework for managing data flows, but the debugging capabilities need improvement
My primary use case for the platform was the internal management of events, parsing, and enriching events based on lookup files. It involved creating sources and destinations, managing data processing, and serializing data The solution has streamlined our data management and processing, making…
SN
Mar 1, 2023
Consistent in delivering data, stable, and scalable
Syslog is mainly used for network logs, and it can be configured to support a number of ports for an IP. From a scalability perspective, a front-end load balancer or other third-party elements can be used to route traffic to syslog. However, syslog will always look for the standard log format. If the format is not up to the standard syslog level, the load balancer will add its own IP to the log and forward it to syslog. To ensure integrity, the log should remain the same, without any changes to the server A IP. If there is a change in the login server A, the load balancer will add its own IP or hostname to the log and forward it to syslog. To address this issue, further investigation is needed to enable the product to overcome this scenario. We have 12 technicians supporting the platform.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product's most valuable features include the internal management of events, coding perspective, data processing, and serialization."
"Cribl offers other valuable features. For instance, you can replay data from an edge device, store your daily data in a stream, and replay specific event data into Splunk if a security incident occurs"
"Cribl offers easy plugin configurations and source collection settings, allowing us to collect logs from any source."
"The platform's most valuable feature is the ability to transform data in real-time within the pipeline without sending it to a destination."
"Syslog-ng provides easy access to all my logs. It helps me show managers and other clients precisely where an incident occurred. I also like it because you can integrate syslog-ng with multiple solutions to allow real-time monitoring."
"Syslog-ng has built-in features that we can use to create alerts for a SIEM solution. It isn't a true SIEM solution, but it's sufficient for the time being."
"The ability to extract and store the logs is the most valuable feature of syslog-ng."
"For us, the most valuable feature is the use of compound search for searching logs at a specific time, by a specific user, or specific behavior."
"Syslog-ng has a separate config file in addition to the core configuration."
 

Cons

"Cribl doesn't have as many packs available"
"Cribl could improve by offering easier integrations with enterprise products, similar to what Splunk provides."
"The sys logging could be enhanced to make it easier to identify errors, especially when dealing with multiple functions."
"There is no alerting mechanism for the leader/worker nodes status."
"Syslog-ng has built-in features that we can use to create alerts for a SIEM solution. It isn't a true SIEM solution, but it's sufficient for the time being."
"It's hard to find people who know how to use syslog-ng. I often find problems with configurations, and solutions aren't integrated correctly with syslog-ng. For example, there might be data with extra decimals, or the collector agents are incorrectly named. It isn't a problem with the solution; it's a lack of professionals."
"There is always the potential for additional integration and protocol extensions."
"The filtering has room for improvement."
"There is room for improvement in terms of observability."
 

Pricing and Cost Advice

"The product pricing is reasonable compared to other solutions."
"Syslog-ng is open-source."
"Syslog-ng is a free open-source solution."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
800,688 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
20%
Computer Software Company
14%
Government
8%
Healthcare Company
7%
Computer Software Company
14%
Government
14%
Financial Services Firm
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What needs improvement with Cribl?
Cribl has a good community base, but unlike some vendors like Splunk, which has many TAs, Cribl doesn't have as many packs available. They need to focus on developing more custom packs for various ...
What is your primary use case for Cribl?
We use Cribl for multiple purposes. One key use is migration to Splunk Cloud. Traditionally, we used Splunk as an intermediate forwarder but switched to Cribl for this role. Cribl collects and send...
What do you like most about syslog-ng?
For us, the most valuable feature is the use of compound search for searching logs at a specific time, by a specific user, or specific behavior.
What is your experience regarding pricing and costs for syslog-ng?
The pricing is in the middle. I would rate the pricing a six out of ten, with one being expensive and ten being cheap.
What needs improvement with syslog-ng?
There is room for improvement in terms of observability. Additionally, a possible new feature could be Kafka integration.
 

Comparisons

 

Overview

 

Sample Customers

Information Not Available
Tecnocom, University of Victoria, University of Exeter, Datapath
Find out what your peers are saying about Cribl vs. syslog-ng and other solutions. Updated: August 2024.
800,688 professionals have used our research since 2012.