No more typing reviews! Try our Samantha, our new voice AI agent.

Elastic Observability vs Logsign Next-Gen SIEM comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Elastic Observability
Ranking in Log Management
15th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
29
Ranking in other categories
Application Performance Monitoring (APM) and Observability (11th), IT Infrastructure Monitoring (15th), Container Monitoring (5th), Cloud Monitoring Software (11th)
Logsign Next-Gen SIEM
Ranking in Log Management
36th
Average Rating
7.6
Reviews Sentiment
7.1
Number of Reviews
4
Ranking in other categories
Security Information and Event Management (SIEM) (36th)
 

Mindshare comparison

As of May 2026, in the Log Management category, the mindshare of Elastic Observability is 1.3%, down from 1.4% compared to the previous year. The mindshare of Logsign Next-Gen SIEM is 1.0%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Elastic Observability1.3%
Logsign Next-Gen SIEM1.0%
Other97.7%
Log Management
 

Featured Reviews

Mohammed-Abdelalim - PeerSpot reviewer
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
Has provided powerful customization for unique monitoring needs but needs more out-of-the-box capabilities
In my opinion, the best features of Elastic Observability are their flexibility to integrate with other existing systems and the ability to build a unified monitoring tool that can integrate with existing ones and end-to-end user journeys which require a lot of customizations. The greatest feature in Elastic is the ability to customize. This is similar to my comments about customizable dashboards in Elastic because it's visible to the analyst. However, it's very great. Customizing these dashboards can meet the customer's specific use cases and specific stories that they have in their environment, their special environment that doesn't look like other environments. The dashboarding in Elastic is highly customizable to the level of logos. If the customer wants his company logo in the dashboard, it can be done.
Ayaz Ahmed - PeerSpot reviewer
Cyber Security Specialist at lums
Works well for threat detection and security
Improvements needed in Logsign SIEM are providing specific security alerts that can be filtered and configured more effectively. There should be a focus on delivering alerts tailored to specific needs rather than overwhelming users with numerous alerts. Additionally, incorporating more mature data about threats is necessary for better threat detection.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Elastic provides built-in features for queries and report generation. It's a very good tool for monitoring integration capabilities."
"The solution allows us to track performance via metrics and we're able to see where latency is happening."
"In addition to the fact that we are more proactive in the detection of incident before they occur, we can on one click see the request path from the customer to the backend."
"The ability to ensure that the data is searchable and maintainable is highly valuable for our purposes."
"Its diverse set of features available on the cloud is of significant importance."
"The solution is open-source and helps with back-end logging. It is also easy to handle."
"It's easy to deploy, and it's very flexible."
"The very positive features are the cost effectiveness and the range of things that you can implement."
"Logsign provides sample logs within the product, allowing users to see how logs will appear before integration, which is a valuable feature for testing and understanding log formats."
"It has full automation and automated SIEM responses."
"The most valuable features of Logsign SIEM are its cloud capabilities, alerting functionality, integration with Elastic Search, and configuration options."
 

Cons

"Elastic APM's visualization is not that great compared to other tools. It's number of metrics is very low."
"The solution would be better if it was capable of more automation, especially in a monitoring capacity or for the response to abnormalities."
"When I go to the portal, I do not see many insights on the endpoints or where there could be latencies."
"Elastic Observability is difficult to use. There are only three options for customization but this can be difficult for our use case. We do not have other options to choose the metrics shown, such as CPU or memory usage."
"With Elastic, you need to code and program more things compared to Dynatrace."
"Elastic APM's visualization is not that great compared to other tools. It's number of metrics is very low."
"There's a steep learning curve if you've never used this solution before."
"I would advise others to use a different solution than Elastic APM."
"AI and machine learning need to be developed. If they develop those features, I think everything will be fine."
"Improvements needed in Logsign SIEM are providing specific security alerts that can be filtered and configured more effectively."
"I hope they address the pricing model for Logsign Next-Gen SIEM, especially regarding regional variations. The pricing should not differ based on the country of operation as it can lead to dissatisfaction among customers. A fixed pricing structure would be more favorable for us. I would also suggest enhancing the GUI interface and adding features similar to xFi Exchange from IBM Pure. This would streamline operations and save time for analysts."
 

Pricing and Cost Advice

"There are two types: cloud and SaaS. They charge based on data ingestion, ingest rate, hard retention, and warm retention. I believe it costs around $25,000 annually to ingest 30GB of data daily. That is the SaaS version. There is also a self-managed license where the customer manages their own infrastructure on-prem. In such cases, there are three license tiers that respectively cost $5,000 annually per node, $7,000 per node, and $12,500 per node."
"The price of Elastic Observability is expensive."
"We will buy a premium license after POC."
"One needs to pay for the licenses, and it is an annual subscription model right now."
"Users have to pay for some features, like the alerts on different channels, because they are unavailable in different source versions."
"The product’s pricing needs improvement."
"Pricing is one of those situations where the more you use it, the more you pay."
"Elastic Observability is cheaper than other similar solutions, such as Dynatrace. Its license calculation is based on various factors like data volume and physical infrastructure, particularly related to RAM capacity."
"Compared to other SIEMs, it has low pricing."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
892,678 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
7%
Government
7%
Financial Services Firm
13%
Comms Service Provider
9%
Computer Software Company
7%
University
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise16
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Elastic Observability?
The problem is their licensing model, which is a bit confusing. Many customers struggle to understand their total cost of ownership because Elastic licensing is not dependent on easy, quantifiable ...
What needs improvement with Elastic Observability?
After careful consideration about areas for improvement in Elastic Observability, aspects such as pricing, customization, implementation, and scalability could be improved. As a user of the system,...
What is your primary use case for Elastic Observability?
My use case for Elastic Observability is observability, as we upload our customers' data, including logs, and when there is an issue, we can analyze what went wrong.
What needs improvement with Logsign Next-Gen SIEM?
It does not have much AI and machine learning features yet. They are developing them and will be releasing them in a few months.
What is your primary use case for Logsign Next-Gen SIEM?
We use Logsign SIEM for various tasks in our daily operations. One key use case is for forensic analysis. We also use it to monitor critical servers and generate security alerts for actions like lo...
What advice do you have for others considering Logsign Next-Gen SIEM?
Overall, I would rate it an eight out of ten. AI and machine learning need to be developed. If they develop those features, I think everything will be fine. I can recommend it. Not for large enterp...
 

Overview

 

Sample Customers

PSCU, Entel, VITAS, Mimecast, Barrett Steel, Butterfield Bank
Turkish Petroleum, Tırsan, DP World, SAC American Colleges, Robert College, Unlu&Co, UniCo Insurance Company, ETSTur, CK Energy, UEDAS Energy, Wilo, Eurocross Assistance, Deloitte Turkey, Incı GS Yuasa, Pappara, Bilgi University, Anadolu University, İstanbul University, The Ministry of Energy and Natural Resources, TRT, Anadolu Media Agency, Ministry of Family, Labour and Social Services, Ispark, Spor AS and wide range of enterprises in different industries. 
Find out what your peers are saying about Elastic Observability vs. Logsign Next-Gen SIEM and other solutions. Updated: April 2026.
892,678 professionals have used our research since 2012.