Elastic Security vs FileAudit comparison

Elastic and IS Decisions are both solutions in the Security Information and Event Management (SIEM) category. Elastic is ranked #5 with an average rating of 7.7, while IS Decisions is ranked #44 with an average rating of 8.0. Elastic holds a 6.6% mindshare in SIEM, compared to IS Decisions’s 0.1% mindshare. Additionally, 86% of Elastic users are willing to recommend the solution, compared to 100% of IS Decisions users who would recommend it.

Elastic Security

Read 64 Elastic Security reviews

9,624 Views
8,079 Comparison Views

86% willing to recommend

FileAudit

Read 3 FileAudit reviews

142 Views
88 Comparison Views

100% willing to recommend

Elastic Security

FileAudit

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

FileAudit and Elastic Security compete in the domain of auditing and security. FileAudit generally has the upper hand in pricing and ease of deployment, while Elastic Security offers superior features and scalability, justifying its higher price point.

Features: FileAudit offers straightforward auditing and reporting capabilities, critical insights with minimal setup needed. Elastic Security provides comprehensive threat detection, advanced response features, and extensive integration capabilities for users with complex security needs.

Room for Improvement: FileAudit users suggest enhanced integration options, more detailed alerting features, and better support for larger infrastructures. Elastic Security users mention needing a more intuitive setup process, improved compatibility with third-party tools, and better user accessibility.

Ease of Deployment and Customer Service: FileAudit is recognized for quick deployment and responsive customer service, ideal for SMBs and enterprises. Elastic Security requires a more complex deployment process but is known for extensive support and thorough documentation.

Pricing and ROI: FileAudit is highlighted for competitive pricing and favorable ROI, especially for smaller organizations. Elastic Security, though more expensive, is considered a worthwhile investment due to its extensive features and scalability, offering better long-term value for users needing advanced security measures.

To learn more, read our detailed Elastic Security vs. FileAudit Report (Updated: March 2025).

Buyer's Guide

Elastic Security vs. FileAudit

March 2025

Download the complete report

Helped 845,040 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Elastic Security

Ranking in Log Management

7th

Ranking in Security Information and Event Management (SIEM)

5th

Average Rating

7.8

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Endpoint Detection and Response (EDR) (16th), Security Orchestration Automation and Response (SOAR) (6th), Extended Detection and Response (XDR) (8th)

FileAudit

Ranking in Log Management

43rd

Ranking in Security Information and Event Management (SIEM)

44th

Average Rating

9.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of April 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Elastic Security is 6.6%, down from 9.4% compared to the previous year. The mindshare of FileAudit is 0.1%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

Gajewski Marek

Chief Technology Officer & Co-founder at CS2

Provides good anomaly detection and connectivity reporting

We previously used Splunk but switched to Elastic Security because Splunk was more expensive. Feature-wise, both tools are pretty much the same. They have almost the same functions. Elastic Security has a much better AI assistant that allows you to ask questions like a normal person. With Elastic Security, I can also predict the price and how much it will cost. Splunks's pricing depends on how much data we use and the different add-ons I have to add. The pricing is much better with Elastic Security.

Read full review

AntoSebastin

Cyber Security Consultant - APAC at Logon Software

A scalable SIEM solution for monitoring a user's activity in the file server

The most valuable features of the solution are its quick and simple features related to advanced permissions for files, allowing for what permission needs to be granted to the users when it comes to the monitoring folder in the solution. If someone who has been denied permission to use a particular folder tries to go to that folder, then the administrator gets a notification. In general, the administrator can easily gather and maintain records if a person who has been denied permission to a particular confidential folder tries to access it.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"ELK is open-source, and it will give you the framework you need to build everything from scratch."

"It is the best open-source product for people working in SO, managing and analyzing logs."

"The most valuable feature for me is Discover."

"Elastic Security is very easy to adapt."

"It's not very complicated to install Elastic."

"What customers found most valuable in Elastic Security feature-wise is the search capability, in particular, the way of writing the search query and the speed of searching for results."

"Elastic Security offers advanced features such as machine learning and integration with ChatGPT."

"The solution has a good community surrounding it for lots of helpful documentation for troubleshooting purposes."

More Elastic Security pros

"It is a good and stable solution...It is a scalable solution."

"Our customer acquires the complete report which is kept for future auditing purposes."

"Alerting upon file changes is the most valuable aspect of the product."

Cons

"The process of designing dashboards is a little cumbersome in Kibana. Unless you are an expert, you will not be able to use it. The process should be pretty straightforward. The authentication feature is what we are looking for. We would love to have a central authentication system in the open-source edition without the need for a license or an enterprise license. If they can give at least a simple authentication system within a company. In a large organization, authentication is very essential for security because logs can contain a lot of confidential data. Therefore, an authentication feature for who accesses it should be there."

"The solution needs to be more reactive to investigations. We need to be able to detect and prevent any attacks before it can damage our infrastructure. Currently, this solution doesn't offer that."

"There should be a simulation environment to check whether my Elastic implementation is functioning perfectly fine. Other solutions have their own Android and iOS applications that I can install on my mobile so that I am continuously connected to the SIEM."

"Elastic Security can be a bit difficult to use if a person only has experience in SMBs with tools like Zoho. The product can also be difficult for those who have never dealt with query language."

"Authentication is not a default in Kibana. We need to have another tool to have authentication and authorization. These two should be part of Kibana."

"This type of monitoring is not very mature just yet. We need more real-time information in a way that's easier to manage."

"Elastic Security could improve the documentation. It would help if they were more simple and clean."

"I would like the process of retrieving archived data and viewing it in Kibana to be simplified."

More Elastic Security cons

"The DLP function, including installation of the agent on the workstation and controlling the DLP restrictions, are areas where the product lacks."

"Whenever someone cuts and paste, it shows as "file is deleted"."

"The updates management and central management console could be improved."

Pricing and Cost Advice

"The licensing cost of Elastic Security is based on the daily ingestion rate. I can't recall the exact figure, but for 10GB of log action daily, it would cost around $20,000."

"The solution is not expensive and costs around ten dollars a month."

"The tool's pricing is flexible and comes at unit cost. You don't have to pay for everything."

"The product offers an amazing pricing structure. Price-wise, the product is very competitive."

"The pricing is in the middle. I think it is not an expensive experience if we compare it with big names, for example, QRadar, and also Oxide. I think Elastic Security is quite cheap. I would rate the pricing of this solution a five out of ten."

"Elastic Security is free to use."

"The price is reasonable. It probably costs the same as ArcSight and LogRhythm SIEM. FortiSIEM might cost less than Elastic Security. There are no hidden or additional costs."

"The solution is free."

More Elastic Security pricing and cost advice

"FileAudit provides a trial license for 30 days, and after that, customers can choose between perpetual licensing or the annual-based licensing option offered by FileAudit."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

845,040 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Government

10%

Financial Services Firm

University

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

Datadog vs ELK: which one is good in terms of performance, cost and efficiency?

With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several times lately using the dashboards we have created with Datadog; they are very good c...

See all answers

What do you like most about Elastic Security?

Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it contains critical information. The reverse index allows fast data indexing because ...

See all answers

What is your experience regarding pricing and costs for Elastic Security?

Elastic Security is considered cost-effective, especially at lower EPS levels. However, a direct comparison was not made due to different pricing structures.

See all answers

What do you like most about FileAudit?

It is a good and stable solution...It is a scalable solution.

See all answers

What needs improvement with FileAudit?

The DLP function, including installation of the agent on the workstation and controlling the DLP restrictions, are areas where the product lacks. It would be great if the aforementioned details wer...

See all answers

What is your primary use case for FileAudit?

My company uses FileAudit as an SIEM solution, and it is used for monitoring the file server activity to find out what users did in the file server, which may include modifying the file, deleting i...

See all answers

Comparisons

Wazuh vs Elastic Security

Compared 23% of the time

CrowdStrike Falcon vs Elastic Security

Compared 9% of the time

IBM Security QRadar vs Elastic Security

Compared 7% of the time

Splunk Enterprise Security vs Elastic Security

Compared 6% of the time

Microsoft Sentinel vs Elastic Security

Compared 5% of the time

More Elastic Security Competitors

ManageEngine File Audit Plus vs FileAudit

Compared 100% of the time

More FileAudit Competitors

Product Reports

Buyer's Guide

Elastic Security

March 2025

Download Elastic Security product report

Buyer's Guide

Security Information and Event Management (SIEM)

March 2025

Download FileAudit product report

Also Known As

Elastic SIEM, ELK Logstash

No data available

Overview

Elastic Security is a robust, open-source security solution designed to offer integrated threat prevention, detection, and response capabilities across an organization's entire digital estate. Part of the Elastic Stack (which includes Elasticsearch, Logstash, and Kibana), Elastic Security leverages the power of search, analytics, and data aggregation to provide real-time insight into threats and vulnerabilities. It is a comprehensive platform that supports a wide range of security needs, from endpoint protection to cloud and network security, making it a versatile choice for organizations looking to enhance their cybersecurity posture.

Elastic Security combines the features of a security information and event management (SIEM) system with endpoint protection, allowing organizations to detect, investigate, and respond to threats in real time. This unified approach helps reduce complexity and improve the efficiency of security operations.

Additional offerings and benefits:

The platform utilizes advanced analytics, machine learning algorithms, and anomaly detection to identify threats and suspicious activities.
It offers extensive integration options with other tools and platforms, facilitating a more cohesive and comprehensive security ecosystem.
With Kibana, users gain access to powerful visualization tools and dashboards that provide real-time insight into security data.

Finally, Elastic Security benefits from a global community of users who contribute to its threat intelligence, helping to enhance its detection capabilities. This collaborative approach ensures that the solution remains on the cutting edge of cybersecurity, with up-to-date information on the latest threats and vulnerabilities.

Elastic

Agentless, remote and non-intrusive, FileAudit offers a simple more user-friendly way to safeguard and secure file access in a Windows environment. FileAudit provides real-time monitoring and alerting on all access (or access attempts). FileAudit also implements contextual functions such as mass access and alteration alerts, tracking source IP address information for remote data access, and providing granular time and date alerting parameters to monitor folder and file access at unusual or unexpected times.

IS Decisions

Sample Customers

Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care

CommuniCare Health Centre, DP World, BAE Systems, Moet Hennessy, Ernst & Young, Honda, Volswagon, VTech, GlakoSmithKline, Lockheed Martin, US Navy, University of Alabama, Ministry of Interior Saudi Arabia, Total

Buyer's Guide

Elastic Security vs. FileAudit

March 2025

Free Report: Elastic Security vs. FileAudit

Find out what your peers are saying about Elastic Security vs. FileAudit and other solutions. Updated: March 2025.

DOWNLOAD NOW

845,040 professionals have used our research since 2012.

See our Elastic Security vs. FileAudit report.

See our list of best Security Information and Event Management (SIEM) vendors and best Log Management vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.