Exabeam vs Graylog comparison

The compared Exabeam and Graylog solutions aren't in the same category. Exabeam is ranked #15 in SIEM , with an average rating of 7.6, and holds a 1.4% mindshare in the category. Graylog is ranked #16 in Log Management , with an average rating of 6.5, and holds a 6.6% mindshare. Additionally, 73% of Exabeam users are willing to recommend the solution, compared to 95% of Graylog users who would recommend it.

Exabeam

Read 19 Exabeam reviews

2,375 Views
1,274 Comparison Views

73% willing to recommend

Graylog

Read 20 Graylog reviews

9,555 Views
8,400 Comparison Views

95% willing to recommend

Exabeam

Graylog

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Exabeam and Graylog based on real PeerSpot user reviews.

Find out in this report how the two Security Information and Event Management (SIEM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Exabeam vs. Graylog Report (Updated: June 2024).

Buyer's Guide

Exabeam vs. Graylog

June 2024

Download the complete report

Helped 848,989 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Exabeam

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (15th), User Entity Behavior Analytics (UEBA) (3rd), Security Incident Response (5th), Threat Intelligence Platforms (7th), Security Orchestration Automation and Response (SOAR) (7th), AI-Powered Cybersecurity Platforms (9th)

Graylog

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Log Management (16th)

Mindshare comparison

Exabeam and Graylog aren’t in the same category and serve different purposes. Exabeam is designed for Security Information and Event Management (SIEM) and holds a mindshare of 1.4%, up 1.3% compared to last year.
Graylog, on the other hand, focuses on Log Management, holds 6.6% mindshare, up 5.7% since last year.

Security Information and Event Management (SIEM)

Log Management

Featured Reviews

Stephen-Armstrong

Cyber Security Analyst at Capgemini

The SIEM provides a user-friendly UI experience

When events come into the system, the dashboard categorizes them by the highest risk score, not when they appear on the system. When you've got multiple ongoing incidents you can only see the highest risk score at the top of the list rather than the most recent detection. Exabeam's reporting dashboard could have included a filtering option to filter by the most recent detection.

Read full review

Andrey Mostovykh

Senior Data Architect at a non-tech company with 201-500 employees

Real-time analysis, easy setup, and open source

We stopped using it for analytics because of its price, and at the moment, we are using it mostly for log centralization. If you use it with high traffic for analytical purposes, as well as for the logs, the infrastructure costs are unbelievable. Graylog is a great product backed by Elasticsearch as the storage and query engine. It is just an interface on top of Elasticsearch and some Elasticsearch management. The indexes that are kept in Elasticsearch are managed by Graylog software. Elasticsearch is a decent product, but it's very infrastructure-heavy. It requires lots of resources, and if you make a mistake with provisioning, you are likely to not get a cluster back. We had a couple of outages like that, and we hated that. So, we ended up over-provisioning resources just to avoid such situations from happening. If you have a whole team trying to fix the Graylog instance for two days, that's a bit too much. That may be my Norwegian take on it, but the engineering resources are expensive. It's better to just provision the infrastructure. Overall, the product is great, and the features are just fine, but the infrastructure cost is what is killing it. The infrastructure cost is the main issue. I like the rest. If the infrastructure costs could be lower, it would be fantastic. I'm not sure if they can improve the infrastructure cost with the way Elasticsearch is. If they keep using Elasticsearch, maybe there are some opportunities there, or they can support other backends with cheaper storage. They could have a different backend to replace Elasticsearch or do some tweaks to Elasticsearch to reduce the costs. There could be partial parsing of logs or parsing on demand so that when you write data through Graylog to Elasticsearch, it doesn't need to crunch in every detail requiring that much CPU.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The advanced analytics has a really great overview of user behavior."

"The way it can connect with AWS is very useful, and the integrations are pretty good."

"Exabeam has improved our organization by speeding up the investigation process."

"It's a very user-friendly product and it's a very comprehensive technology."

"The user interface and the timelines they use are the most valuable features. The price model is very simple so that one can understand it easily and there are no surprises within it."

"The setup is not difficult. It was easy."

"The most valuable feature of Exabeam is the timeline creation based on log sources, which helps in security investigations."

"The ThreatHunter in Advanced Analytics is the most valuable. It helps analyze compromised assets and provides analysis for any entity within my client's environment."

More Exabeam pros

"Graylog's search functionality, alerting functionality, user management, and dashboards are useful."

"This had increased productivity for the dev and support teams, because we are directly notifying them."

"One of the most valuable features is that you are able to do a very detailed search through the log messages in the overview."

"It has data adapters and lookup tables that utilize HTTP calls to APIs."

"Storing logs in Elasticsearch means log retrieval is extremely fast, and full text search is available by default."

"The solution's most valuable feature is its new interface."

"The build is stable and requires little maintenance, even compared to some extremely expensive products."

"It is used as a log manager/SIEM. It provides visibility into the infrastructure and security related events."

More Graylog pros

Cons

"Updating the new release of Exabeam Fusion SIEM takes time and slows our performance."

"We use the on-prem Exabeam product and face limitations using the web UI and administration of custom models and rules."

"The solution's reporting and dashboarding could be improved."

"The organzation is rigid and not flexible in the way they operate"

"The only problem is that the UI is not very impressive."

"The customer service and support are not satisfactory."

"They should provide detailed information about detecting phishing emails."

"One area that needs improvement is interacting with Exabeam's API. There was a headache regarding the API; the documentation wasn't clear, and the syntax wasn't very precise."

More Exabeam cons

"We ran into problems with Elasticsearch throwing a circuit-breaking exception due to field data size being too large. It turned out that the heap size directly impacted this size in a high-throughput environment, causing unexplained instability in Graylog. We were able to troubleshoot on the Elasticsearch size, but we should have been able to reference some minimum requirements for Graylog to know that our settings weren't sufficient."

"I hope to see improvements in Graylog for more interactivity, user-friendliness, and creating alerts. The initial setup is complex."

"Over six months, I had two similar issues where searches were performed on field "messages". It exhausted all the memory of the ES node causing an ES crash and a Graylog halt."

"The infrastructure cost is the main issue. I like the rest. If the infrastructure costs could be lower, it would be fantastic."

"Lacks sufficient documentation."

"I would like to see a date and time in the Graylog Grok patterns so that I can save time when searching for a log. I like how the streams and the search query work, but adding a date and time will allow me to pull out a log in a milli-second."

"When it comes to configuring the processing pipeline, writing the rules can be very tedious, especially since the documentation isn't extensive on how the functions provided for these rules work."

"I would like to see a default dashboard widget that shows the topology of the clusters defined for the graylog install."

More Graylog cons

Pricing and Cost Advice

"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."

"There is an annual license required to use Exabeam Fusion SIEM. The price of the solution should be reduced."

"Exabeam is not a cheap solution."

"The solution is expensive."

"Exabeam Fusion SIEM's pricing is reasonable."

"They have a great model for pricing that can be based either on user count or gigabits per day."

"I am using a community edition. I have not looked at the enterprise offering from Graylog."

"There is an open source version and an enterprise version. I wouldn't recommend the enterprise version, but as an open source solution, it is solid and works really well."

"It's an open-source solution that can be used free of charge."

"You get a lot out-of-the-box with the non-enterprise version, so give it a try first."

"We are using the free version of the product. However, the paid version is expensive."

"We're using the Community edition."

"If you want something that works and do not have the money for Splunk or QRadar, take Graylog."

"Graylog is a free open-source solution. The free version has a capacity limitation of 2 GB daily, if you want to go above this you have to purchase a license."

More Graylog pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

848,989 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

Government

Computer Software Company

18%

Comms Service Provider

10%

Government

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?

It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...

See all answers

What do you like most about Exabeam Fusion SIEM?

The solution's initial setup process is easy.

See all answers

What is your experience regarding pricing and costs for Exabeam Fusion SIEM?

I do not have much information about the pricing. However, I am aware that Exabeam is cheaper than Palo Alto based on discussions in meetings.

See all answers

What do you like most about Graylog?

The product is scalable. The solution is stable.

See all answers

What is your experience regarding pricing and costs for Graylog?

We are using the free version of the product. However, the paid version is expensive.

See all answers

What needs improvement with Graylog?

When it comes to configuring the processing pipeline, writing the rules can be very tedious, especially since the documentation isn't extensive on how the functions provided for these rules work. P...

See all answers

Comparisons

Splunk Enterprise Security vs Exabeam

Compared 12% of the time

Splunk User Behavior Analytics vs Exabeam

Compared 8% of the time

Microsoft Sentinel vs Exabeam

Compared 8% of the time

LogRhythm SIEM vs Exabeam

Compared 6% of the time

Cortex XSIAM vs Exabeam

Compared 6% of the time

More Exabeam Competitors

Grafana Loki vs Graylog

Compared 40% of the time

Wazuh vs Graylog

Compared 24% of the time

syslog-ng vs Graylog

Compared 11% of the time

Security Onion vs Graylog

Compared 5% of the time

Fortinet FortiAnalyzer vs Graylog

Compared 3% of the time

More Graylog Competitors

Product Reports

Buyer's Guide

Exabeam

April 2025

Download Exabeam product report

Buyer's Guide

Graylog

April 2025

Download Graylog product report

Also Known As

No data available

Graylog2

Overview

Exabeam Fusion is a cloud-delivered solution that that enables you to:

-Leverage turnkey threat detection, investigation, and response
-Collect, search and enhance data from anywhere
-Detect threats missed by other tools, using market-leading behavior analytics
-Achieve successful SecOps outcomes with prescriptive, threat-centric use case packages
-Enhance productivity and reduce response times with automation
-Meet regulatory compliance and audit requirements with ease

Exabeam

Graylog is purpose-built to deliver the best log collection, storage, enrichment, and analysis. Graylog is:

Considerably faster analysis speeds.
More robust and easier-to-use analysis platform.
Simpler administration and infrastructure management.
Lower cost than alternatives.
Full-scale customer service.
No expensive training or tool experts required.

Graylog

Sample Customers

Hulu, ADP, Safeway, BBCN Bank

Blue Cross Blue Shield, eBay, Cisco, LinkedIn, SAP, King.com, Twilio, Deutsche Presse-Agentur

Buyer's Guide

Exabeam vs. Graylog

June 2024

Free Report: Exabeam vs. Graylog

Find out what your peers are saying about Exabeam vs. Graylog and other solutions. Updated: June 2024.

DOWNLOAD NOW

848,989 professionals have used our research since 2012.

See our Exabeam vs. Graylog report.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.