Graylog vs USM Anywhere comparison

Graylog and LevelBlue are both solutions in the Log Management category. Graylog is ranked #17 with an average rating of 6.5, while LevelBlue is ranked #34 with an average rating of 7.3. Graylog holds a 6.4% mindshare in LM, compared to LevelBlue’s 0.6% mindshare. Additionally, 94% of Graylog users are willing to recommend the solution, compared to 92% of LevelBlue users who would recommend it.

Graylog

Read 18 Graylog reviews

9,650 Views
8,360 Comparison Views

94% willing to recommend

USM Anywhere

Read 114 USM Anywhere reviews

2,600 Views
1,783 Comparison Views

92% willing to recommend

Graylog

USM Anywhere

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

USM Anywhere and Graylog compete in the cybersecurity space. USM Anywhere seems to have the upper hand with its intuitive alert systems and comprehensive threat detection as indicated by user preferences.

Features: USM Anywhere provides intuitive alert systems, comprehensive threat detection, and detailed security analytics. It integrates seamlessly with existing infrastructure. Graylog offers advanced log management, powerful data customization, and exceptional search functionalities.

Room for Improvement: USM Anywhere could improve scalability, reduce the complexity of configuration, and enhance adaptability. Graylog users suggest simplifying the initial setup, improving documentation, and enhancing consistency in customer support.

Ease of Deployment and Customer Service: USM Anywhere has an efficient deployment model with responsive customer support. Graylog provides extensive documentation for deployment, though users face inconsistency in customer service.

Pricing and ROI: USM Anywhere offers competitive pricing focused on delivering high ROI through its all-in-one platform. Graylog, though higher in price, offers scalability and advanced features, which justify the investment for those needing in-depth data analysis.

To learn more, read our detailed Graylog vs. USM Anywhere Report (Updated: October 2024).

Buyer's Guide

Graylog vs. USM Anywhere

October 2024

Download the complete report

Helped 816,406 peers since 2012

Categories and Ranking

Graylog

Ranking in Log Management

17th

Average Rating

8.0

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

No ranking in other categories

USM Anywhere

Ranking in Log Management

34th

Average Rating

8.4

Reviews Sentiment

6.4

Number of Reviews

114

Ranking in other categories

Security Information and Event Management (SIEM) (31st), Endpoint Detection and Response (EDR) (51st), Compliance Management (11th)

Mindshare comparison

As of November 2024, in the Log Management category, the mindshare of Graylog is 6.4%, up from 5.4% compared to the previous year. The mindshare of USM Anywhere is 0.6%, down from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Nicolae CIornii

Security Officer at BC Energbank S.A.

Stable solution with room for improvement in interactivity and user-friendliness

We have tested IBM QRadar and now use it. First of all, the key factor is the pricing. I saw that IBM QRadar has an interactive dashboard, providing valuable insights to people. Additionally, I've seen that IBM QRadar has an agent that simplifies installations across various platforms without requiring intricate configurations. Also, IBM QRadar has automatic reporting.

Read full review

Omer Jamil

Supervisor, Security Operations at Bpm

An easy-to-deploy tool that needs to improve its vulnerability scanning feature

To those who plan to use the solution, I would suggest that they go through the documentation and online training models available for free, as it can help you deploy the product quickly while also being helpful in areas where there is a need to understand correlation and monitoring. I rate the overall product a seven out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I like the correlation and the alerting."

"It is used as a log manager/SIEM. It provides visibility into the infrastructure and security related events."

"The ability to write custom alerts is key to information security and compliance."

"Graylog's search functionality, alerting functionality, user management, and dashboards are useful."

"We're using the Community edition, but I know that it has really good dashboarding and alerts."

"The product is scalable. The solution is stable."

"The build is stable and requires little maintenance, even compared to some extremely expensive products."

"The solution's most valuable feature is its new interface."

More Graylog pros

"AT&T AlienVault USM is good for ELK Stack, the user experience is great because of its architecture. The ELK has a great performance and it has very good speed in the search and Kibana. Additionally, the visuals and dashboards and very nice and customizable."

"It is my "security person" looking at irregularities and letting me know when something has occurred."

"The main menu: You can see everything there, what is happening on the servers, and in the logs, you can view more details of each event."

"AlienVault's reporting is good. I like that vulnerability assessment is part of the solution, and the UI is intuitive. Also, the overhead is low, which is to say we don't need a dedicated SOC team to manage and analyze things constantly. We're a small company that doesn't have those resources."

"It has allowed us to see what is happening on our servers."

"Easy to use, scalable, stable, and very intuitive platform that provides protection against security threats."

"Asset discovery and vulnerability scanner are good features. The integration between this solution and OTX, which is an AlienVault platform for Open Threat Exchange, is also a valuable feature. It is also quick and easy to deploy, so you can quickly engage with a customer's environment."

"Allowed us to help our customers satisfy compliance needs around logging and monitoring."

More USM Anywhere pros

Cons

"Over six months, I had two similar issues where searches were performed on field "messages". It exhausted all the memory of the ES node causing an ES crash and a Graylog halt."

"Elasticsearch recommendations for tuning could be better. Graylog doesn't have direct support for running the system inside of Kubernetes, so it can be challenging to fill in the gaps and set up containers in a way that is both performant and stable."

"We ran into problems with Elasticsearch throwing a circuit-breaking exception due to field data size being too large. It turned out that the heap size directly impacted this size in a high-throughput environment, causing unexplained instability in Graylog. We were able to troubleshoot on the Elasticsearch size, but we should have been able to reference some minimum requirements for Graylog to know that our settings weren't sufficient."

"Its scalability gets complicated when we have to update or edit multiple nodes."

"The biggest problem is the collector application, as we wanted to avoid using Graylog Collector Sidecar due to its architecture."

"Since container orchestration systems are popular and Graylog fits the niche well, perhaps they could officially support running in docker containers on Kubernetes as a StatefulSet as a use case. That way, the declarative nature of Kubernetes config files would document their best case deployment scenario-"

"I hope to see improvements in Graylog for more interactivity, user-friendliness, and creating alerts. The initial setup is complex."

"The infrastructure cost is the main issue. I like the rest. If the infrastructure costs could be lower, it would be fantastic."

More Graylog cons

"We've had some stability problems, not a lot, but a few. Updates seem to be the worst. That seems to be when the stability problems come up."

"The UI and overall processes need a little bit more love. This shows in the error banners that come up when you select certain things. There isn't a day that goes by that the UI doesn't error out and I can't view events for an alarm."

"USM Anywhere relies a lot on the community putting the data in. Often, you'll right-click on the attack, but nothing will be found. That's a weakness of it."

"The other thing is the agent is OSSEC. They needed to create its own agent to help to find threats on the devices that it happens to be installed."

"Reporting is convoluted and difficult at times, although they claim to have hundreds of pre-built reports, very few of them are actually useful for anything but what the USM is doing."

"For creating new rules, you have to be familiar with regular expressions. I feel there could be something built-in to make sure that process is easier."

"It should be able to communicate with other security solutions to stop threats."

"There are many reports included but would be nice to have better access to the data."

More USM Anywhere cons

Pricing and Cost Advice

"We're using the Community edition."

"You get a lot out-of-the-box with the non-enterprise version, so give it a try first."

"It's an open-source solution that can be used free of charge."

"There is an open source version and an enterprise version. I wouldn't recommend the enterprise version, but as an open source solution, it is solid and works really well."

"I use the free version of Graylog."

"Having paid official support is wise for projects."

"Graylog is a free open-source solution. The free version has a capacity limitation of 2 GB daily, if you want to go above this you have to purchase a license."

"If you want something that works and do not have the money for Splunk or QRadar, take Graylog."

More Graylog pricing and cost advice

"It is affordable, and it also has many features that the premium products such as ArcSight and QRadar have. It is a very good platform for a SIEM solution. Everything is included in the price."

"So far, I feel the product's pricing is a good value. The technology is decent. You get what you pay for. I think it's fair."

"The pricing is a good value. The key thing is that for the new product, the licensing of it, is subscription-based and it's based on data. Clients need to be really careful when thinking about that, because odds are they're going to need to put a lot more data into it than what they initially estimate, which is going to drive their subscription costs up."

"They charge a license based on the storage. ATT AlienVault USM is a less expensive solution than IBM QRadar."

"AT&T AlienVault USM is an expensive solution and we pay for the license and the support separately. We paid for the license and support for three years."

"I don't think the product's pricing is a good value because they try to raise the price 50 percent every year... AlienVault needs to understand that not all customers are huge enterprises... Their sales team is way too aggressive. The price they advertise is not always the price you get."

"So far, it has been a good solution for a tight budget."

"Do the one month trial and try to work out the kinks during it, as it has free support and service hours."

More USM Anywhere pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

816,406 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Comms Service Provider

Government

University

Computer Software Company

18%

Educational Organization

Financial Services Firm

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Graylog?

The product is scalable. The solution is stable.

See all answers

What is your experience regarding pricing and costs for Graylog?

We are using the free version of the product. However, the paid version is expensive.

See all answers

What needs improvement with Graylog?

Since it's a free tool, I don't have much to say. Troubleshooting is important to me. The initial setup is complex. I hope to see improvements in Graylog for more interactivity, user-friendliness, ...

See all answers

What do you like most about AT&T AlienVault USM?

The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.

See all answers

What is your experience regarding pricing and costs for AT&T AlienVault USM?

The price is really variable depending on what tier the customer is subscribing to. I think USM Anywhere recently started a 125, a 250, and then 500 and 1000 tier. So it depends on the organization...

See all answers

What needs improvement with AT&T AlienVault USM?

The only issue that you need to bypass is the issue with integration with some other log sources, some other application security applications. The issue is still present. The process of collecting...

See all answers

Comparisons

Grafana Loki vs Graylog

Compared 45% of the time

Wazuh vs Graylog

Compared 21% of the time

syslog-ng vs Graylog

Compared 10% of the time

Security Onion vs Graylog

Compared 4% of the time

Fortinet FortiAnalyzer vs Graylog

Compared 3% of the time

More Graylog Competitors

Wazuh vs USM Anywhere

Compared 19% of the time

AlienVault OSSIM vs USM Anywhere

Compared 19% of the time

Splunk Enterprise Security vs USM Anywhere

Compared 11% of the time

IBM Security QRadar vs USM Anywhere

Compared 9% of the time

Rapid7 InsightIDR vs USM Anywhere

Compared 9% of the time

More USM Anywhere Competitors

Product Reports

Buyer's Guide

Graylog

November 2024

Download Graylog product report

Buyer's Guide

USM Anywhere

October 2024

Download USM Anywhere product report

Also Known As

Graylog2

AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity

Learn More

Graylog

Video not available

LevelBlue

Overview

Graylog is purpose-built to deliver the best log collection, storage, enrichment, and analysis. Graylog is:

Considerably faster analysis speeds.
More robust and easier-to-use analysis platform.
Simpler administration and infrastructure management.
Lower cost than alternatives.
Full-scale customer service.
No expensive training or tool experts required.

USM Anywhere centralizes security monitoring of networks and devices in the cloud, on premises, and in remote locations, helping you to detect threats virtually anywhere.

Discover

Network asset discovery
Software & services discovery
AWS asset discovery
Azure asset discovery
Google Cloud Platform asset discovery

Analyze

SIEM event correlation, auto-prioritized alarms
User activity monitoring
Up to 90-days of online, searchable events

Detect

Cloud intrusion detection (AWS, Azure, GCP)
Network intrusion detection (NIDS)
Host intrusion detection (HIDS)
Endpoint Detection and Response (EDR)

Respond

Forensics querying
Automate & orchestrate response
Notifications and ticketing

Assess

Vulnerability scanning
Cloud infrastructure assessment
User & asset configuration
Dark web monitoring

Report

Pre-built compliance reporting templates
Pre-built event reporting templates
Customizable views and dashboards
Log storage

Sample Customers

Blue Cross Blue Shield, eBay, Cisco, LinkedIn, SAP, King.com, Twilio, Deutsche Presse-Agentur

Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom

Buyer's Guide

Graylog vs. USM Anywhere

October 2024

Free Report: Graylog vs. USM Anywhere

Find out what your peers are saying about Graylog vs. USM Anywhere and other solutions. Updated: October 2024.

DOWNLOAD NOW

816,406 professionals have used our research since 2012.

See our Graylog vs. USM Anywhere report.

See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.