Try our new research platform with insights from 80,000+ expert users

Graylog vs USM Anywhere comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024
 

Categories and Ranking

Graylog
Ranking in Log Management
18th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
18
Ranking in other categories
No ranking in other categories
USM Anywhere
Ranking in Log Management
37th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
115
Ranking in other categories
Security Information and Event Management (SIEM) (29th), Endpoint Detection and Response (EDR) (52nd), Compliance Management (12th)
 

Mindshare comparison

As of December 2024, in the Log Management category, the mindshare of Graylog is 6.5%, up from 5.6% compared to the previous year. The mindshare of USM Anywhere is 0.5%, down from 1.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

Nicolae CIornii - PeerSpot reviewer
Stable solution with room for improvement in interactivity and user-friendliness
We have tested IBM QRadar and now use it. First of all, the key factor is the pricing. I saw that IBM QRadar has an interactive dashboard, providing valuable insights to people. Additionally, I've seen that IBM QRadar has an agent that simplifies installations across various platforms without requiring intricate configurations. Also, IBM QRadar has automatic reporting.
Omer Jamil - PeerSpot reviewer
An easy-to-deploy tool that needs to improve its vulnerability scanning feature
To those who plan to use the solution, I would suggest that they go through the documentation and online training models available for free, as it can help you deploy the product quickly while also being helpful in areas where there is a need to understand correlation and monitoring. I rate the overall product a seven out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Open source and user friendly."
"The product is scalable. The solution is stable."
"This had increased productivity for the dev and support teams, because we are directly notifying them."
"Graylog's search functionality, alerting functionality, user management, and dashboards are useful."
"Storing logs in Elasticsearch means log retrieval is extremely fast, and full text search is available by default."
"We run a containerized microservices environment. Being able to set up streams and search for errors and anomalies across hundreds of containers is why a log aggregation platform like Graylog is valuable to us."
"What I like about Graylog is that it's real-time and you have access to the raw data. So, you ingest it, and you have access to every message and every data item you ingest. You can then build analytics on top of that. You can look at the raw data, and you can do some volumetric estimations, such as how big traffic you have, how many messages of data of a type you have, etc."
"It is used as a log manager/SIEM. It provides visibility into the infrastructure and security related events."
"The new cloud-based panel is excellent both for client review as well as for our SOC to review and respond to threats. It is much easier to configure and use than the previous solution from AlienVault.​"
"The vulnerability scanning is helpful to identify the areas that need patching or fixes installed."
"AlientVault has helped us in improving our visualization and incident response during cybersecurity situations."
"The dashboards are very descriptive and contain just the right amount of information. The activity alarms and events contain a plethora of data that is very descriptive and useful."
"This solution can completely detect and prevent incidents on your network."
"Any unusual behaviour, we can monitor. We have alerts set up to be sent when we receive signs of any unusual behaviour."
"AlienVault has an advanced component within one package. With this, we can cover more area with one solution."
"It has powerful threat detection, incident response, and compliance management."
 

Cons

"Its scalability gets complicated when we have to update or edit multiple nodes."
"More customization is always useful."
"The infrastructure cost is the main issue. I like the rest. If the infrastructure costs could be lower, it would be fantastic."
"Dashboards, stream alerts and parsing could be improved."
"We ran into problems with Elasticsearch throwing a circuit-breaking exception due to field data size being too large. It turned out that the heap size directly impacted this size in a high-throughput environment, causing unexplained instability in Graylog. We were able to troubleshoot on the Elasticsearch size, but we should have been able to reference some minimum requirements for Graylog to know that our settings weren't sufficient."
"With technical support, you are on your own without an enterprise license."
"Since container orchestration systems are popular and Graylog fits the niche well, perhaps they could officially support running in docker containers on Kubernetes as a StatefulSet as a use case. That way, the declarative nature of Kubernetes config files would document their best case deployment scenario-"
"I would like to see a date and time in the Graylog Grok patterns so that I can save time when searching for a log. I like how the streams and the search query work, but adding a date and time will allow me to pull out a log in a milli-second."
"Adding a parsing interface for the customers would make AT&T AlienVault USM better."
"Different functions to customize reports should be added."
"AT&T AlienVault USM can improve searchable data. It should be available for more than 90 days. If you need more than 90 days of data, you have to put a request and they give you raw data, which is not easy to search. A good addition would be to allow users to search data older than 90 days."
"The price of AT&T AlienVault USM could be reduced."
"Support can be slow at times, but the quality is high. Posted knowledge base articles could use improvement."
"AlienVault must improve their correlation feature. Some of the events do not match with the correlation rules and some of the correlation events are false-positive."
"In the future, I would like to see all these features of the solution working properly."
"The reporting aspect could be improved. While there are a lot of different options available, there are still pieces which are missing."
 

Pricing and Cost Advice

"It's an open-source solution that can be used free of charge."
"If you want something that works and do not have the money for Splunk or QRadar, take Graylog.​​"
"Graylog is a free open-source solution. The free version has a capacity limitation of 2 GB daily, if you want to go above this you have to purchase a license."
"We're using the Community edition."
"Having paid official support is wise for projects."
"I use the free version of Graylog."
"We are using the free version of the product. However, the paid version is expensive."
"​You get a lot out-of-the-box with the non-enterprise version, so give it a try first."
"So far, it has been a good solution for a tight budget."
"Do the one month trial and try to work out the kinks during it, as it has free support and service hours."
"​The price point is good.​"
"The price for this solution is very good, but since the features do not work the price is expensive."
"Negotiate the best package for your environment."
"The ROI is quite good."
"​The vulnerability management solution is worse than buying a Nessus Professional license.​"
"It allows you to do a lot with a small price tag... The pricing is the best on the market."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Comms Service Provider
9%
Government
8%
Educational Organization
8%
Computer Software Company
18%
Educational Organization
8%
Financial Services Firm
7%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Graylog?
The product is scalable. The solution is stable.
What is your experience regarding pricing and costs for Graylog?
We are using the free version of the product. However, the paid version is expensive.
What needs improvement with Graylog?
Since it's a free tool, I don't have much to say. Troubleshooting is important to me. The initial setup is complex. I hope to see improvements in Graylog for more interactivity, user-friendliness, ...
What do you like most about AT&T AlienVault USM?
The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.
What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
 

Comparisons

 

Also Known As

Graylog2
AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
 

Learn More

Video not available
 

Overview

 

Sample Customers

Blue Cross Blue Shield, eBay, Cisco, LinkedIn, SAP, King.com, Twilio, Deutsche Presse-Agentur
Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
Find out what your peers are saying about Graylog vs. USM Anywhere and other solutions. Updated: December 2024.
824,053 professionals have used our research since 2012.