Logsign Next-Gen SIEM vs Wazuh comparison

Read 46 Wazuh reviews

32,805 Views
20,138 Comparison Views

79% willing to recommend

Logsign Next-Gen SIEM

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Logsign Next-Gen SIEM and Wazuh compete in the SIEM solutions category. Logsign appears to have the upper hand in customer support and deployment ease, while Wazuh excels in feature richness despite higher costs.

Features: Logsign Next-Gen SIEM is notable for its scalability, automated threat detection, and user-friendliness. Wazuh offers advanced threat intelligence, robust integration capabilities, and a comprehensive feature set suitable for complex environments.

Room for Improvement: Logsign users seek more integrations, better reporting functionalities, and enhanced options for customization. Wazuh users mention the complexity of setup, a steep learning curve, and a need for simplified configuration processes.

Ease of Deployment and Customer Service: Logsign Next-Gen SIEM is recognized for its straightforward deployment process and responsive customer support. Wazuh requires more expertise for effective deployment and receives mixed reviews on support.

Pricing and ROI: Logsign Next-Gen SIEM offers competitive pricing with satisfactory ROI regarding capabilities. Wazuh, being open-source, reduces initial setup costs but needs significant investment in setup and maintenance, affecting its ROI.

To learn more, read our detailed Logsign Next-Gen SIEM vs. Wazuh Report (Updated: March 2025).

Logsign Next-Gen SIEM vs. Wazuh

Download the complete report

Helped 842,194 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Logsign Next-Gen SIEM

Ranking in Log Management

47th

Ranking in Security Information and Event Management (SIEM)

45th

Average Rating

7.6

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Wazuh

Ranking in Log Management

1st

Ranking in Security Information and Event Management (SIEM)

2nd

Average Rating

7.4

Reviews Sentiment

6.3

Number of Reviews

Ranking in other categories

Extended Detection and Response (XDR) (3rd)

Mindshare comparison

As of March 2025, in the Log Management category, the mindshare of Logsign Next-Gen SIEM is 0.3%, down from 0.4% compared to the previous year. The mindshare of Wazuh is 15.0%, up from 14.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Ayaz Ahmed

Cyber Security Specialist at lums

Works well for threat detection and security

Improvements needed in Logsign SIEM are providing specific security alerts that can be filtered and configured more effectively. There should be a focus on delivering alerts tailored to specific needs rather than overwhelming users with numerous alerts. Additionally, incorporating more mature data about threats is necessary for better threat detection.

Read full review

Sandip_Patel

Student at Dakota State University

Evaluating robust file monitoring with insights for community support improvements

Wazuh's most valuable features include file monitoring and compliance reporting, which do not require excessive costs. These aspects are vital as they provide alerts for changes and facilitate the monitoring of compliance. The platform is also relatively easy to set up and operate. Reports are straightforward to extract and prove useful for compliance requirements.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It has full automation and automated SIEM responses."

"Logsign provides sample logs within the product, allowing users to see how logs will appear before integration, which is a valuable feature for testing and understanding log formats."

"The most valuable features of Logsign SIEM are its cloud capabilities, alerting functionality, integration with Elastic Search, and configuration options."

"I like Wazuh because it is a lot like ELK, which I was already comfortable with, so I didn't have to learn from scratch."

"It has efficient SCA capabilities."

"Wazuh's most valuable features include file monitoring and compliance reporting, which do not require excessive costs."

"The deployment is easy and they provide very good documentation."

"The solution is easy to maintain."

"The tool is stable."

"Some of the strengths of Wazuh that stand out for us include its scalability when deployed on Azure, its open-source nature, which allows for customization based on our needs, and its compatibility with various security solutions like threat intelligence platforms."

"The product’s interface is intuitive."

More Wazuh pros

Cons

"Improvements needed in Logsign SIEM are providing specific security alerts that can be filtered and configured more effectively."

"I hope they address the pricing model for Logsign Next-Gen SIEM, especially regarding regional variations. The pricing should not differ based on the country of operation as it can lead to dissatisfaction among customers. A fixed pricing structure would be more favorable for us. I would also suggest enhancing the GUI interface and adding features similar to xFi Exchange from IBM Pure. This would streamline operations and save time for analysts."

"AI and machine learning need to be developed. If they develop those features, I think everything will be fine."

"The technical support can be improved. Wazuh has some bugs that need to be fixed. It would be good if we can have automation with respect to incidence responses."

"Wazuh doesn't cover sources of events as well as Splunk. You can integrate Splunk with many sources of events, but it's a painful process to take care of some sources of events with Wazuh."

"The biggest part that's missing is threat intelligence. It isn't inbuilt, and if a sudden incident occurs, we don't get that feedback inside the SIEM tool. That's a big gap, I see. It would be better if we could get the threat intelligence feeds integrated with the SIEM tools. That would help us push value solutions to the clients in a big way."

"The tool doesn't detect anomalies or new environments."

"Wazuh needs more security and features, particularly visualization features and a health monitor."

"Wazuh could improve the detection, it is not detecting all of the attacks. Additionally, it is lacking features compared to other solutions."

"Log data analysis could be improved. My IT team has been looking for an alternative because they want better log data for malware detection. We are also doing more container implementation also, so we need better container security, log data analysis, auditing and compliance, malware detection, etc."

"There's not much I like about Wazuh. Other products I've used were a lot more functional and user friendly. They came with reports and use cases out of the box. We need to configure Wazuh's alerts and monitoring capabilities manually. It'd be nice if we could select from templates and presets for use cases already built and coded."

More Wazuh cons

Pricing and Cost Advice

"Compared to other SIEMs, it has low pricing."

"Wazuh is an open-source tool."

"When I contacted customer care, they mentioned bundling options, that I found to be overall affordable."

"We use the free version of Wazuh."

"Wazuh is open-source, but you must consider the total cost of ownership. It may be free to acquire, but you spend a lot of time and effort supporting the product and getting it to a point where it's useful."

"The solution's pricing is very competitive."

"The product price is neither too high nor too low."

"Wazuh is an open-source tool, which means it is freely available for use."

"Wazuh has a community edition, and I was using that. It's free and open source."

More Wazuh pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

842,194 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

13%

Comms Service Provider

12%

Government

11%

Financial Services Firm

Computer Software Company

16%

Comms Service Provider

University

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What needs improvement with Logsign Next-Gen SIEM?

It does not have much AI and machine learning features yet. They are developing them and will be releasing them in a few months.

What is your primary use case for Logsign Next-Gen SIEM?

We use Logsign SIEM for various tasks in our daily operations. One key use case is for forensic analysis. We also use it to monitor critical servers and generate security alerts for actions like lo...

What advice do you have for others considering Logsign Next-Gen SIEM?

Overall, I would rate it an eight out of ten. AI and machine learning need to be developed. If they develop those features, I think everything will be fine. I can recommend it. Not for large enterp...

What do you like most about Wazuh?

Integrates with various open-source and paid products, allowing for flexibility in customization based on use cases.

What needs improvement with Wazuh?

There is room for improvement by integrating more AI into Wazuh. It requires constant nurturing, as I have to provide it with code and specific requirements. This maintenance can be quite labor-int...

What is your primary use case for Wazuh?

We use Wazuh as a SIEM solution because it is open source, highly customizable, and continually expanding. Our clients can request various solutions for their issues, which Wazuh is able to address.

Grafana Loki vs Logsign Next-Gen SIEM

Comparisons

Compared 46% of the time

Falcon LogScale vs Logsign Next-Gen SIEM

Compared 18% of the time

IBM Security QRadar vs Logsign Next-Gen SIEM

Compared 14% of the time

More Logsign Next-Gen SIEM Competitors

Security Onion vs Wazuh

Compared 16% of the time

Elastic Stack vs Wazuh

Compared 12% of the time

AlienVault OSSIM vs Wazuh

Compared 8% of the time

Graylog vs Wazuh

Compared 6% of the time

Elastic Security vs Wazuh

Compared 6% of the time

More Wazuh Competitors

Product Reports

Security Information and Event Management (SIEM)

Download Logsign Next-Gen SIEM product report

Download Wazuh product report

Overview

Logsign delivers automation-driven cyber security solutions and are committed to providing the smartest, easiest-to-use and most affordable cybersecurity detection and response solutions and value-added services. Logsign Next-Gen SIEM is an enterprise-grade SIEM, inline with our promise, it's easy-to-deploy, easy-to-use and affordable unlike the other enterprise-grade SIEM softwares.

Easy-to-deploy, easy-to-use and affordable SIEM for all.
Unlimited scalability, high availability - cluster SIEM, big data infrastructure.
Deploy on every environment, on-premise solution.
400+ predefined integrations and free plugin service.
Collects & stores unlimited data.
Threat hunting, fast search & investigation, advanced behavior analysis, IOC detection.
Real-time detection & prevention, wide correlation library based on Mitre Att&ck framework.
Real-time monitoring, predefined dashboards & reports, meeting compliance requirements (PCI DSS, ISO 27001, HIPAA, SOX and more).
Automated notifications, automated actions.
Flexible pricing options, and more information and for more automated response features, please look for our SOAR platform.

Logsign

Wazuh is an enterprise-ready platform used for security monitoring. It is a free and open-source platform that is used for threat detection, incident response and compliance, and integrity monitoring. Wazuh is capable of protecting workloads across virtualized, on-premises, containerized, and cloud-based environments.

It consists of an endpoint security agent and a management server. Additionally, Wazuh is fully integrated with the Elastic Stack, allowing users the ability to navigate through security alerts via a data visualization tool.

Wazuh’s agent can run on many different platforms, and is lightweight. It can successfully perform the tasks needed to detect threats in order to trigger responses automatically.
Wazuh manages the agents, can analyze agent data, and can scale horizontally.
Elastic Stack is where alerts are indexed and stored.

Wazuh Capabilities

Some of Wazuh’s most notable capabilities include:

Intrusion detection: Wazuh’s agents can detect hidden files, cloaked processes, or unregistered network listeners, as well as inconsistencies in system call responses. Wazuh’s server component uses a signature-based approach to intrusion detection, using its regular expression engine to analyze collected log data and look for indicators of compromise.
Log data analysis: Wazuh can read operating system and application logs, and securely forward them to a central manager for rule-based analysis and storage.
Integrity monitoring: File integrity monitoring can help identify changes in content, ownership, permissions, and attribute of files. Wazuh’s file integrity monitoring can be used in conjunction with threat intelligence.
Vulnerability detection: Wazuh agents can identify well-known vulnerable software so you can see where your weak spots are and take action before an attack can exploit them.
Configuration assessment: System and application configurations are monitored to make sure they are compliant with security policies. Periodic scans are used to detect applications that are known to be vulnerable, insecurely configured, or unpatched.
Incident response: Wazuh responds actively when active threats need to be addressed. It can perform countermeasures like blocking access to a system when a threat source is identified.
Regulatory compliance: Wazuh includes the security controls required to be compliant with industry regulations and standards.
Cloud security: Wazuh’s light-weight and multi-platform agents are commonly used to monitor cloud environments at the instance level. In addition, Wazuh helps monitor cloud infrastructure at an API level.
Security for containers: With Wazuh, you have increased security visibility into hosts and containers, allowing for easier detection of threats, anomalies, and vulnerabilities.

Wazuh Benefits

Some of the most valued benefits of Wazuh include:

No vendor lock-in
No license costs
Uses lightweight, multi-platform agents
Free community support

Wazuh Offers

Annual support and maintenance
Assistance with deployment and configuration
Training and instructional hands-on courses

Reviews From Real Users

"It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions." - Robert C., IT Security Consultant at Microlan Kenya Limited

“The MITRE ATT&CK correlation is most valuable.” - Chief Information Security Officer at a financial services firm

Sample Customers

Turkish Petroleum, Tırsan, DP World, SAC American Colleges, Robert College, Unlu&Co, UniCo Insurance Company, ETSTur, CK Energy, UEDAS Energy, Wilo, Eurocross Assistance, Deloitte Turkey, Incı GS Yuasa, Pappara, Bilgi University, Anadolu University, İstanbul University, The Ministry of Energy and Natural Resources, TRT, Anadolu Media Agency, Ministry of Family, Labour and Social Services, Ispark, Spor AS and wide range of enterprises in different industries.

Information Not Available

Logsign Next-Gen SIEM vs. Wazuh