Try our new research platform with insights from 80,000+ expert users

Logstash vs USM Anywhere comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Logstash
Ranking in Log Management
33rd
Average Rating
9.0
Reviews Sentiment
6.5
Number of Reviews
3
Ranking in other categories
No ranking in other categories
USM Anywhere
Ranking in Log Management
42nd
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Security Information and Event Management (SIEM) (31st), Endpoint Detection and Response (EDR) (53rd), Compliance Management (12th)
 

Mindshare comparison

As of April 2025, in the Log Management category, the mindshare of Logstash is 0.5%, up from 0.3% compared to the previous year. The mindshare of USM Anywhere is 0.4%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

Mustafa Husny - PeerSpot reviewer
Helps to collect logs from various data sources, including hardware
I use Logstash primarily for connecting logs from hardware. This is the main use case. The second use case involves making correlations between logs from various sources.  I can collect logs from various data sources, including hardware. The product needs to improve its compatibility.  I rate…
Kris Nawani - PeerSpot reviewer
Offers complete coverage without the need to install additional software
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I can collect logs from various data sources, including hardware."
"Logstash has numerous plugins for inputs and outputs, allowing it to work well in environments that do not contain other Elastic components."
"Everything aligns well with improving our organization."
"We have three or four Logstash servers for high availability."
"It allows you to define what alerts you want to see, or not to see, as well as if you want them grouped, or ungrouped."
"The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful."
"Using the communication within the security device, it is easier to create plugins."
"The solution is stable."
"Allowed us to help our customers satisfy compliance needs around logging and monitoring."
"The solution has all the features that we need, however they do not work correctly."
"The AlienVault solution has enabled us to create a SOC on a budget with smaller than usual staff requirements, offering a wider range of solutions for our customers."
"We're using it more for reporting, that's all. We're using it to help our customers to pass any kind of audits that they receive."
 

Cons

"Elastic does not provide proper support for Logstash worldwide, and I rate their technical support as one out of ten."
"The product needs to improve its compatibility."
"Almost all the research can be very bad. We still have a problem with importing the log system."
"We still have a problem with importing the log system."
"they seem to have bugs from time to time that go unfixed for a while and that is frustrating. I'm not saying the product needs to be bug-free, but they need to be responsive to bugs."
"For creating new rules, you have to be familiar with regular expressions. I feel there could be something built-in to make sure that process is easier."
"The lack of mature functionality and expertise in any of those areas is a strong negative."
"AlienVault needs to continue to integrate with other third-party technologies that clients want to have monitored."
"I'd like to see a dashboard that's a little more descriptive."
"Maybe logs are the problem, as the database query is too slow. If you want to search something, you need time to find it."
"Search performance can be slow. The Raw Logs feature is painfully slow. And if we're talking about the newer, the Anywhere product, you can't even schedule reports on the thing. There are probably a dozen other features I'd really like to see there, but that would be one of the biggies."
"The vulnerability scanning feature is one of the areas where the product has certain shortcomings and needs to improve. The tool has vulnerability scanning, but it is not that efficient."
 

Pricing and Cost Advice

Information not available
"It's very reasonably priced. It was one of the lowest among the ones I looked at. Licensing is pretty flexible. They can do a two-year or a three-year, even a one-year, perhaps."
"It is a product that is priced in a medium range, making it neither a cheap nor a costly product."
"Pricing is very competitive with other products and you get much more functionality from AlienVault."
"We checked out several competitors. For what it can do and the cost, it was the best option!"
"Use the AlienVault team. They are helpful and the documentation that they provide is second to none."
"We pay around $12,000 a year including storage."
"The ROI is quite good."
"They charge a license based on the storage. ATT AlienVault USM is a less expensive solution than IBM QRadar."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
848,253 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
18%
Computer Software Company
13%
Government
9%
Educational Organization
6%
Computer Software Company
19%
Financial Services Firm
8%
Comms Service Provider
7%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Logstash?
I can collect logs from various data sources, including hardware.
What needs improvement with Logstash?
Logstash lacks a graphical user interface, necessitating a strong programming background to handle it effectively. It is challenging for business users who need a skilled team for its operation. Ch...
What is your primary use case for Logstash?
I am considered an expert in Elastic Observability ( /products/elastic-observability-reviews ) in the Middle East. During my experience, I have worked heavily on Logstash ( /products/logstash-38586...
What do you like most about AT&T AlienVault USM?
The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.
What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
 

Comparisons

 

Also Known As

No data available
AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
 

Overview

 

Sample Customers

Information Not Available
Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
Find out what your peers are saying about Logstash vs. USM Anywhere and other solutions. Updated: April 2025.
848,253 professionals have used our research since 2012.