Graylog vs Log360

Last Updated:

Our analysts compared Graylog vs Log360 based on data from our 400+ point analysis of SIEM Tools, user reviews and our own crowdsourced data from our free software selection platform.

Graylog Software Tool

Product Basics

Graylog is a robust software solution designed for managing Security Information and Event Management (SIEM) tasks. It excels in log management and analysis, making it particularly suitable for industries such as finance, healthcare, and technology, where data security and compliance are paramount. Users appreciate its ability to handle large volumes of data efficiently, providing real-time insights and enhancing threat detection capabilities. Unique features include its powerful search and analysis tools, customizable dashboards, and seamless integration with various data sources. Graylog's open architecture allows for scalability and flexibility, catering to both small businesses and large enterprises. Compared to similar products, users often highlight its user-friendly interface and cost-effectiveness. Pricing details are not readily available, so it's advisable to contact SelectHub for a tailored quote. Overall, Graylog stands out for its comprehensive feature set and adaptability in the SIEM landscape.
read more...
Log360 is a comprehensive security information and event management (SIEM) solution designed to enhance an organization's cybersecurity posture. It is particularly well-suited for medium and large enterprises seeking to strengthen their security infrastructure. Log360 offers a range of key features, including log management, threat detection, incident response, and compliance reporting. Users have praised its ability to provide real-time threat intelligence and automated incident response. One user stated, "Log360's real-time threat detection has been instrumental in thwarting potential security breaches." However, some users have noted that the pricing structure may be on the higher side. Despite this, they believe that the investment is justified due to the product's robust capabilities. One user commented, "While the pricing may be a consideration, Log360's comprehensive features make it a valuable investment for our organization." Compared to similar products, users find Log360 to be a top choice, citing its ease of use and strong threat detection capabilities. They appreciate its ability to centralize logs and provide actionable insights, making it a vital tool for maintaining a secure IT environment. Overall, Log360 is favored for its contribution to proactively addressing cybersecurity threats.

Pros

  • Robust threat detection
  • Real-time monitoring
  • Incident response automation
  • Centralized log management
  • Comprehensive compliance reporting

Cons

  • Pricing considerations
  • Complex for small businesses
  • Steep learning curve
  • Resource-intensive
  • Integration challenges
read more...
$1,250 Monthly
Get a free price quote
Tailored to your specific needs
$99 Monthly
Get a free price quote
Tailored to your specific needs
Small 
i
Medium 
i
Large 
i
Small 
i
Medium 
i
Large 
i
Windows
Mac
Linux
Android
Chromebook
Windows
Mac
Linux
Android
Chromebook
Cloud
On-Premise
Mobile
Cloud
On-Premise
Mobile
we're gathering data
Cisco
IBM
Northrop Grumman
Symantec

Product Assistance

Documentation
In Person
Live Online
Videos
Webinars
Documentation
In Person
Live Online
Videos
Webinars
Email
Phone
Chat
FAQ
Forum
Knowledge Base
24/7 Live Support
Email
Phone
Chat
FAQ
Forum
Knowledge Base
24/7 Live Support

Product Insights

  • Enhanced Security: Graylog provides robust security monitoring by aggregating and analyzing log data, helping organizations detect and respond to threats swiftly.
  • Scalability: Its architecture supports scaling from small to large deployments, accommodating growing data volumes without compromising performance.
  • Cost Efficiency: By offering a centralized log management solution, Graylog reduces the need for multiple tools, lowering operational costs.
  • Real-time Insights: Graylog delivers real-time data processing, enabling immediate insights into system performance and security incidents.
  • Customizable Dashboards: Users can create tailored dashboards to visualize data in ways that best suit their operational needs, enhancing decision-making.
  • Improved Compliance: With comprehensive logging and reporting capabilities, Graylog assists in meeting regulatory compliance requirements such as GDPR and HIPAA.
  • Streamlined Troubleshooting: By centralizing log data, Graylog simplifies the process of identifying and resolving system issues, reducing downtime.
  • Open Source Flexibility: As an open-source platform, Graylog allows for extensive customization and integration with other tools, fostering a flexible IT environment.
  • Community Support: A vibrant community of users and developers provides a wealth of shared knowledge and resources, enhancing user experience and problem-solving.
  • Efficient Data Parsing: Graylog's ability to parse and normalize log data ensures that information is structured and easily searchable, improving data accessibility.
  • Alerting and Notifications: Configurable alerts and notifications keep teams informed of critical events, enabling proactive management of potential issues.
  • Historical Data Analysis: Graylog's capacity to store and analyze historical data aids in trend analysis and long-term strategic planning.
  • Integration Capabilities: Seamless integration with various data sources and third-party applications enhances the overall functionality of existing IT ecosystems.
  • Reduced Complexity: By consolidating log management tasks into a single platform, Graylog reduces the complexity of IT operations, freeing up resources for other priorities.
  • Enhanced Collaboration: Shared dashboards and reports facilitate collaboration across teams, ensuring everyone has access to the same critical information.
read more...
  • Automate Threat Detection & Response: Save time by automatically compiling data from several platforms like SaaS, IaaS, PaaS, exchange servers, applications and on-premise network devices in a centralized console. Accelerate threat resolution by automating incident response using workflow options.
  • Maximize ROI: Reduce upfront costs with low-cost enterprise-grade services. Minimize investment by leveraging service providers for implementation and quick deployment.
  • Ensure Privileged User Monitoring:  Eliminate the risk of privileged users going rogue by continuously monitoring user activities. Prevent insider attacks with regular reports on suspicious behavior.
  • Strengthen Compliance:: Maintain compliance with regulatory mandates like PCI, GLBA, DSS, HIPAA, FISMA, SOX and ISO 27001. Access audit-related report templates and get alerts to avoid violation risks and fines.
  • Prevent Security Event Threats:  Detect and prevent advanced threats like brute force attacks, privilege escalation and misuse, and data breaches with signature-based MITRE ATT&CK technique, ML-based behavior analytics, and integrated CASB and DLP capabilities.
  • Enhanced Threat Detection: Log360 provides robust threat detection capabilities that enable organizations to identify and respond to security threats in real-time. This benefit ensures proactive security measures and minimizes the risk of breaches.
  • Real-Time Monitoring: Users appreciate Log360's ability to offer real-time monitoring of their IT environments. This ensures that any suspicious activities or anomalies are immediately detected, allowing for swift action.
  • Incident Response Automation: Log360 streamlines incident response through automation. This benefit reduces the response time to security incidents, minimizing potential damage and data breaches.
  • Centralized Log Management: Log360 simplifies log management by centralizing log data from various sources. This centralization offers a comprehensive view of an organization's IT environment, facilitating easier analysis and troubleshooting.
  • Comprehensive Compliance Reporting: Users value Log360's capability to generate compliance reports. This feature aids in meeting regulatory requirements and streamlining compliance processes, ensuring data security and integrity.
read more...
  • Centralized Log Management: Graylog provides a unified platform for collecting, indexing, and analyzing log data from various sources, enhancing visibility across your IT infrastructure.
  • Scalable Architecture: Designed to handle large volumes of data, Graylog's architecture supports horizontal scaling, allowing for seamless expansion as your data needs grow.
  • Real-time Alerts: Set up customizable alerts to notify you of critical events in real-time, ensuring prompt response to potential security threats.
  • Powerful Search Capabilities: Utilize Graylog's robust search functionality to quickly sift through logs using complex queries, enabling efficient data analysis and troubleshooting.
  • Custom Dashboards: Create personalized dashboards to visualize key metrics and trends, providing a comprehensive overview of your system's health and performance.
  • Role-based Access Control: Implement granular access controls to ensure that users have appropriate permissions, enhancing security and compliance.
  • Data Enrichment: Enhance log data with additional context through integration with external data sources, improving the quality of insights derived from your logs.
  • Flexible Data Ingestion: Support for various data inputs, including syslog, GELF, and JSON, allows for seamless integration with diverse systems and applications.
  • Archiving and Retention: Manage log data lifecycle with configurable retention policies and archiving options, optimizing storage usage and compliance adherence.
  • Integration with Threat Intelligence: Leverage threat intelligence feeds to correlate log data with known threats, enhancing your organization's security posture.
  • Open Source Community: Benefit from a vibrant open-source community that contributes plugins and extensions, expanding Graylog's functionality and adaptability.
  • REST API Access: Utilize Graylog's REST API for programmatic access to its features, enabling automation and integration with other tools and workflows.
  • Stream Processing: Define streams to route specific log messages to different outputs or storage, facilitating targeted analysis and monitoring.
  • Built-in Anomaly Detection: Identify unusual patterns and deviations in log data using Graylog's anomaly detection capabilities, aiding in proactive threat detection.
  • Comprehensive Documentation: Access detailed documentation and resources to assist with deployment, configuration, and troubleshooting, ensuring a smooth user experience.
read more...
  • Incident Detection: Detect suspicious activities and malicious incidents with continuous log data monitoring, analysis and reporting. Get incident alerts with a real-time alert feature.
  • Security Analytics:  Spot network threats, intrusions and breaches by analyzing events from servers, network devices, Microsoft Office 365 platforms and exchange servers. Respond to anomalies with interactive dashboards and customized analytics reports.
  • Threat Intelligence: Stay on top of evolving threats with an integrated threat intelligence platform. Get updated information on the latest threats with a TAXII/STIX threat feed processor that retrieves global threat data and maintains a database of malicious IPs.
  • Incident Resolution: Automatically assign teams to security alerts and track the incident resolution progress. Automated workflows ensure the timely implementation of preventive measures against threats.
  • Cloud Monitoring: Continuously monitor and identify threats on cloud-based PaaS and IaaS platforms like Amazon web services, Microsoft Azure and SaaS solutions like Salesforce.
  • Data Security: Discover and prioritize personal and sensitive information throughout your Windows infrastructure with confidential data detection policies. Protect data from breach attempts with file integrity monitoring capabilities.
  • Forensic Analysis: Assess post-attack impact and identify attacking patterns to avoid future threats by analyzing event and log data. Automatically perform forensic analysis and mitigate the possibility of human error or oversight in drilling down data.
  • Event Correlation: Correlate information from various sources like endpoints, servers and intrusion prevention systems into a single console to get a comprehensive idea of the company’s security situation. Customize correlation rules and regulations with a custom rule builder and quickly detect and resolve security incidents.
  • User Entity and Behavior Analytics (UEBA): Identify anomalous activities in the network using analysis reports on even slight changes in user and entity behavioral patterns.
read more...

Product Ranking

#9

among all
SIEM Tools

#4

among all
SIEM Tools

Find out who the leaders are

Analyst Rating Summary

we're gathering data
85
we're gathering data
100
we're gathering data
100
we're gathering data
84
Show More Show More

Analyst Ratings for Functional Requirements Customize This Data Customize This Data

Graylog
Log360
+ Add Product + Add Product
Dashboards And Reporting Log Collection And Management Platform Capabilities Security Orchestration, Automation And Response (SOAR) Threat Detection, Investigation And Response (TDIR) User And Entity Behavior Analytics (UEBA) 100 100 84 100 80 100 0 25 50 75 100
we're gathering data
N/A
we're gathering data
N/A
we're gathering data
N/A
100%
0%
0%
we're gathering data
N/A
we're gathering data
N/A
we're gathering data
N/A
100%
0%
0%
we're gathering data
N/A
we're gathering data
N/A
we're gathering data
N/A
83%
0%
17%
we're gathering data
N/A
we're gathering data
N/A
we're gathering data
N/A
100%
0%
0%
we're gathering data
N/A
we're gathering data
N/A
we're gathering data
N/A
80%
0%
20%
we're gathering data
N/A
we're gathering data
N/A
we're gathering data
N/A
100%
0%
0%

Analyst Ratings for Technical Requirements Customize This Data Customize This Data

we're gathering data
N/A
we're gathering data
N/A
we're gathering data
N/A
71%
0%
29%
we're gathering data
N/A
we're gathering data
N/A
we're gathering data
N/A
88%
0%
12%

User Sentiment Summary

we're gathering data
Excellent User Sentiment 62 reviews
we're gathering data
94%
of users recommend this product

Log360 has a 'excellent' User Satisfaction Rating of 94% when considering 62 user reviews from 3 recognized software review sites.

n/a
4.4 (12)
n/a
4.6 (10)
n/a
4.8 (40)

Awards

we're gathering data

Log360 stands above the rest by achieving an ‘Excellent’ rating as a User Favorite.

User Favorite Award

Synopsis of User Ratings and Reviews

Effective Log Management: Graylog excels at gathering, storing, enhancing, and analyzing log data, making it a robust tool for security investigations and incident response.
Real-Time Visibility: Security teams benefit from Graylog's ability to provide real-time data access and fast search capabilities, enabling quick threat detection and response.
Powerful Search and Filtering: Through its integration with Elasticsearch, Graylog empowers users with advanced filtering and analysis capabilities, allowing for in-depth security investigations.
Cost-Effective Solution: Graylog, particularly its open-source version, offers a cost-effective solution for organizations seeking robust SIEM and log management capabilities without breaking the bank.
Show more
Effective Threat Detection: Log360 is highly praised for its robust threat detection capabilities, allowing users to proactively identify and respond to potential security threats in real-time.
Real-Time Monitoring: Users appreciate Log360's ability to provide real-time monitoring of their IT environments, enabling them to detect and respond to suspicious activities promptly.
Incident Response Automation: Log360 streamlines incident response through automation, reducing response times and minimizing the impact of security incidents.
Centralized Log Management: The product's centralized log management feature simplifies log data collection from various sources, offering a comprehensive view of the organization's IT environment for analysis and troubleshooting.
Comprehensive Compliance Reporting: Log360's ability to generate comprehensive compliance reports is highly valued, as it simplifies compliance processes and helps organizations meet regulatory requirements effectively.
Show more
Setup Challenges: Getting Graylog up and running can be tricky, especially for those who are new to the platform and lack experience with similar systems.
Visualization Limitations: While Graylog offers dashboards and reporting, it lacks advanced visualization and customization features, making in-depth data analysis cumbersome.
High Infrastructure Costs: Organizations dealing with very high log volumes might find the infrastructure costs, particularly for Elasticsearch, to be substantial, impacting their budget.
Show more
Resource-Intensive: Some users find that Log360 can be resource-intensive, which can pose challenges, especially for smaller organizations with limited hardware and IT resources.
Complex for Small Businesses: Small businesses may struggle with the complexity of Log360, as the feature set and learning curve might be beyond their specific needs and budget constraints.
Steep Learning Curve: Implementing Log360 can present a significant learning curve, and users may require dedicated training and onboarding efforts to make the most of the product.
Integration Challenges: Some users report challenges when trying to integrate Log360 with specific third-party applications and systems, which can disrupt workflows and necessitate additional effort.
Pricing Considerations: Pricing may be a limitation for some organizations, particularly those with budget constraints. Users should carefully consider the investment required to implement Log360.
Show more

Is Graylog a black and white solution, or does it offer shades of gray?Graylog is a robust SIEM and log management platform that offers both free open-source and paid enterprise versions. Users praise its exceptional value, particularly the free version, which provides a comprehensive set of features for its price point. Its real-time log analysis capabilities, powered by Elasticsearch integration, enable swift threat detection and response. Customizable dashboards and alerts provide flexibility in monitoring critical events. However, some users find the dashboard and reporting functionality less intuitive, citing a steep learning curve for initial setup and configuration. The platform also receives criticism for its limited visualization and graphics options, which might hinder effective data interpretation for some users. Despite these drawbacks, Graylog's strengths lie in its real-time analysis, affordability, and customization options, making it an attractive option for organizations seeking a powerful yet cost-effective SIEM solution. For instance, one user working in a non-profit organization with over 200 employees highlighted Graylog's impressive search speed, capable of sifting through 50 million records in a mere 3 seconds. They also praised the platform's compatibility with various log protocols, including nxlog from Windows and syslog from Linux, showcasing its versatility in handling diverse IT environments. However, another user, while acknowledging Graylog's log reading and filtering capabilities, found the dashboard creation and event filtering process cumbersome. This suggests that while Graylog excels in raw log processing and analysis, its user interface might require some refinement to enhance user experience, especially for those less familiar with SIEM tools. In conclusion, Graylog is best suited for organizations, particularly small to medium-sized enterprises, that require a powerful and customizable SIEM solution without breaking the bank. Its real-time analysis capabilities, affordability, and wide-ranging log protocol support make it a compelling choice. However, organizations seeking a platform with a more intuitive user interface and advanced visualization options might need to consider alternatives or invest in additional training to fully leverage Graylog's capabilities.

Show more

User reviews of Log360 reveal a generally positive sentiment, highlighting its strengths in centralized log management, real-time threat detection, and ease of use. One user remarked, "Log360 has helped us centralize our logs from all our systems, giving us a complete picture of our security posture. This makes it much easier to identify and investigate potential threats." Another user appreciated the real-time threat detection capabilities, stating, "Log360 has helped us prevent several security incidents by detecting suspicious activity before it could become a major problem." However, some users also mention challenges related to the initial setup and learning curve. One user commented, "Setting up Log360 can be a bit complex for first-time users." Another user noted, "The interface can be a bit overwhelming at first, but there are plenty of resources available to help you get up to speed." Overall, users believe that Log360 offers a powerful and comprehensive SIEM solution at a competitive price. They appreciate its user-friendly interface, extensive features, and cloud-based deployment. One user compared Log360 to other SIEM solutions, saying, "We considered several SIEM solutions, but Log360 offered the best combination of features and price." Another user highlighted Log360's unique cloud-based approach, stating, "We were looking for a SIEM solution that was easy to deploy and maintain, and Log360's cloud-based platform was perfect for us." Based on the user reviews, Log360 is a compelling choice for businesses of all sizes looking for a powerful and user-friendly SIEM solution. Its strengths in centralized log management, real-time threat detection, and ease of use make it a valuable tool for enhancing security posture and mitigating potential risks.

Show more

Screenshots

we're gathering data

Top Alternatives in SIEM Tools


ArcSight ESM

Converged SIEM

Elastic Security

Exabeam

FortiSIEM

Gurucul

IBM QRadar

InsightIDR

Log360

LogRhythm

Microsoft Sentinel

Securonix

Splunk Enterprise Security

Sumo Logic

Trellix Enterprise Security Manager

USM Anywhere

Related Categories

WE DISTILL IT INTO REAL REQUIREMENTS, COMPARISON REPORTS, PRICE GUIDES and more...

Compare products
Comparison Report
Just drag this link to the bookmark bar.
?
Table settings