Try our new research platform with insights from 80,000+ expert users

Amazon CloudWatch vs Graylog comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 12, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Amazon CloudWatch
Ranking in Log Management
14th
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
46
Ranking in other categories
Application Performance Monitoring (APM) and Observability (13th), Cloud Monitoring Software (10th)
Graylog
Ranking in Log Management
16th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
19
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the Log Management category, the mindshare of Amazon CloudWatch is 1.9%, up from 1.0% compared to the previous year. The mindshare of Graylog is 6.6%, up from 5.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

Rasanpreet Singh - PeerSpot reviewer
Reliable AWS monitoring and logging
The choice of logging solution should always be determined by the specific business requirements. It is crucial to align the logging strategy with what type of logs are needed and how they should be used. There are instances where we require custom solutions to retrieve logs, especially application logs that may not be easily accessible through CloudWatch or similar services. When we heavily rely on AWS native services, CloudWatch is indeed a robust choice. However, in certain scenarios, we might need integration capabilities with other tools, and if they can incorporate such features, it would enhance overall logging capabilities. I would rate it eight out of ten.
Andrey Mostovykh - PeerSpot reviewer
Real-time analysis, easy setup, and open source
We stopped using it for analytics because of its price, and at the moment, we are using it mostly for log centralization. If you use it with high traffic for analytical purposes, as well as for the logs, the infrastructure costs are unbelievable. Graylog is a great product backed by Elasticsearch as the storage and query engine. It is just an interface on top of Elasticsearch and some Elasticsearch management. The indexes that are kept in Elasticsearch are managed by Graylog software. Elasticsearch is a decent product, but it's very infrastructure-heavy. It requires lots of resources, and if you make a mistake with provisioning, you are likely to not get a cluster back. We had a couple of outages like that, and we hated that. So, we ended up over-provisioning resources just to avoid such situations from happening. If you have a whole team trying to fix the Graylog instance for two days, that's a bit too much. That may be my Norwegian take on it, but the engineering resources are expensive. It's better to just provision the infrastructure. Overall, the product is great, and the features are just fine, but the infrastructure cost is what is killing it. The infrastructure cost is the main issue. I like the rest. If the infrastructure costs could be lower, it would be fantastic. I'm not sure if they can improve the infrastructure cost with the way Elasticsearch is. If they keep using Elasticsearch, maybe there are some opportunities there, or they can support other backends with cheaper storage. They could have a different backend to replace Elasticsearch or do some tweaks to Elasticsearch to reduce the costs. There could be partial parsing of logs or parsing on demand so that when you write data through Graylog to Elasticsearch, it doesn't need to crunch in every detail requiring that much CPU.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I can put it in a simple term, its simplicity is always there."
"You can enable alarms and metrics, and it has robust integration with AWS services. You can also trigger events. For example, if the CPU utilization is above 80%, it can launch a new instance for you."
"The solution gives us very good real-time data."
"We have found the pricing to be reasonable."
"The product can be integrated with AWS very easily."
"The monitoring feature is valuable."
"I have found the memory metrics and the CPU metrics valuable."
"Amazon CloudWatch is a cheap and easy-to-use solution."
"UDP is a fast and lightweight protocol, perfect for sending large volumes of logs with minimal overhead."
"What I like about Graylog is that it's real-time and you have access to the raw data. So, you ingest it, and you have access to every message and every data item you ingest. You can then build analytics on top of that. You can look at the raw data, and you can do some volumetric estimations, such as how big traffic you have, how many messages of data of a type you have, etc."
"I like the correlation and the alerting."
"The build is stable and requires little maintenance, even compared to some extremely expensive products."
"The ability to write custom alerts is key to information security and compliance."
"One of the most valuable features is that you are able to do a very detailed search through the log messages in the overview."
"We have scaled from a single machine installation (a VM with a Graylog + ES + MongoDB) to (2 Graylog + 2 ES + 3 MongoDB). This was done smoothly with a minimal impact on logging."
"I am very proud of how very stable the solution is."
 

Cons

"The dashboard of Amazon CloudWatch is not very customizable right now."
"CloudWatch's scalability could be improved."
"I do not know whether or not CloudWatch can be integrated with on-prem services."
"Improvement of SSSD logs would be beneficial."
"The dashboard and the UI could improve in Amazon CloudWatch. Additionally, they should focus on visibility inside the servers with AI and machine learning integrations. This would allow users who are using the solution to see what is happening within the system better."
"I found several areas for improvement in Amazon CloudWatch. First is that it's tough to track issues and find out where it's going wrong. The process takes longer. For example, if I get an exception error, I read the logs, search, go to AWS Cloud, then to the groups to find the keyword to determine what's wrong. Another area for improvement in Amazon CloudWatch is that it's slow in terms of log streaming. It requires an entire twenty-four hours for scanning, rather than just one hour. This issue can be solved with Elasticsearch streaming with Kibana, but it requires a lot of development effort and integration with Kibana or Splunk, and this also means I need a separate developer and software technical stack to do the indexing and streaming to Kibana. It's a manual effort that you need to do properly, so log streaming should be improved in Amazon CloudWatch. The AWS support person should also have a better understanding of the logs in Amazon CloudWatch. What I'd like added to the solution is a more advanced search function, particularly one that can tell you more information or special information. Right now, the search function is difficult to use because it only gives you limited data. For example, I got an error message saying that the policy wasn't created. I only know the amount the customer paid for the policy, the mobile number, and the customer name, but if I use those details, the information won't show up on the logs. I need to enter more details, so that's the type of fuzzy matching Amazon CloudWatch won't provide. If this type of search functionality is provided, it will be very helpful for businesses and companies that provide professional services to customers, like ours."
"The solution's pricing is a bit higher."
"The configuration capabilities could be better."
"I would like to see a default dashboard widget that shows the topology of the clusters defined for the graylog install."
"More complex visualizations and the ability to execute custom Elasticsearch queries would be great."
"We ran into problems with Elasticsearch throwing a circuit-breaking exception due to field data size being too large. It turned out that the heap size directly impacted this size in a high-throughput environment, causing unexplained instability in Graylog. We were able to troubleshoot on the Elasticsearch size, but we should have been able to reference some minimum requirements for Graylog to know that our settings weren't sufficient."
"Its scalability gets complicated when we have to update or edit multiple nodes."
"Graylog could improve the process of creating rules. We have to create them manually by doing parses and applying them. Other SIEM solutions have basic rules and you can create and get more events of interest."
"The biggest problem is the collector application, as we wanted to avoid using Graylog Collector Sidecar due to its architecture."
"I would like to see some kind of visualization included in Graylog."
"I hope to see improvements in Graylog for more interactivity, user-friendliness, and creating alerts. The initial setup is complex."
 

Pricing and Cost Advice

"The pricing can be considered reasonable, especially when already operating on a cloud platform."
"I consider it as a medium-priced solution."
"The product's cost is relatively inexpensive."
"It’s an open-source solution."
"The solution is expensive."
"Amazon CloudWatch has very cheap pricing, and it hardly costs my company $25-$30 a month for fifty systems, so it's pretty affordable."
"The pricing model is pay-as-you-go so you have to be mindful of usage to manage costs."
"The price of Amazon CloudWatch is reasonable. When the rate of data collection is done the price will increase. The price is less than other solutions."
"There is an open source version and an enterprise version. I wouldn't recommend the enterprise version, but as an open source solution, it is solid and works really well."
"Having paid official support is wise for projects."
"​You get a lot out-of-the-box with the non-enterprise version, so give it a try first."
"It's open source and free. They have a paid version, but we never looked into that because we never needed the features of the paid version."
"If you want something that works and do not have the money for Splunk or QRadar, take Graylog.​​"
"Consider Enterprise support if you have atypical needs or setup requirements.​"
"Graylog is a free open-source solution. The free version has a capacity limitation of 2 GB daily, if you want to go above this you have to purchase a license."
"It's an open-source solution that can be used free of charge."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
845,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Financial Services Firm
17%
Manufacturing Company
8%
University
5%
Computer Software Company
17%
Comms Service Provider
10%
Government
8%
University
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for Amazon CloudWatch?
Amazon CloudWatch charges more for custom metrics as well as for changes in the timeline, which I see as a disadvantage given the price.
What needs improvement with Amazon CloudWatch?
Amazon CloudWatch charges extra for custom metrics, which is a significant disadvantage. Another aspect that needs improvement is the look and feel of custom dashboards, which currently do not matc...
What do you like most about Graylog?
The product is scalable. The solution is stable.
What is your experience regarding pricing and costs for Graylog?
We are using the free version of the product. However, the paid version is expensive.
What needs improvement with Graylog?
When it comes to configuring the processing pipeline, writing the rules can be very tedious, especially since the documentation isn't extensive on how the functions provided for these rules work. P...
 

Also Known As

No data available
Graylog2
 

Overview

 

Sample Customers

AirAsia, Airbnb, Aircel, APUS, Avazu, Casa & Video, Futbol Club Barcelona (FCBarcelona), National Taiwan University, redBus
Blue Cross Blue Shield, eBay, Cisco, LinkedIn, SAP, King.com, Twilio, Deutsche Presse-Agentur
Find out what your peers are saying about Amazon CloudWatch vs. Graylog and other solutions. Updated: March 2025.
845,406 professionals have used our research since 2012.