BMC TrueSight and Devo compete in the IT management and security analytics space. Devo seems to have the upper hand due to its real-time security analytics and ease of use, making it well-suited for dynamic environments.
Features: BMC TrueSight excels in event management and monitoring capabilities, offering seamless integration with other tools and diverse asset monitoring. TrueSight's knowledge modules extend monitoring from hardware to the cloud, and it is appreciated for quick implementation and administration. Devo focuses on high-speed log management and versatility with features like Activeboards and CyberChef, coupled with real-time security analytics. Its user interface is considered very flexible, and the tool's ease of use is highlighted as valuable.
Room for Improvement: BMC TrueSight faces criticism for complexity in deployment, high costs, and inadequate cloud monitoring. Users seek better documentation, enhanced reporting capabilities, and improved event correlation. Devo users point out the need for integrated security features, streamlined data parsing, and enhancement of Activeboards' visual components. Improvements in AI capabilities and data extraction speed are also desired for Devo.
Ease of Deployment and Customer Service: BMC TrueSight is mainly deployed on-premises with challenges noted in setup complexity and resource requirements. Customer service is reported as varying in quality, with a need for better training resources. Devo offers flexibility with public, private, and hybrid cloud deployments and receives positive feedback for future-focused customer support, although better onboarding processes are suggested.
Pricing and ROI: BMC TrueSight has a robust yet costly licensing model, which may be prohibitive for some, though it promises significant ROI through operational efficiencies. Devo's pricing is more transparent, based on data ingestion costs, with a notable advantage of 400 days of hot data. However, there are potential unexpected charges related to metadata parsing. Devo is considered to provide substantial value with fewer surprises compared to BMC TrueSight's traditional pricing model.
Devo gives value to the end user and is saving compared to other products in the same category.
In terms of return on investment with Devo, I'd say it has been costly due to the need for support and the overtime required for issues experienced at the beginning of the project.
We achieve early identification of security incidents that could potentially breach the customer environment, which would have been costly.
I would rate their technical support a nine out of ten.
I rate the customer support a nine out of ten because of their timely technical guidance and responsiveness during the deployment and troubleshooting periods.
Both response time and support quality need attention.
Technical support from Devo is helpful.
Devo is a unified SIEM solution designed to handle growing log volumes and enterprise-scale monitoring requirements.
Devo's scalability has its challenges.
Regarding Devo's scalability, its horizontal scalability is quite good with no significant hassle.
It is stable and reliable for our security operations.
There are some complexities with deployment that could be improved in BMC TrueSight.
It's hard for us to keep pace since our original use case was 250 to 500 megabytes a day, and then it became two terabytes a day.
Integrating custom parsing and mapping for non-standard logs is essential due to compatibility challenges with various technologies.
This is particularly evident when dealing with failed login attempts and determining true versus false positives.
BMC TrueSight licensing costs are on the more expensive side.
The pricing could be simpler, and while the initial setup cost for a new instance is a bit expensive, the licensing can currently be user-based or driven by log volume, which is better if there is expansion of our user base.
The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps.
Automated root cause analysis and predictive capabilities are powerful features that assist in resource utilization and capacity planning.
When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
When the analyst uses queries to search, it pulls the data quickly, in a second, which aids us greatly with the investigation.
It utilizes 400 days of hot data, allowing queries to run very fast and yield results quicker than other tools in terms of security and SIEM capability.
| Product | Mindshare (%) |
|---|---|
| BMC TrueSight | 3.5% |
| Devo | 2.0% |
| Other | 94.5% |
| Company Size | Count |
|---|---|
| Small Business | 25 |
| Midsize Enterprise | 6 |
| Large Enterprise | 24 |
| Company Size | Count |
|---|---|
| Small Business | 11 |
| Midsize Enterprise | 6 |
| Large Enterprise | 15 |
BMC TrueSight offers extensive event management and seamless integration, providing comprehensive monitoring across varied infrastructures through its centralized console and Knowledge Modules.
BMC TrueSight delivers robust event management capabilities with seamless integration and comprehensive monitoring of diverse infrastructures. Its single console simplifies management, offering automated triage for standardized alerts, enhancing efficiency. Knowledge Modules support services from hardware to cloud, while proactive monitoring and capacity optimization enhance customization. It efficiently supports mixed environments by providing detailed insights and intelligently routing alerts to reduce noise. While improvements are needed in deployment, integration, AI, automation, reporting, and complexity reduction, it still meets diverse operational needs effectively.
What are BMC TrueSight's key features?
What benefits and ROI should users seek in BMC TrueSight?
BMC TrueSight is widely used in performance and availability monitoring for infrastructure and applications, supporting the monitoring of servers, databases, networks, and IT environments. It is implemented to improve management and reduce downtime, serving needs in data centers and cloud services. Organizations leverage it for event management, comprehensive data center monitoring, and cloud services, using its capabilities for alerting, ticket creation, troubleshooting, and compliance, enhancing operational efficiency globally.
Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.
Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.
What are Devo's most important features?Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.
We monitor all AIOps reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
