No more typing reviews! Try our Samantha, our new voice AI agent.

Coralogix vs NetWitness Platform comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Coralogix
Ranking in Log Management
10th
Ranking in Security Information and Event Management (SIEM)
10th
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
22
Ranking in other categories
Application Performance Monitoring (APM) and Observability (14th), API Management (15th), Streaming Analytics (15th), Anomaly Detection Tools (2nd), AI Observability (10th)
NetWitness Platform
Ranking in Log Management
36th
Ranking in Security Information and Event Management (SIEM)
34th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Log Management category, the mindshare of Coralogix is 1.5%, up from 0.9% compared to the previous year. The mindshare of NetWitness Platform is 1.2%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Coralogix1.5%
NetWitness Platform1.2%
Other97.3%
Log Management
 

Featured Reviews

Arka Sarkar - PeerSpot reviewer
Technical Solution Support Development Engineer at Ericsson Global
Centralized monitoring has transformed telecom troubleshooting and now reduces downtime proactively
Coralogix works well for our needs, but there are a few areas where improvements can be made. One area is querying performance for large-scale data sets. When we are dealing with very high log volumes, some complex queries take time to return results. Improving query speed and optimization would enhance the troubleshooting experience. Another point is the learning curve for advanced features. While basic usage is straightforward, advanced querying and dashboard configurations can take time for new users we are onboarding. We have faced this situation in our organization's domain frequently. More simplified UI options or guided templates would help new team members onboard faster. Additionally, dashboard customization flexibility needs improvement. Although dashboards are useful, having more flexibility in customization would make them even more powerful. An important point is cost optimization. Since log volume is high in our environment, better visibility and control over cost optimization would be beneficial. These are minor improvements overall. Coralogix already provides strong capabilities for centralized logging and monitoring, but enhancing these areas would make it even more efficient for large-scale environments in our telecom servers. Improvements could include query performance, alert noise reduction, and ease of use for advanced features, especially for large-scale environments like ours.
reviewer1130436 - PeerSpot reviewer
Information Technology Security and Infrastructure Expert at a government with 201-500 employees
Helps to deal with potential attacks and is available at a reasonable price
My company has had many benefits from the use of the product in the last eight years. The tool has streamlined our company's incident response process since it serves as a log repository, which allows us to correlate events and access different technology stacks. In our company, we were able to actually find some potential attacks, so it has been very helpful. The tool's integration capability isn't so great. In my company, we managed to integrate it with our Microsoft Azure Subscription, after which we managed to integrate it with other tools. You will face a lot of difficulties if you want to integrate it with your database monitoring tool, PAM solutions, or IAM products. The product has done well overall for my company's teams to deal with their workflow efficiency. I would not recommend the product to others. I rate the tool a seven out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"After implementing Coralogix, I noticed specific outcomes and improvements; whenever we try to fetch the data or check the monitoring logs, the spikes, the bars, and the graphs open very quickly, the latency is really very low, and it opens everything very fast, which makes a good impact on our organization."
"The log monitoring is good, and the dashboards that we create are beneficial."
"The overall stability and reliability of Coralogix are excellent, and I rarely encounter issues."
"I have worked on multiple logging systems, and I would say Coralogix was the best among those."
"The solution is easy to use and to start with."
"It's been absolutely brilliant, I would say."
"A non-tech person can easily get used to it."
"The most valuable feature of Coralogix is that it is a very good vendor for metrics."
"The most valuable feature is that we can create our own connectors for any application, and NetWitness provides the training and tools to do it."
"The product has a user-friendly interface and a valuable feature for threat intelligence integration."
"The most valuable features are the packet decoder, log decoder, and concentrator."
"Technical support is very good; they try to resolve issues with the proper SLAs which are defined by them and they understand the client's requirements as well as the client's infrastructure in a better manner."
"The most valuable features are the threat prediction and network forensics."
"The most valuable feature is the correlation, as it can report in real-time and monitor the management."
"The most valuable features are its ingestion of logs and raising of alerts based on those logs."
"Overall, this is a good solution with suitable features and it very well fits our needs."
 

Cons

"It would be helpful if Coralogix could integrate the main modules that any organization requires into a single subscription."
"Coralogix should have some AI capabilities to auto-detect anomalies and provide suggestions. The increasing volume of data and the resulting bandwidth charges are concerns."
"I think Coralogix can be improved by setting up some AI type of tool inside it which can help new users."
"From my experience, Coralogix has horrible Terraform providers."
"Coralogix works well for our needs, but there are a few areas where improvements can be made."
"The documentation of the tool could be improved"
"As a relatively new product, there are some rough edges yet and your mileage may vary."
"We have asked the company to auto-revert the changes after a while so that the system works typically. We want it to work at what it is expected to work at and not really based on the updated configuration which one developer has decided to change."
"The log system is a bit complex and has room for improvement."
"It is not so easy to customize this product."
"The multi-tenant capabilities are lagging compared to IBM QRadar."
"The system looks like it is a mix of a bunch of different systems, and nothing looked like it was quite together."
"The user interface is a little bit difficult for new users and it needs to be improved."
"The product's licensing models are complex to understand. This particular area needs improvement."
"If we have the ability to run a dynamic analysis through malware in the same suite, it would be great to have a sandbox solution to analyze malware through dynamic analysis."
"They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams."
 

Pricing and Cost Advice

"The platform has a reasonable cost. I rate the pricing a three out of ten."
"The cost of the solution is per volume of data ingested."
"We are paying roughly $5,000 a month."
"Currently, we are at a very minimal cost, which is around $400 per month since we have reduced our usage. Initially, we were at $900 per month."
"Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."
"Compared to the competition, the is price is not that high."
"This is a pricey solution; it's not cheap."
"The tool is very expensive, so I rate the pricing a ten out of ten. The solution has an annual subscription."
"We are on an annual license for the use of the solution."
"The NetWitness Platform may be affordable only for enterprise-level customers, as it may not be within the budget of small and medium-sized businesses."
"RSA NetWitness Logs and Packets do not have a subscription model, it's a one-time purchase. There is only a perpetual license."
"The new pricing and licensing mechanisms are fair. I would advise always to get the full solution (i.e., not only Logs)."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Outsourcing Company
10%
Manufacturing Company
10%
Comms Service Provider
9%
Construction Company
12%
Financial Services Firm
11%
Comms Service Provider
11%
Outsourcing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise11
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
 

Questions from the Community

What is your experience regarding pricing and costs for Coralogix?
My experience with Coralogix pricing and licensing has been generally positive, especially considering the value it provides in terms of monitoring and troubleshooting. It follows a usage-based pri...
What needs improvement with Coralogix?
Coralogix works well for our needs, but there are a few areas where improvements can be made. One area is querying performance for large-scale data sets. When we are dealing with very high log volu...
What is your primary use case for Coralogix?
In my organization, particularly in Ericsson's telecom BSS domain, the primary use case of Coralogix is centralized log management and real-time monitoring of telecom applications, such as the BSS ...
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
 

Also Known As

No data available
RSA Security Analytics
 

Overview

 

Sample Customers

Payoneer, AGS, Monday.com, Capgemini
Los Angeles World Airports, Reply
Find out what your peers are saying about Coralogix vs. NetWitness Platform and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.