

Logpoint and Cribl both compete in the data management and security sector, focusing on log management and SIEM solutions. Cribl appears to have the upper hand due to its flexibility, cost-effective data management, and better adaptability to hybrid and cloud environments.
Features: Logpoint offers comprehensive log collection, user behavior analytics, and integrated SIEM and SOAR capabilities. Cribl provides data routing flexibility, cost reduction, and manages high volumes of logs with an intuitive user interface.
Room for Improvement: Logpoint could improve its cloud-native deployment, flexible pricing, and customizable dashboards. Cribl needs to enhance handling of large-scale data ingestion, support for smaller firms, and improve internal logging and alerting features.
Ease of Deployment and Customer Service: Logpoint is mainly on-premises with supportive service that may initially be slow. Cribl excels in hybrid and cloud setups with efficient support, although complex custom setups might pose challenges.
Pricing and ROI: Logpoint's fixed pricing offers predictability, though it may lack flexibility. Cribl provides cost savings through data reduction, making it appealing for larger setups, yet the pricing might be steep for smaller setups.
What we've seen is really an overall reduction of just shy of 40% in our ingest into our SIM platform versus prior to having Cribl.
The second thing is that data aggregation, sampling, and reduction that we're able to do of the data, lowering our overall data volume, both traversing the network as well as what's being stored inside of our final solutions.
In terms of reduction, we were able to save almost ~40% of our total cost.
They had extensive expertise with the product and were able to facilitate everything we needed.
Usually, within an hour, we get a response, and we are able to work with them back and forth until we resolve the issues.
Sometimes by hearing the problem itself, they will know what the solution is, and they will let us know how to resolve it, and we do it immediately.
Logpoint's customer support is not sufficient with only one engineer in the US.
The technical support for Logpoint is very good, and I would rate it as nine out of ten.
I recommend a submission to Logpoint because I worked with it before.
The infrastructure behind Cribl Search is also scalable as it uses a CPU and just spawns horizontally more instances as it demands and requires.
Compared to other SIEM tools I use, any slight change on the operating system end impacts a lot on our SIEM tools and other things, but Cribl performs well in that regard.
Cribl performs effectively across both market segments.
It is web-based and accommodates the expansion of our organization.
Logpoint is scalable and capable of expanding.
Migrating from those SC4S servers to Cribl worker nodes has truly been a game-changer.
Regarding scalability, we started with zero servers and have around 285 servers now.
Cribl is designed to deal with certain kinds of loads and is not designed to handle any scenario in the market.
I have received reports indicating glitches and downtimes with Logpoint.
A more stringent role-based access control feature would enhance security and allow granular control over what users can see and access.
When passing query logs or DNS logs, if certain malicious query patterns need to be identified or if fast-flux attacks are happening, Cribl can report that and those would definitely be a plus for them.
I would advise others looking to implement Cribl that if they are evolving Cribl Search, it would be very interesting to see more capability, more flexibility, and more ways to share the data similar to Splunk.
Dealing with foreign entities for support was a challenge, leading us to switch providers due to lack of adequate support.
Logpoint needs to be cloud-native, as currently, it is not.
Logpoint's UEBA is a weak point, while Exabeam's UEBA has extra AI through automation.
Over time, the licensing cost has increased.
It was cheaper than the Splunk license.
Splunk is more expensive, and Cribl appears to be more affordable.
I rate the pricing at eight, suggesting it's relatively good or affordable.
The data reduction and preprocessing capabilities make Cribl really unique.
Cribl has a feature called JSON Unroll or Unroll function that allows you to differentiate the events; each event will come ingested as a single log instead of piling it up with multiple events.
The Cribl UI is very simple and easy to use, particularly when working with data from various sources; it makes it very easy to create pipelines, add complex logic to those pipelines, and then gives you a preview of what your data looks like before applying that pipeline and what you get after.
The UEBA enables us to monitor at the device level, and SOAR provides playbooks and templates that we can modify and incorporate into the platform.
It effectively facilitates logging and log storage and assists in security event management by ingesting security events.
The most valuable feature, which is endpoint security, is included in Logpoint, and an extra feature is the integration.
| Product | Mindshare (%) |
|---|---|
| Cribl | 1.4% |
| Logpoint | 1.3% |
| Other | 97.3% |


| Company Size | Count |
|---|---|
| Small Business | 52 |
| Midsize Enterprise | 8 |
| Large Enterprise | 36 |
| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 3 |
| Large Enterprise | 4 |
Cribl offers a data management approach with its intuitive interface, real-time filtering, and integration capabilities, effectively managing log volumes and ensuring cost-efficient data processing.
Cribl stands out for its capability to manage high volumes of logs and metrics with ease. Its users benefit from real-time data filtering and routing, which enhances data quality and processing efficiency. Cribl integrates with many vendors, enabling seamless data handling and cost reduction by, for example, routing relevant data to platforms like Splunk or Datadog and reducing unnecessary log data to save on SIEM costs. Despite being recognized for its capabilities, concerns about its pricing and the need for improvements in performance during high data volumes, Git integration, and learning resources have been noted.
What are the key features of Cribl?In specific industries, Cribl is implemented for optimizing data ingestion and managing intricate log flows. Companies leverage its capabilities for cost-effective data routing to SIEM systems, ensuring critical information reaches destinations like Splunk or Datadog. Through significant data volume reduction, organizations maintain high operational efficiency.
Logpoint offers a robust SIEM system tailored for compliance with regulations like PCI DSS and GDPR, enhancing security monitoring and enabling efficient incident response.
Logpoint strengthens cybersecurity by offering essential tools for log collection, security monitoring, and forensic analysis. Its features include an intuitive dashboard, a powerful correlation engine, and extensive third-party integrations, making it a versatile asset for security operations centers. Despite its advantages, areas for improvement include ransomware protection, cloud-native deployment, and more flexible pricing. Improvements in features like SOAR and UEBA functionality can boost its competitiveness.
What are the most important features of Logpoint?Many organizations utilize Logpoint across industries as part of their security infrastructure. It supports standard compliance, orchestrating incident responses and security threat monitoring. Logpoint empowers businesses by integrating and correlating security data, improving cybersecurity posture in varied environments.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.