

Logpoint and Cribl compete in the logging and data management sector, with Logpoint excelling in cost-effective pricing and solid reporting features, while Cribl boasts superior flexibility in data handling. Cribl appears to have the upper hand due to its real-time data transformation and robust integration capabilities.
Features: Logpoint is noted for its logging capabilities, quick deployment, and strong dashboard and reporting functionalities. It provides a cost-effective pricing model based on devices, easing financial burdens and combining SIEM and SOAR with machine learning for endpoint monitoring. Cribl stands out with its flexibility in real-time data transformation, reduction, and routing capabilities. It effectively handles diverse data types and integrates seamlessly with various systems, making it vital for organizations aiming to streamline data workflows.
Room for Improvement: Logpoint faces challenges with integration limitations, use-case management complexity, and resource demands. Improvements are suggested in customization and cloud-native capabilities. Cribl could benefit from addressing documentation gaps, enhancing data lineage, and improving backward compatibility. Opportunities exist for more advanced logging and catering to smaller firms.
Ease of Deployment and Customer Service: Logpoint primarily operates on-premises, which some users find limiting compared to Cribl’s diverse deployment options, including hybrid and cloud environments. Logpoint's customer service receives mixed reviews, with reports of excellent responsiveness overshadowed by delays and language barriers. Cribl's support also varies, with some reports of quick responses but regional support concentration posing challenges. Cribl's hybrid deployment options may be more suitable for advanced cloud integration needs.
Pricing and ROI: Logpoint's pricing is deemed cost-effective with its fixed-cost model, offering predictability and avoiding surprise expenses. Its licensing provides value, especially against variable competitor models. Cribl offers competitive pricing, promising good value for managing large data volumes. Its pricing aligns with its robust feature set, leading to a positive return on investment by enhancing data management capabilities. Logpoint's fixed-cost model is advantageous for budget stability.
What we've seen is really an overall reduction of just shy of 40% in our ingest into our SIM platform versus prior to having Cribl.
The second thing is that data aggregation, sampling, and reduction that we're able to do of the data, lowering our overall data volume, both traversing the network as well as what's being stored inside of our final solutions.
In terms of reduction, we were able to save almost ~40% of our total cost.
They had extensive expertise with the product and were able to facilitate everything we needed.
Usually, within an hour, we get a response, and we are able to work with them back and forth until we resolve the issues.
Sometimes by hearing the problem itself, they will know what the solution is, and they will let us know how to resolve it, and we do it immediately.
Logpoint's customer support is not sufficient with only one engineer in the US.
The technical support for Logpoint is very good, and I would rate it as nine out of ten.
I recommend a submission to Logpoint because I worked with it before.
The infrastructure behind Cribl Search is also scalable as it uses a CPU and just spawns horizontally more instances as it demands and requires.
Compared to other SIEM tools I use, any slight change on the operating system end impacts a lot on our SIEM tools and other things, but Cribl performs well in that regard.
It's an enterprise version, and we have a good amount of users using this solution.
It is web-based and accommodates the expansion of our organization.
Logpoint is scalable and capable of expanding.
Migrating from those SC4S servers to Cribl worker nodes has truly been a game-changer.
Regarding scalability, we started with zero servers and have around 285 servers now.
I would rate the stability as ten out of ten.
I have received reports indicating glitches and downtimes with Logpoint.
A more stringent role-based access control feature would enhance security and allow granular control over what users can see and access.
If we can have more internal logs and more debug logs to validate the error, that would be beneficial because instead of reaching out to Cribl support, we can troubleshoot and find the root cause ourselves.
In terms of large datasets—whether they originated from network inputs, virtual machines, or cloud instances—ingesting the data into the destination was relatively easy.
Dealing with foreign entities for support was a challenge, leading us to switch providers due to lack of adequate support.
Logpoint needs to be cloud-native, as currently, it is not.
Logpoint's UEBA is a weak point, while Exabeam's UEBA has extra AI through automation.
Over time, the licensing cost has increased.
Cribl is very inexpensive, with enterprise pricing around 30 cents per GB, which is really decent.
They have a universal license that allows us to consume the portions of Cribl that we want to use or flex into other portions of Cribl.
I rate the pricing at eight, suggesting it's relatively good or affordable.
The data reduction and preprocessing capabilities make Cribl really unique.
Cribl has a feature called JSON Unroll or Unroll function that allows you to differentiate the events; each event will come ingested as a single log instead of piling it up with multiple events.
The Cribl UI is very simple and easy to use, particularly when working with data from various sources; it makes it very easy to create pipelines, add complex logic to those pipelines, and then gives you a preview of what your data looks like before applying that pipeline and what you get after.
The UEBA enables us to monitor at the device level, and SOAR provides playbooks and templates that we can modify and incorporate into the platform.
It effectively facilitates logging and log storage and assists in security event management by ingesting security events.
The most valuable feature, which is endpoint security, is included in Logpoint, and an extra feature is the integration.
| Product | Market Share (%) |
|---|---|
| Cribl | 1.2% |
| Logpoint | 0.9% |
| Other | 97.9% |


| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 5 |
| Large Enterprise | 18 |
| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 3 |
| Large Enterprise | 4 |
Cribl offers advanced data transformation and routing with features such as data reduction, plugin configurations, and log collection within a user-friendly framework supporting various deployments, significantly reducing data volumes and costs.
Cribl is designed to streamline data management, offering real-time data transformation and efficient log management. It supports seamless SIEM migration, enabling organizations to optimize costs associated with platforms like Splunk through data trimming. The capability to handle multiple data destinations and compression eases log control. With flexibility across on-prem, cloud, or hybrid environments, Cribl provides an adaptable interface that facilitates quick data model replication. While it significantly reduces data volumes, enhancing overall efficiency, there are areas for improvement, including compatibility with legacy systems and integration with enterprise products. Organizations can enhance their operational capabilities through certification opportunities and explore added functionalities tailored towards specific industry needs.
What are Cribl's most important features?Cribl sees extensive use in industries prioritizing efficient data management and cost optimization. Organizations leverage its capabilities to connect between different data sources, including cloud environments, improving both data handling and storage efficiency. Its customization options appeal to firms needing specific industry compliance and operational enhancements.
Logpoint is a cutting-edge security information and event management (SIEM) solution that is designed to be intuitive and flexible enough to be used by an array of different businesses. It is capable of expanding according to its users' needs.
Benefits of Logpoint
Some of the benefits of using Logpoint include:
Reviews from Real Users
Logpoint is a security and management solution that stands out among its competitors for a number of reasons. Two major ones are its data gathering and artificial intelligence (AI) capabilities. Logpoint enables users to not only gather the data, but also to maximize both the amount of data that can be gathered and its usefulness. It removes many of the challenges that users may face in data collection. The solution allows users to set rules for collection and then it pulls information from sources that meet the rules that have been set. This data is then broken into manageable segments and ordered. Users can then analyze these ordered segments with ease. Additionally, LogPoint utilizes both machine learning and AI technology. Users gain the ability to protect themselves from and if necessary resolve emerging threats as soon as they arise. The AI sets security parameters for a user’s system. These act as a baseline that are triggered and notify the user if anything deviates from the rules that it set up.
The chief infrastructure & security officer at a financial services firm writes, “It is a very comprehensive solution for gathering data. It has got a lot of capabilities for collecting logs from different systems. Logs are notoriously difficult to collect because they come in all formats. Logpoint has a very sophisticated mechanism for you to be able to connect to or listen to a system, get the data, and parse it. Logs come in text formats that are not easily parsed because all logs are not the same, but with Logpoint, you can define a policy for collecting the data. You can create a parser very quickly to get the logs into a structured mechanism so that you can analyze them.”
A. Secca., a Cyber Security Analyst at a transportation company, writes, “It is an AI technology because it is using machine learning technology. So far, there is nothing better out there for UEBA in terms of monitoring endpoints and user activity. It is using machine learning language, so it is right at the top. It provides that capability and monitors all of the user’s activities. It devises a baseline and monitors if there is any deviation from the baseline.”
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.