No more typing reviews! Try our Samantha, our new voice AI agent.

Datadog vs NetWitness Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Datadog
Ranking in Log Management
4th
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
211
Ranking in other categories
Application Performance Monitoring (APM) and Observability (1st), Network Monitoring Software (4th), IT Infrastructure Monitoring (2nd), Container Monitoring (3rd), Cloud Monitoring Software (1st), AIOps (1st), Cloud Security Posture Management (CSPM) (5th), AI Observability (1st)
NetWitness Platform
Ranking in Log Management
37th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Security Information and Event Management (SIEM) (37th)
 

Mindshare comparison

As of June 2026, in the Log Management category, the mindshare of Datadog is 4.0%, down from 5.9% compared to the previous year. The mindshare of NetWitness Platform is 1.1%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Datadog4.0%
NetWitness Platform1.1%
Other94.9%
Log Management
 

Featured Reviews

Dhroov Patel - PeerSpot reviewer
Site Reliability Engineer at Grainger
Has improved incident response with better root cause visibility and supports flexible on-call scheduling
Datadog needs to introduce more hard limits to cost. If we see a huge log spike, administrators should have more control over what happens to save costs. If a service starts logging extensively, I want the ability to automatically direct that log into the cheapest log bucket. This should be the case with many offerings. If we're seeing too much APM, we need to be aware of it and able to stop it rather than having administrators reach out to specific teams. Datadog has become significantly slower over the last year. They could improve performance at the risk of slowing down feature work. More resources need to go into Fleet Automation because we face many problems with things such as the Ansible role to install Datadog in non-containerized hosts. We mainly want to see performance improvements, less time spent looking at costs, the ability to trust that costs will stay reasonable, and an easier way to manage our agents. It is such a powerful tool with much potential on the horizon, but cost control, performance, and agent management need improvement. The main issues are with the administrative side rather than the actual application.
reviewer2256927 - PeerSpot reviewer
Head of Information Security, Cyber Defense and IT Risk Management at HCT. at a transportation company with 201-500 employees
A solid SIEM solution that should improve technical support and online resources to be easier to use
A big problem with the product is that we don't have much professional experience in Israel installing, implementing, and integrating this product. There is not enough of a knowledge base. There is no support for this product in this country, so problems have to be resolved through global technical teams. We like to work locally because of the language, and when the product is only supported outside the country, it's a little difficult to implement and use this product. Moreover, AI is something that must be added immediately. Artificial intelligence is a part of the competitors' products, and it's not been implemented for us.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most useful feature is the APM."
"Being able to filter requests by latency is invaluable, as it provides immediate insight into which endpoints require further analysis and optimization."
"Datadog agents act as an integration to different services, providing easy access and management."
"The greatest value is integrated monitoring as it is able to quickly detect issues and improve our time to market."
"The solution's SaaS model is easy to manage and works well in single- or multi-cloud environments."
"Most of the features in the way Datadog does monitoring are commendable and that is the reason we choose it. We did some comparisons before picking Datadog. Datadog was recommended based on the features provided."
"Datadog helps us detect issues early on and helps in troubleshooting."
"Datadog allows for much better visibility across our entire fleet and has saved us countless eng hours as a result."
"Possibility to investigate incidents based on logs and raw packets, such as extracting files sent over the network"
"The most valuable features are its ingestion of logs and raising of alerts based on those logs."
"Stability has not been an issue with this product."
"The software is scalable to whatever is required, and you can also put a lot of resources in the cloud."
"In my opinion, the solution's most valuable feature is its capacity to monitor network traffic, logs from devices within the network, and network captures. This capability extends beyond logs to include full network capturing."
"The detection of ransomware in the internal network has benefited my organization."
"The most valuable features are the packet inspection and the automated incident response."
"The newer 11.5 version that my team is using has found it to have good mapping."
 

Cons

"Auto instrumentation on tracing has not been very easy to find in the documentation."
"We would like to see smaller or shorter tutorials and video sessions."
"We have found that some of the different options for filtering for logs ingestion, APM traces and span ingestion, and RUM sessions vs replay settings can be hard to discover and tough to determine how to adjust and tweak for both optimal performance and monitoring as well as for billing within the console."
"I want to applaud the efforts in making the UI extremely usable and approachable. My suggestion would be to take another look at how the menu structure is put together, however. Even after using the platform mostly every day for months, I still find myself trying to find a service or feature in the menus."
"I would like testing for data in the future."
"Support via tickets is absolutely terrible. It's the one obvious bad spot for Datadog."
"I found the documentation can sometimes be confusing."
"More helpful log search keywords/tips would be helpful in improving Datadog's log dashboard."
"The product's licensing models are complex to understand. This particular area needs improvement."
"RSA NetWitness Logs and Packets is far behind the competition."
"We have encountered issues with unresolved crashes."
"Technical support could be improved."
"The solution is pretty complex to set up. Comparatively, I have worked on IBM QRadar and Splunk; they are much easier to set up."
"Nowadays, their support is a little subpar compared to other solutions. I rate RSA support six out of 10."
"They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams."
"We encountered stability issues in the earlier versions, and much fewer in the newer versions."
 

Pricing and Cost Advice

"It didn't scale well from the cost perspective. We had a custom package deal."
"The solution's pricing depends on project volume."
"I am not satisfied with its licensing. Its payment is based on the exported data, and there was an explosion of the data for three or four weeks. My customer was not alerted, and there was no way for them to see that there has been an explosion of data. They got a big invoice for one or two months. The pricing model of Datadog is based on the data. The customer was quite surprised about not being alerted about this explosion of data. They should provide some kind of alert when there is an increase in usage."
"Pricing seemed easy until the bill came in and some things were not accounted for."
"It is easy to run up a large bill, so become familiar with the cost of each piece of your bill and use the metrics they supply to estimate and monitor your bill."
"The price is better than some competing products."
"The tool is open-source."
"Our licensing fees are paid on a monthly basis."
"RSA NetWitness Logs and Packets do not have a subscription model, it's a one-time purchase. There is only a perpetual license."
"It provides tools to assist in selecting the appropriate license and usage scenarios."
"The new pricing and licensing mechanisms are fair. I would advise always to get the full solution (i.e., not only Logs)."
"Our license is for one year."
"The licenses are good but the cost is very expensive."
"Compared to the competition, the is price is not that high."
"The tool is very expensive, so I rate the pricing a ten out of ten. The solution has an annual subscription."
"This is a pricey solution; it's not cheap."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Manufacturing Company
9%
Computer Software Company
9%
Outsourcing Company
6%
Financial Services Firm
12%
Construction Company
11%
Comms Service Provider
9%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business82
Midsize Enterprise49
Large Enterprise100
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
 

Questions from the Community

Any advice about APM solutions?
There are many factors and we know little about your requirements (size of org, technology stack, management systems, the scope of implementation). Our goal was to consolidate APM and infra monitor...
Datadog vs ELK: which one is good in terms of performance, cost and efficiency?
With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several times lately using the dashboards we have created with Datadog; they are very good c...
Which would you choose - Datadog or Dynatrace?
Our organization ran comparison tests to determine whether the Datadog or Dynatrace network monitoring software was the better fit for us. We decided to go with Dynatrace. Dynatrace offers network ...
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
 

Also Known As

No data available
RSA Security Analytics
 

Overview

 

Sample Customers

Adobe, Samsung, facebook, HP Cloud Services, Electronic Arts, salesforce, Stanford University, CiTRIX, Chef, zendesk, Hearst Magazines, Spotify, mercardo libre, Slashdot, Ziff Davis, PBS, MLS, The Motley Fool, Politico, Barneby's
Los Angeles World Airports, Reply
Find out what your peers are saying about Datadog vs. NetWitness Platform and other solutions. Updated: June 2026.
900,747 professionals have used our research since 2012.