No more typing reviews! Try our Samantha, our new voice AI agent.

Devo vs Elastic Observability comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.6
Devo enhances efficiency, reduces costs, and provides faster insights with seamless integration, boosting ROI and scalability without extra expenses.
Sentiment score
6.5
Elastic Observability enhances cost-effectiveness by reducing incidents, automating fixes, and visualizing cloud operations, saving time and resources.
Devo gives value to the end user and is saving compared to other products in the same category.
Principal Consultant at Syntx Sdn Bhd
Elastic Observability has saved us time as it's much easier to find relevant pieces across the system in one screen compared to our own software, and it has saved resources too since the same resources can use less time.
Technology Consultant at Hybrid software
 

Customer Service

Sentiment score
6.6
Devo excels in customer service with rapid responses and collaborative support, though some users seek improved escalation processes.
Sentiment score
7.6
Elastic Observability customers appreciate their helpful support, quick responses, and valuable documentation, despite some challenges in complex issue resolution.
I rate the customer support a nine out of ten because of their timely technical guidance and responsiveness during the deployment and troubleshooting periods.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
Both response time and support quality need attention.
Team Lead Soc at a tech services company with 51-200 employees
Technical support from Devo is helpful.
Principal Consultant at Syntx Sdn Bhd
Elastic support really struggles in complex situations to resolve issues.
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
Their excellent documentation typically helps me solve any issues I encounter.
Technology Consultant at Hybrid software
 

Scalability Issues

Sentiment score
7.0
Devo offers scalable data handling and integration with AWS, supporting diverse team needs with flexible, growth-ready architecture.
Sentiment score
7.2
Elastic Observability is praised for scalability and ease of deployment, despite potential complexities and internal process limitations.
Devo is a unified SIEM solution designed to handle growing log volumes and enterprise-scale monitoring requirements.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
I rate the scalability of Elastic Observability as a ten, as we have never seen issues even with a lot of data coming in from more customers, provided we have the appropriate configuration.
Technology Consultant at Hybrid software
Elastic Observability seems to have a good scale-out capability.
Chief Cloud Architect at a tech services company with 11-50 employees
Elastic Observability is easy in deployment in general for small scale, but when you deploy it at a really large scale, the complexity comes with the customizations.
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
 

Stability Issues

Sentiment score
7.4
Devo offers reliable service with minimal downtime, quick issue resolution, and high user satisfaction despite infrequent minor outages.
Sentiment score
8.2
Elastic Observability is stable and reliable, with high user ratings, efficiently handling large data volumes with proper configuration.
It is stable and reliable for our security operations.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
There are some bugs that come with each release, but they are keen always to build major versions and minor versions on time, including the CVE vulnerabilities to fix it.
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
It is very stable, and I would rate it ten out of ten based on my interaction with it.
Product Owner at Swisscom
I would rate the stability of Elastic Observability as a ten, as we don't experience any issues.
Technology Consultant at Hybrid software
 

Room For Improvement

Devo's Activeboards need more customization, better integrations, improved performance, enhanced usability, and comprehensive documentation for new users.
Elastic Observability needs automation, AI, and customization improvements, addressing complex deployment, market presence, metrics, licensing, and usability issues.
This is particularly evident when dealing with failed login attempts and determining true versus false positives.
Strategic Account Executive at a computer software company with 51-200 employees
UI improvements, a simplified dashboard, or an easier reporting workflow could further improve analyst productivity.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
I would appreciate more third-party integrations including Fortinet and others.
Team Lead Soc at a tech services company with 51-200 employees
For instance, if you have many error logs and want to create a rule with a custom query, such as triggering an alert for five errors in the last hour, all you need to do is open the AI bot, type this question, and it generates an Elastic query for you to use in your alert rules.
Senior Consultant at Skillfield
It lacked some capabilities when handling on-prem devices, like network observability, package flow analysis, and device performance data on the infrastructure side.
Senior Technical Sales at a tech vendor with 1,001-5,000 employees
Some areas such as AI Ops still require data scientists to understand machine learning and AI, and it doesn't have a quick win with no-brainer use cases.
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
 

Setup Cost

Devo's pricing is straightforward with data-based costs, appealing cloud model, but concerns exist over metadata charges.
Elastic Observability provides competitive pricing, benefiting large enterprises with comprehensive licensing, but may be costly for smaller users.
The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps.
Team Lead Soc at a tech services company with 51-200 employees
The license is reasonably priced, however, the VMs where we host the solution are extremely expensive, making the overall cost in the public cloud high.
Product Owner at Swisscom
Elastic Observability is cost-efficient and provides all features in the enterprise license without asset-based licensing.
Chief Cloud Architect at a tech services company with 11-50 employees
Observability is actually cheaper compared to logs because you're not indexing huge blobs of text and trying to parse those.
Senior Consultant at Skillfield
 

Valuable Features

Devo offers real-time analytics, customizable integration, powerful visualization, secure architecture, and advanced querying for effective threat detection and analysis.
Elastic Observability excels with flexible integration, powerful search, scalability, real-time insights, affordability, and robust support, enhancing efficiency.
When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
Strategic Account Executive at a computer software company with 51-200 employees
When the analyst uses queries to search, it pulls the data quickly, in a second, which aids us greatly with the investigation.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
It utilizes 400 days of hot data, allowing queries to run very fast and yield results quicker than other tools in terms of security and SIEM capability.
Senior Cloud Engineer at a tech services company with 201-500 employees
The most valuable feature is the integrated platform that allows customers to start from observability and expand into other areas like security, EDR solutions, etc.
Chief Cloud Architect at a tech services company with 11-50 employees
the most valued feature of Elastic is its log analytics capabilities.
Senior Technical Sales at a tech vendor with 1,001-5,000 employees
All the features that we use, such as monitoring, dashboarding, reporting, the possibility of alerting, and the way we index the data, are important.
Product Owner at Swisscom
 

Categories and Ranking

Devo
Ranking in Log Management
17th
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
27
Ranking in other categories
Security Information and Event Management (SIEM) (17th), IT Operations Analytics (7th), AIOps (16th)
Elastic Observability
Ranking in Log Management
14th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
29
Ranking in other categories
Application Performance Monitoring (APM) and Observability (10th), IT Infrastructure Monitoring (13th), Container Monitoring (6th), Cloud Monitoring Software (11th)
 

Mindshare comparison

As of September 2026, in the Log Management category, the mindshare of Devo is 1.4%, up from 0.7% compared to the previous year. The mindshare of Elastic Observability is 1.3%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Elastic Observability1.3%
Devo1.4%
Other97.3%
Log Management
 

Featured Reviews

Usama Khan - PeerSpot reviewer
Team Lead Soc at a tech services company with 51-200 employees
Advanced threat hunting has improved SOC visibility and now supports faster incident response
Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.
Stefan Decuypere - PeerSpot reviewer
Technology Consultant at Hybrid software
Real-time dashboards and visual insights have streamlined issue analysis and monitoring
After careful consideration about areas for improvement in Elastic Observability, aspects such as pricing, customization, implementation, and scalability could be improved. As a user of the system, I know what it costs but am not directly involved in cost-benefit evaluations or maintenance, which is handled by another team. I develop the visual representation of the data and frankly, I don't see major gaps in my application or anything I would really miss; I appreciate the fast pace of the developments that have occurred in the last couple of years. Regarding room for improvement in Elastic Observability, I would have preferred built-in tools to manage the indexes on deployment for better visual representation, as the initial feedback regarding system performance and data storage was fairly primitive and lacking.
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
913,683 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Outsourcing Company
11%
Construction Company
10%
Manufacturing Company
9%
Financial Services Firm
14%
Computer Software Company
9%
Comms Service Provider
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise6
Large Enterprise12
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise16
 

Questions from the Community

What needs improvement with Devo?
Perhaps Devo could add some features in the future on the network part. Specifically, I think they could improve network traffic analysis capabilities.
What is your primary use case for Devo?
I have been using Devo as a partner and system integrator for three years. For log monitoring, the clients' use cases can utilize Devo perfectly. Compliance and security operation monitoring are th...
What is your experience regarding pricing and costs for Elastic Observability?
The problem is their licensing model, which is a bit confusing. Many customers struggle to understand their total cost of ownership because Elastic licensing is not dependent on easy, quantifiable ...
What needs improvement with Elastic Observability?
After careful consideration about areas for improvement in Elastic Observability, aspects such as pricing, customization, implementation, and scalability could be improved. As a user of the system,...
What is your primary use case for Elastic Observability?
My use case for Elastic Observability is observability, as we upload our customers' data, including logs, and when there is an issue, we can analyze what went wrong.
 

Comparisons

 

Overview

 

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel
PSCU, Entel, VITAS, Mimecast, Barrett Steel, Butterfield Bank
Find out what your peers are saying about Devo vs. Elastic Observability and other solutions. Updated: September 2026.
913,683 professionals have used our research since 2012.