No more typing reviews! Try our Samantha, our new voice AI agent.

Dynatrace vs NetWitness Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Dynatrace
Ranking in Log Management
5th
Average Rating
8.8
Reviews Sentiment
7.0
Number of Reviews
360
Ranking in other categories
Application Performance Monitoring (APM) and Observability (2nd), Mobile APM (2nd), Container Monitoring (2nd), AIOps (2nd), AI Observability (2nd)
NetWitness Platform
Ranking in Log Management
38th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Security Information and Event Management (SIEM) (39th)
 

Mindshare comparison

As of May 2026, in the Log Management category, the mindshare of Dynatrace is 3.2%, down from 5.0% compared to the previous year. The mindshare of NetWitness Platform is 1.0%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Dynatrace3.2%
NetWitness Platform1.0%
Other95.8%
Log Management
 

Featured Reviews

Manish Indupuri - PeerSpot reviewer
senior DevOps engineer at a tech services company with 10,001+ employees
AI-driven insights have reduced downtime and improved cross-team collaboration
We encountered some challenges while using Dynatrace. Although the initial setup was smooth, fine-tuning alert thresholds and custom metrics took some time. Another challenge was that Dynatrace charges based on host units, so we had to carefully plan our agent deployments. The licensing model is expensive. Additionally, the complexity of setup is an issue. While OneAgent and auto-discover services are powerful, the setup is more complex compared to other tools such as Prometheus and Grafana. These integrations are simple and basic, but Dynatrace setup requires more complexity based on the environment. For new users wanting to use Dynatrace, it is difficult. However, the AI-related solutions and metrics took us to the next level for identifying and fixing things. Dynatrace requires an agent for operation. OneAgent is powerful, but it is also resource-heavy. On lightweight nodes or older systems, the agent can slightly impact performance. If Dynatrace could implement a lightweight agent behavior, we could make things faster. Additionally, if Dynatrace could add a long-term retention policy so that we could store more data and find fine-grained details, that would help us. While Dynatrace managed edition supports on-premises deployment, the SaaS version depends on cloud connectivity. For highly regulated or air-gapped environments, setup and updates can be challenging. Although the initial setup is smooth, if someone wants to fine-tune it and fully understand the tool end-to-end, it could be tricky.
reviewer2256927 - PeerSpot reviewer
Head of Information Security, Cyber Defense and IT Risk Management at HCT. at a transportation company with 201-500 employees
A solid SIEM solution that should improve technical support and online resources to be easier to use
A big problem with the product is that we don't have much professional experience in Israel installing, implementing, and integrating this product. There is not enough of a knowledge base. There is no support for this product in this country, so problems have to be resolved through global technical teams. We like to work locally because of the language, and when the product is only supported outside the country, it's a little difficult to implement and use this product. Moreover, AI is something that must be added immediately. Artificial intelligence is a part of the competitors' products, and it's not been implemented for us.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It eases the investigation process (faster feedback loop with clients), better pro-activity on possible outages (in order to avoid outages), and eases the process of fine tuning allocation of resources to processes."
"Dynatrace has multiple features that I need, but I love that you can analyze traffic, including any bottlenecks. I also find the tool user-friendly and has an easy-to-navigate interface."
"In the AppMon, offering, currently, the most valuable feature is the PurePath analysis, being able to deep-dive into call chains."
"It gives more visibility into all the coding (the black screen). It gives a nice screen. You can see ups and downs. You can see where the traffic is getting impacted, more on the convergence side."
"Transparency and visibility into application performance, errors, incidents, etc. helps to foster a collaborative environment."
"The most valuable feature is the RUM, as we finally have 100% visibility on website performance, including third-party sources."
"Dynatrace helps us to improve overall performance and allows us to detect the root cause of an outbreak on our systems."
"You can see every step a transaction goes through, which servers it hits, and what technology it uses."
"It gives the capability for the incident response team to correlate logs to identify any kind of problem like malware and incidents in a general sense, both for logs and packets."
"Alerting Module: It provides real-time event processing language on all the logs/packets stream for advanced alerting, i.e., using SQL LIKE statements."
"Technically speaking, this is a good product."
"The most valuable feature is the correlation, as it can report in real-time and monitor the management."
"The development of use cases on the SSA console is quite user friendly, which means that the security analyst or the researcher does not have to learn another language."
"It's quite economical compared to other solutions in the market."
"Packet Solution: Allows analyst proactive hunting and alerting on daily sophisticated APTs."
"Incident management is its most valuable feature."
 

Cons

"Cloud monitoring and reporting need improvement, as well as how to manipulate data and export it to share with business executives."
"I think scalability is what we're struggling with. I would say it's okay, but there's a little bit of room for improvement."
"The heavy client is not really user-friendly and the concepts (while powerful) are unintuitive."
"I would suggest to have more rich client features on Appmon as soon as possible."
"Our main problems have been that it has a high learning curve to it. I've used it for about three years now and I'm still learning it. There are some videos and there is some documentation out there, but it still requires you to delve into the tool to learn it. A little bit more comprehensive self-paced training would help."
"For AppMon, in order to use the rich client especially, I think you have to be somebody who is in there more often than not. It's not necessarily as intuitive as it could be."
"I'd like to see more agents ready to be deployed. I know that it's possible to develop integration with Dynatrace API, but in day-to-day operations it's hard to do that kind of customization."
"DCRUM is no longer used by my team, due to lack of executive support."
"Health monitoring of the event sources and devices."
"The documentation is not as structured as I would like, personally, and I think that it can be improved and made much more user-friendly."
"The multi-tenant capabilities are lagging compared to IBM QRadar."
"Log aggregation is an issue with this solution because there are a huge number of alerts in a single instance."
"RSA NetWitness Logs and Packets is far behind the competition."
"The system looks like it is a mix of a bunch of different systems, and nothing looked like it was quite together."
"The tool's integration capability isn't so great."
"The multi-tenant capabilities are lagging compared to IBM QRadar."
 

Pricing and Cost Advice

"While it is quite good in respect to its functionality, there are few area in regards to pricing that they can look at how to possibly change. I have heard it's costly."
"Dynatrace is an expensive solution."
"Decodes on less used/popular protocols are available, but they should be included. Additional investment should not be required."
"The product is definitely worth taking a look at. Be aware that it is probably more pricey than other options on the market, but there are a lot of capabilities. Dynatrace has an eye toward the future and the computing and monitoring needs that we are gonna need for the cloud. ​"
"It is quite costly. Dynatrace was the most expensive, compared to the other products we looked at. But it was also a lot better. If you want value for your money, Dynatrace is the way to go."
"There is a license issue where if we increase the memory we have to up the licenses. I was unaware of that going in. I thought it was scalable without all the paperwork behind the scenes. ​​"
"The price of the solution is expensive."
"The licensing model is confusing in solutioning clients for the number of hosts needed to deploy."
"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."
"The licenses are good but the cost is very expensive."
"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."
"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
"This is a pricey solution; it's not cheap."
"We are on an annual license for the use of the solution."
"It’s cheaper to run virtual machines in a VMware environment."
"Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
896,510 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
20%
Manufacturing Company
9%
Computer Software Company
7%
Government
6%
Financial Services Firm
11%
Comms Service Provider
10%
Construction Company
8%
Performing Arts
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business80
Midsize Enterprise50
Large Enterprise300
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
 

Questions from the Community

Any advice about APM solutions?
The key is to have a holistic view over the complete infrastructure, the ones you have listed are great for APM if you need to monitor applications end to end. I have tested them all and have not f...
What cloud monitoring software did you choose and why?
While the environment does matter in the selection of an APM tool, I prefer to use Dynatrace to manage the entire stack. Both production and Dev/Test. I find it to be quite superior to anything els...
Any advice about APM solutions?
There are many factors and we know little about your requirements (size of org, technology stack, management systems, the scope of implementation). Our goal was to consolidate APM and infra monitor...
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
 

Also Known As

No data available
RSA Security Analytics
 

Overview

 

Sample Customers

Audi, Best Buy, LinkedIn, CISCO, Intuit, KRONOS, Scottrade, Wells Fargo, ULTA Beauty, Lenovo, Swarovsk, Nike, Whirlpool, American Express
Los Angeles World Airports, Reply
Find out what your peers are saying about Dynatrace vs. NetWitness Platform and other solutions. Updated: April 2026.
896,510 professionals have used our research since 2012.