No more typing reviews! Try our Samantha, our new voice AI agent.

Dynatrace vs NetWitness Platform comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Dynatrace
Ranking in Log Management
6th
Average Rating
8.8
Reviews Sentiment
6.9
Number of Reviews
362
Ranking in other categories
Application Performance Monitoring (APM) and Observability (2nd), Mobile APM (3rd), Container Monitoring (2nd), AIOps (2nd), AI Observability (3rd)
NetWitness Platform
Ranking in Log Management
36th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Security Information and Event Management (SIEM) (35th)
 

Mindshare comparison

As of October 2026, in the Log Management category, the mindshare of Dynatrace is 2.8%, down from 4.9% compared to the previous year. The mindshare of NetWitness Platform is 1.2%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Dynatrace2.8%
NetWitness Platform1.2%
Other96.0%
Log Management
 

Featured Reviews

Manish Indupuri - PeerSpot reviewer
senior DevOps engineer at a tech services company with 10,001+ employees
AI-driven insights have reduced downtime and improved cross-team collaboration
We encountered some challenges while using Dynatrace. Although the initial setup was smooth, fine-tuning alert thresholds and custom metrics took some time. Another challenge was that Dynatrace charges based on host units, so we had to carefully plan our agent deployments. The licensing model is expensive. Additionally, the complexity of setup is an issue. While OneAgent and auto-discover services are powerful, the setup is more complex compared to other tools such as Prometheus and Grafana. These integrations are simple and basic, but Dynatrace setup requires more complexity based on the environment. For new users wanting to use Dynatrace, it is difficult. However, the AI-related solutions and metrics took us to the next level for identifying and fixing things. Dynatrace requires an agent for operation. OneAgent is powerful, but it is also resource-heavy. On lightweight nodes or older systems, the agent can slightly impact performance. If Dynatrace could implement a lightweight agent behavior, we could make things faster. Additionally, if Dynatrace could add a long-term retention policy so that we could store more data and find fine-grained details, that would help us. While Dynatrace managed edition supports on-premises deployment, the SaaS version depends on cloud connectivity. For highly regulated or air-gapped environments, setup and updates can be challenging. Although the initial setup is smooth, if someone wants to fine-tune it and fully understand the tool end-to-end, it could be tricky.
reviewer1130436 - PeerSpot reviewer
Information Technology Security and Infrastructure Expert at a government with 201-500 employees
Helps to deal with potential attacks and is available at a reasonable price
My company has had many benefits from the use of the product in the last eight years. The tool has streamlined our company's incident response process since it serves as a log repository, which allows us to correlate events and access different technology stacks. In our company, we were able to actually find some potential attacks, so it has been very helpful. The tool's integration capability isn't so great. In my company, we managed to integrate it with our Microsoft Azure Subscription, after which we managed to integrate it with other tools. You will face a lot of difficulties if you want to integrate it with your database monitoring tool, PAM solutions, or IAM products. The product has done well overall for my company's teams to deal with their workflow efficiency. I would not recommend the product to others. I rate the tool a seven out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If we had one solution that could provide not only data, but real answers, if we deployed Dynatrace, and it got its own baselines, and then it told us, "We saw an anomaly, here's a problem ticket, somebody needs to look at that," that would be tremendous."
"The most valuable features are end user visibility, Smartscape, and the entire visibility of our data center, including SQL queries."
"When something goes wrong, we have visibility into the system, can find the issue, and quickly get things back up."
"We spend less time tracking down what's truly a problem and looking for problems, and more time actually solving the problems."
"PurePath does deep dive analysis, has dashboards, and provides real user experience monitoring. It has allowed us to do analysis which was never possible before."
"The graphical interface is helpful, as it illustrates things well for anyone who wants to know about the information it provides."
"The most valuable component of it is taking that guessing out of troubleshooting problems. We no longer have to rely on an architect, or an application person, or someone's memory of how the transaction moves throughout the infrastructure and the different dependencies that it has on it. We can see it right there and we find out more that we ever imagined."
"They can see, yes, this tool has been a good investment."
"Overall, I feel that the product is very good and my biggest complaint is about their support."
"What we are mainly using are the RSA concentrator, RSA Decoder, Archiver, Broker, and Log Decoder."
"It gives the ability to investigate into network traffic in the Net and the organization what we couldn't do before."
"Technical support is very good; they try to resolve issues with the proper SLAs which are defined by them and they understand the client's requirements as well as the client's infrastructure in a better manner."
"It's fully scalable. There is no limit. Of course, the license limits per day the number of terabytes. In my opinion, it's very flexible."
"Setting up NetWitness is straightforward. There are multiple connectors, including standard and specialized connectors. One purpose of the connectors is the enhanced capability integrate the custom applications. NetWitness comes with E6 appliances and application images that we use for the initial configurations and for the OS stack information. From there, you can consider the correlation rules, integrate the different log sources, and easily create correlation rules and backlog reports."
"NetWitness can be highly beneficial for incident detection and response."
"Packet Solution: Allows analyst proactive hunting and alerting on daily sophisticated APTs."
 

Cons

"The dashboarding in Dynatrace is not very good. We have used other monitoring tools like AppDynamics. We are also using AppDynamics for some of our products. If I compare Dynatrace with those monitoring tools, the dashboarding is not as good. If I have to create a dashboard it takes me time, the experience is not that good."
"You have got cloning at one level, but it would be nice to have cloning at deeper levels. Or, as you are doing the cloning, it would be nice if you could select different options. Then, you are not having to sit there and build dashboards, and spending a lot of time in the cloning area."
"I would like them to add serverless capabilities, because everyone is going there."
"They expect the customer to do the basic analysis, do all the solutions, and find the solutions themselves. If it is really a product problem, only then will they be able to identify and spend time on the customer."
"The one thing I am really missing is the final Azure dashboard."
"Another area for improvement is that I would like the alerting to be set up a little bit more easily. Currently, it takes a lot of work to add alerting, especially if you have a large environment, and I consider our environment to be quite large. The alerting takes a lot of administration."
"Right now, we are struggling a bit with stability. We have outages, data loss, and have had to restart, but have not narrowed down exactly what the problem is yet."
"The plugin architecture is not very flexible, which makes it difficult to add the custom monitoring not available through Dynatrace, specifically around file monitoring."
"It is not so easy to customize this product."
"The system architecture is complex and sometimes it’s hard to troubleshoot potential problems."
"Security needs improvement. We would still like to know how the traffic is entering the organization."
"I am not happy with the RSA support. Sometimes they can be really annoying because it takes so long to get the support that you need."
"Technical support could be improved."
"There is no support for this product in this country, so problems have to be resolved through global technical teams."
"We have encountered issues with unresolved crashes."
"I'd like to see improvement in its ease of use. It's basically unusable. It's overly complex."
 

Pricing and Cost Advice

"It's understandable to do a smaller scale initial evaluation. However, as you identify the product value, don't hesitant in your scope and scale to maximize the initial investment and your opportunity to do a bulk investment of the product."
"Purchasing through the AWS Marketplace was a pretty straightforward process. We had no hiccups."
"Its price is quite high. Although it is worth it, it would be better if its price is reduced. They base their prices around licensing. Their prices are based on agent licensing and consumption licensing. Both of these can be a bit cheaper, but if they are the best in the market, as I consider them to be, I assume that their prices will be higher. They are delivering the product for that price."
"The solution is not cheap."
"Licensing is very interesting, as you pay only for what is being monitored. A lot of things are given away for no additional cost. If you have a great IT consolidation, it will be pretty cheap. If you have a lot of servers, it will be heavier."
"Pricing is still too expensive."
"​I would recommend doing a PoC."
"The pricing is not bad, but it could be better."
"Our license is for one year."
"Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."
"We have yearly licensing costs. The license fee can be based on the volume of EPS. Some organizations may have, as a gentlemanly gesture, 10,000 EPS and get a 3,000 EPS license but actually use 5,000 EPS."
"The licenses are good but the cost is very expensive."
"The product price was reasonable for my region and the market."
"It is cheap."
"Compared to the competition, the is price is not that high."
"RSA NetWitness Logs and Packets do not have a subscription model, it's a one-time purchase. There is only a perpetual license."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
916,771 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
18%
Outsourcing Company
9%
Manufacturing Company
9%
Healthcare Company
6%
Construction Company
12%
Financial Services Firm
12%
Comms Service Provider
10%
Outsourcing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business81
Midsize Enterprise50
Large Enterprise301
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
 

Questions from the Community

Any advice about APM solutions?
The key is to have a holistic view over the complete infrastructure, the ones you have listed are great for APM if you need to monitor applications end to end. I have tested them all and have not f...
What cloud monitoring software did you choose and why?
While the environment does matter in the selection of an APM tool, I prefer to use Dynatrace to manage the entire stack. Both production and Dev/Test. I find it to be quite superior to anything els...
Any advice about APM solutions?
There are many factors and we know little about your requirements (size of org, technology stack, management systems, the scope of implementation). Our goal was to consolidate APM and infra monitor...
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
 

Also Known As

No data available
RSA Security Analytics
 

Overview

 

Sample Customers

TD Bank, Zurich North America, Accenture, Macquarie, United Airlines, Raymond James, BT, Vodafone, Air France-KLM, TELUS, American Airlines, Air Canada, ADT, Virgin Money
Los Angeles World Airports, Reply
Find out what your peers are saying about Dynatrace vs. NetWitness Platform and other solutions. Updated: September 2026.
916,771 professionals have used our research since 2012.