No more typing reviews! Try our Samantha, our new voice AI agent.

Elastic Beats vs LogRhythm SIEM comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Elastic Beats
Average Rating
8.0
Number of Reviews
2
Ranking in other categories
No ranking in other categories
LogRhythm SIEM
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
176
Ranking in other categories
Log Management (11th), Security Information and Event Management (SIEM) (13th)
 

Featured Reviews

it_user1269834 - PeerSpot reviewer
I.T. Manager at a healthcare company with 51-200 employees
A great addition to our security monitoring system
We haven't to this point had to scale very large, we want to continue to evolve, but it's a slow process for us. From what I've used so far, and my reading on it, I don't think we're going to have any problems scaling to really whatever size we need.
RS
Engineer Information Security at N-Able (Pvt) Ltd
Advanced threat detection has improved investigations but complexity and resource use need refinement
LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat better and more matured in Wazuh compared to LogRhythm SIEM. Additionally, the parsers that I write for LogRhythm SIEM tend to get quite complex for log parsing, while with Wazuh, I can achieve a similar parser with much less complexity. Those are some of the pain points that some of our customers have been expressing. If LogRhythm SIEM could make a lightweight version of their solution, that would be quite competitive because some of my customers have a very large need but refuse to go with LogRhythm SIEM due to its complexity and high resource intensity. Therefore, they have been moved to Wazuh, which I am deploying for them. Even though LogRhythm SIEM has extremely good capabilities, their resource utilization is too heavy for certain customers, so if they could make a separate, lightweight version, that would be quite beneficial.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The security aspects in general have been very useful to use."
"There's a whole spectrum of features on the solution that users can take advantage of, and it's a very robust product."
"The LogRhythm platform has helped my organization by being able to have 24 analyses on logs and events from all the various systems that feed into the LogRhythm platform."
"For us, LogRhythm has given us the kind of insight we need to understand when those threats either are being recon-ed, found out, or when they're really trying a brute force attack to get at us."
"We really appreciate the new cloud functionality."
"The customer service team is excellent and they have resolved anything we have thrown at them in a timely fashion."
"In terms of alarms and AI intelligence, we see that LogRhythm is giving more accurate and meaningful events compared to the others."
"For my situation, besides the investigation that LogRhythm offers, it's the AI Engine rule set that it offers, and it has brought us more significant changes in how we alarm and notify our users about what's going on in our network."
"From a security standpoint, it's the solution to have, in regards to LogRhythm."
"PCI compliance was our main driver for purchasing LogRhythm, but it turns out there was just a ton of other information that really came from having that appliance, other than just being PCI compliant and checking that box for us."
 

Cons

"The dashboard is not user-friendly. The solution, in general, isn't great from a user's perspective."
"At some level, the documentation, the information as far as the components, it's sometimes a little difficult to find the information necessary to implement aspects."
"The biggest thing that I think needs improvement is reporting in the Web Console."
"When we are on-prem, it's a little complicated and has a lot of challenges that the customer doesn't want."
"When we had version 7.2.6, there were a lot of issues deploying that version and with the indexing. The indexer was unstable. So, we were not able to use the platform when we were on that version until we were able to upgrade to 7.3.4."
"Then, there is whole mention of hot versus warm and being able to keep data because SecondLook is terrible."
"I would really like to see some type of group or global management for RIM policies,"
"We have a lot of issues with stability."
"I would like to suggest that they should improve their usage of third party tools for making dashboards and reports. If they would create their own tools for dashboard and report, it would be much better in terms of security purposes."
"The initial setup is complex and I rate it a six out of ten."
 

Pricing and Cost Advice

"It wasn't cheap, but it was cost-effective compared to many of the other solutions."
"NextGen SIEM's pricing is moderate."
"The support which allows more customized to the environment when we are deploying new systems is called Professional Service and is very expensive. The technical annual support and there is an annual fee."
"Everything is expensive with LogRhythm, and you don't get anything for free."
"I think the tool is reasonably priced. There is a need to pay per year towards the licensing costs of the tool."
"The product is inexpensive than other tools."
"Look for whatever will give you the most value. That's the main point. It is not one size fits all."
"We work with French-speaking African countries, and it costs more than the average SIEM solution. Also, the pricing isn't too flexible. AlienVault, Splunk, and IBM QRadar are more suitable for customers on a tight budget."
"We did a five-year agreement. We pay close to a quarter of a million dollars for our solution."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
913,806 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Construction Company
12%
Outsourcing Company
10%
Financial Services Firm
9%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise39
Large Enterprise83
 

Questions from the Community

Ask a question
Earn 20 points
What is the difference between log management and SIEM?
Rony, Daniel's answer is right on the money. There are many solutions for each in the market, a lot depends upon your ability to manage such tools and your budget. A small operation may be best s...
What needs improvement with LogRhythm NextGen SIEM?
LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat bette...
What is your experience regarding pricing and costs for LogRhythm SIEM?
I find LogRhythm SIEM affordable, as it is a bit less costly than QRadar, although I have not been involved in negotiation charges; however, from the manager's approval, I see it as affordable.
 

Also Known As

No data available
LogRhythm NextGen SIEM, LogRhythm, LogRhythm Threat Lifecycle Management, LogRhythm TLM
 

Overview

 

Sample Customers

Sprint
Macy's, NASA, Fujitsu, US Air Force, EY, Abbott, HD Supply, SAB Miller, UCLA, Raytheon, Amtrak, Cargill
Find out what your peers are saying about Splunk, Wazuh, Datadog and others in Log Management. Updated: September 2026.
913,806 professionals have used our research since 2012.