

Fortinet FortiAnalyzer and Elastic Observability compete in the fields of network security management and cloud observability, respectively. Elastic Observability appears to have the upper hand due to its comprehensive cloud monitoring features, offering companies a more integrated solution for cloud-based environments.
Features: Fortinet FortiAnalyzer provides deep analytics, enhanced security reporting, and strong network-focused insights. Elastic Observability offers integration capabilities, flexible data visualization, and the ability to gather nuanced insights from various data sources.
Room for Improvement: FortiAnalyzer could benefit from improved integration range, better scalability for larger infrastructures, and more versatile deployment options. Elastic Observability might enhance its setup process, improve resource efficiency, and simplify its user interface for easier interaction.
Ease of Deployment and Customer Service: Fortinet FortiAnalyzer is easier to deploy in traditional network setups, with reliable customer support tailored to security needs. Elastic Observability, though requiring more configuration, is effective in addressing cloud-related issues with good support when contacted.
Pricing and ROI: Fortinet FortiAnalyzer is cost-effective for security tasks, delivering satisfactory ROI for network-specific needs. Elastic Observability, despite higher initial costs, is favored by users for its ROI when leveraging its extensive cloud features.
Elastic Observability has saved us time as it's much easier to find relevant pieces across the system in one screen compared to our own software, and it has saved resources too since the same resources can use less time.
The impact of the tool is low when the functionalities are inaccessible due to resource consumption.
Fortinet is highly efficient for moderate deployments and provides a secure platform for medium-sized networks and data centers.
I have seen a return on investment with Fortinet FortiAnalyzer due to its competitive pricing and straightforward licensing model based on the amount of log data processed per day.
Elastic support really struggles in complex situations to resolve issues.
Their excellent documentation typically helps me solve any issues I encounter.
Customer service and support for Fortinet FortiAnalyzer are quite helpful and responsive.
Technical support is good, and I rate it ten out of ten.
The support service is very slow and incompetent.
I rate the scalability of Elastic Observability as a ten, as we have never seen issues even with a lot of data coming in from more customers, provided we have the appropriate configuration.
Elastic Observability seems to have a good scale-out capability.
Elastic Observability is easy in deployment in general for small scale, but when you deploy it at a really large scale, the complexity comes with the customizations.
Fortinet FortiAnalyzer is scalable, especially for the VM versions, as additional space can be provisioned from the servers as needed.
FortiAnalyzer is a scalable product.
It typically handles three to five years of expansion effectively.
There are some bugs that come with each release, but they are keen always to build major versions and minor versions on time, including the CVE vulnerabilities to fix it.
It is very stable, and I would rate it ten out of ten based on my interaction with it.
I would rate the stability of Elastic Observability as a ten, as we don't experience any issues.
We faced some CPU consumption issues, which caused the machine to slow down and required a restart of FortiAnalyzer.
It remains stable during implementation for one or two years.
It provides a reliable solution for managing network-wide data.
For instance, if you have many error logs and want to create a rule with a custom query, such as triggering an alert for five errors in the last hour, all you need to do is open the AI bot, type this question, and it generates an Elastic query for you to use in your alert rules.
It lacked some capabilities when handling on-prem devices, like network observability, package flow analysis, and device performance data on the infrastructure side.
Some areas such as AI Ops still require data scientists to understand machine learning and AI, and it doesn't have a quick win with no-brainer use cases.
When licensing, each device is licensed separately, such as the firewall, which can become expensive.
This would help in analyzing various security incidents and events more effectively by delivering a handful of relevant logs instead of thousands.
Enhanced deep inspection features would make troubleshooting easier.
The license is reasonably priced, however, the VMs where we host the solution are extremely expensive, making the overall cost in the public cloud high.
Elastic Observability is cost-efficient and provides all features in the enterprise license without asset-based licensing.
Observability is actually cheaper compared to logs because you're not indexing huge blobs of text and trying to parse those.
Its licensing model is based on the amount of log data processed per day, making it more cost-effective compared to QRadar, which is EPS and device-based.
In terms of pricing, FortiAnalyzer is not expensive.
In the Indian market, Fortinet's pricing is very competitive, allowing us to win most of our deals.
The most valuable feature is the integrated platform that allows customers to start from observability and expand into other areas like security, EDR solutions, etc.
the most valued feature of Elastic is its log analytics capabilities.
All the features that we use, such as monitoring, dashboarding, reporting, the possibility of alerting, and the way we index the data, are important.
The advanced analytics capabilities aid in threat detection by providing visibility into indicators of compromise.
The most valuable feature of Fortinet FortiAnalyzer is its ability to simplify and display logs clearly, providing details like which IPs are accessing the system, the destination, and the policies applied.
The log management is useful as we have connected around two hundred eighty-five walls and around fifteen to twenty plus firewalls with Fortinet FortiAnalyzer, making it highly beneficial compared to logging into each individual firewall.
| Product | Mindshare (%) |
|---|---|
| Fortinet FortiAnalyzer | 1.5% |
| Elastic Observability | 1.3% |
| Other | 97.2% |

| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 4 |
| Large Enterprise | 16 |
| Company Size | Count |
|---|---|
| Small Business | 57 |
| Midsize Enterprise | 22 |
| Large Enterprise | 31 |
Elastic Observability offers a comprehensive suite for log analytics, application performance monitoring, and machine learning. It integrates seamlessly with platforms like Teams and Slack, enhancing data visualization and scalability for real-time insights.
Elastic Observability is designed to support production environments with features like logging, data collection, and infrastructure tracking. Centralized logging and powerful search functionalities make incident response and performance tracking efficient. Elastic APM and Kibana facilitate detailed data visualization, promoting rapid troubleshooting and effective system performance analysis. Integrated services and extensive connectivity options enhance its role in business and technical decision-making by providing actionable data insights.
What are the most important features of Elastic Observability?Elastic Observability is employed across industries for critical operations, such as in finance for transaction monitoring, in healthcare for secure data management, and in technology for optimizing application performance. Its data-driven approach aids efficient event tracing, supporting diverse industry requirements.
Fortinet FortiAnalyzer offers comprehensive report generation and log management to enhance threat analysis and user activity insights. It integrates with Fortinet products for centralized management, featuring robust security and real-time data capabilities.
FortiAnalyzer enables detailed threat analysis and in-depth insights into user activities, integrating seamlessly with Fortinet's suite for centralized network management. Its robust security features, real-time data processing, and customizable dashboards make it efficient for IT environments. Users benefit from predictive analytics, enhancing network visibility and cybersecurity operations. It is known for ease of deployment and a scalable, user-friendly interface. However, there are desires for better third-party integration, enhanced AI capabilities, and improved technical support. Users seek more intuitive documentation and improved cost-efficiency.
What are FortiAnalyzer's Most Important Features?FortiAnalyzer is utilized in diverse industries such as banking, medical organizations, and service providers. It is employed for security diagnostics, network traffic analysis, and incident management. Organizations utilize its capabilities for enhanced visibility, threat detection, and performance monitoring across cloud-based and on-premises setups.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.