No more typing reviews! Try our Samantha, our new voice AI agent.

Elastic Observability vs Logstash comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Elastic Observability
Ranking in Log Management
15th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
29
Ranking in other categories
Application Performance Monitoring (APM) and Observability (11th), IT Infrastructure Monitoring (15th), Container Monitoring (5th), Cloud Monitoring Software (11th)
Logstash
Ranking in Log Management
31st
Average Rating
9.0
Reviews Sentiment
5.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2026, in the Log Management category, the mindshare of Elastic Observability is 1.3%, down from 1.4% compared to the previous year. The mindshare of Logstash is 0.9%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Elastic Observability1.3%
Logstash0.9%
Other97.8%
Log Management
 

Featured Reviews

Mohammed-Abdelalim - PeerSpot reviewer
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
Has provided powerful customization for unique monitoring needs but needs more out-of-the-box capabilities
In my opinion, the best features of Elastic Observability are their flexibility to integrate with other existing systems and the ability to build a unified monitoring tool that can integrate with existing ones and end-to-end user journeys which require a lot of customizations. The greatest feature in Elastic is the ability to customize. This is similar to my comments about customizable dashboards in Elastic because it's visible to the analyst. However, it's very great. Customizing these dashboards can meet the customer's specific use cases and specific stories that they have in their environment, their special environment that doesn't look like other environments. The dashboarding in Elastic is highly customizable to the level of logos. If the customer wants his company logo in the dashboard, it can be done.
reviewer2727468 - PeerSpot reviewer
Senior Application Engineer at a comms service provider with 11-50 employees
Transforms logs for real-time insights and seamless reporting
Logstash is used for transforming logs, and you can use many plugins in Logstash. Logstash works with configuration files that contain three main parts: an input part, a filter part, and an output part. In the input part, we can take logs from many sources such as Beats, files, or Kafka. The filter part is used to filter the logs that are shipped from Beats. From my understanding and experience with Logstash, it is usually used for processing logic, meaning I can control what fields should be transferred to Elastic and what fields shouldn't be transferred. This is the main function I use Logstash for. Elastic is a famous open-source searching engine that helps operation teams speed up the investigation process and provides real-time insights for performance reporting.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product has connectors to many services."
"From my experience with several major customers, the most valued feature of Elastic is its log analytics capabilities."
"Elastic Observability is highly stable; we ingested nearly 170 million records in the system and we have tested it, and you get your reports and dashboards within a few seconds, so it doesn't take much time."
"We use AppDynamics and Elastic, and the reason why we're using Elastic APM is because of the license count; it's very favorable compared to AppDynamics, inexpensive, and economical."
"Elastic provides built-in features for queries and report generation. It's a very good tool for monitoring integration capabilities."
"Machine learning is the most valuable feature of this solution."
"We use AppDynamics and Elastic. The reason why we're using Elastic APM is because of the license count. It's very favorable compared to AppDynamics. It's inexpensive; it's economical."
"The ability to ensure that the data is searchable and maintainable is highly valuable for our purposes."
"I can collect logs from various data sources, including hardware."
"Logstash has numerous plugins for inputs and outputs, allowing it to work well in environments that do not contain other Elastic components."
"Everything aligns well with improving our organization."
"We have three or four Logstash servers for high availability."
"The transformation means we ship the logs in the way that we want them to be presented in Kibana, which is the main function we use Logstash for."
"The functionality of Logstash is quite easy to implement and the plugin ecosystem of Logstash is great, with plugins for shell script monitoring and SQL monitoring working well with the tool."
 

Cons

"When I go to the portal, I do not see many insights on the endpoints or where there could be latencies."
"Elastic Observability is an excellent product for monitoring and visibility, but it lacks predictive analytics."
"Elastic Observability is difficult to use. There are only three options for customization but this can be difficult for our use case. We do not have other options to choose the metrics shown, such as CPU or memory usage."
"There could be more low-code features included in the product."
"The solution would be better if it was capable of more automation, especially in a monitoring capacity or for the response to abnormalities."
"Elastic APM's visualization is not that great compared to other tools. It's number of metrics is very low."
"I would have preferred built-in tools to manage the indexes on deployment for better visual representation, as the initial feedback regarding system performance and data storage was fairly primitive and lacking."
"One example is the inability to monitor very old databases with the newest version."
"An enhancement we could implement is the ability to cluster Logstash to exist in more than one node."
"Elastic does not provide proper support for Logstash worldwide, and I rate their technical support as one out of ten."
"We still have a problem with importing the log system."
"There can be a UI to implement with Logstash. Currently, I have to work with config files and everything."
"The product needs to improve its compatibility."
"Almost all the research can be very bad. We still have a problem with importing the log system."
 

Pricing and Cost Advice

"Pricing is one of those situations where the more you use it, the more you pay."
"We will buy a premium license after POC."
"So far, there are just the standard licensing fees. Several of the components are embedded in the license or are even open source. They're even free depending on what you use, which makes it even more appealing to someone that is discussing pricing of the solution."
"Users have to pay for some features, like the alerts on different channels, because they are unavailable in different source versions."
"The product is not that cheap."
"The price of Elastic Observability is expensive."
"Elastic Observability's pricing could be better for small-scale users."
"We have been using the open-source version."
Information not available
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
893,244 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
12%
Government
7%
Manufacturing Company
7%
Financial Services Firm
17%
Comms Service Provider
8%
Manufacturing Company
7%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise16
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Elastic Observability?
The problem is their licensing model, which is a bit confusing. Many customers struggle to understand their total cost of ownership because Elastic licensing is not dependent on easy, quantifiable ...
What needs improvement with Elastic Observability?
After careful consideration about areas for improvement in Elastic Observability, aspects such as pricing, customization, implementation, and scalability could be improved. As a user of the system,...
What is your primary use case for Elastic Observability?
My use case for Elastic Observability is observability, as we upload our customers' data, including logs, and when there is an issue, we can analyze what went wrong.
What needs improvement with Logstash?
Customization can be automated with Logstash, but it is at the developer's disposal. The developer has to do it, not the tool as such. There is scope for optimization, but that is all outside the t...
What is your primary use case for Logstash?
The purposes for which I am using Logstash largely include log aggregation and application monitoring.
What advice do you have for others considering Logstash?
I am using Logstash for log management and also implement it. Logstash can be deployed both on-cloud and on-premises. On a scale of 1-10, I rate Logstash an 8.
 

Comparisons

 

Overview

 

Sample Customers

PSCU, Entel, VITAS, Mimecast, Barrett Steel, Butterfield Bank
Information Not Available
Find out what your peers are saying about Elastic Observability vs. Logstash and other solutions. Updated: April 2026.
893,244 professionals have used our research since 2012.