No more typing reviews! Try our Samantha, our new voice AI agent.

Elastic Observability vs Logstash comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Elastic Observability
Ranking in Log Management
16th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
29
Ranking in other categories
Application Performance Monitoring (APM) and Observability (11th), IT Infrastructure Monitoring (15th), Container Monitoring (6th), Cloud Monitoring Software (11th)
Logstash
Ranking in Log Management
31st
Average Rating
9.0
Reviews Sentiment
5.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2026, in the Log Management category, the mindshare of Elastic Observability is 1.2%, down from 1.4% compared to the previous year. The mindshare of Logstash is 0.9%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Elastic Observability1.2%
Logstash0.9%
Other97.9%
Log Management
 

Featured Reviews

Mohammed-Abdelalim - PeerSpot reviewer
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
Has provided powerful customization for unique monitoring needs but needs more out-of-the-box capabilities
In my opinion, the best features of Elastic Observability are their flexibility to integrate with other existing systems and the ability to build a unified monitoring tool that can integrate with existing ones and end-to-end user journeys which require a lot of customizations. The greatest feature in Elastic is the ability to customize. This is similar to my comments about customizable dashboards in Elastic because it's visible to the analyst. However, it's very great. Customizing these dashboards can meet the customer's specific use cases and specific stories that they have in their environment, their special environment that doesn't look like other environments. The dashboarding in Elastic is highly customizable to the level of logos. If the customer wants his company logo in the dashboard, it can be done.
reviewer2727468 - PeerSpot reviewer
Senior Application Engineer at a comms service provider with 11-50 employees
Transforms logs for real-time insights and seamless reporting
Logstash is used for transforming logs, and you can use many plugins in Logstash. Logstash works with configuration files that contain three main parts: an input part, a filter part, and an output part. In the input part, we can take logs from many sources such as Beats, files, or Kafka. The filter part is used to filter the logs that are shipped from Beats. From my understanding and experience with Logstash, it is usually used for processing logic, meaning I can control what fields should be transferred to Elastic and what fields shouldn't be transferred. This is the main function I use Logstash for. Elastic is a famous open-source searching engine that helps operation teams speed up the investigation process and provides real-time insights for performance reporting.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"In addition to the fact that we are more proactive in the detection of incident before they occur, we can on one click see the request path from the customer to the backend."
"The solution allows us to track performance via metrics and we're able to see where latency is happening."
"I think Elastic Observability is already in very good shape."
"It has always been a stable solution."
"Its diverse set of features available on the cloud is of significant importance."
"It is a powerful tool that allows users to collect and transform logs as needed, enabling flexible visualization and analysis."
"The customizable dashboards in Elastic Observability allow us to group relevant data to specific aspects of our solution, giving us around 20 interlinked dashboards which provide an overview, and if one aspect shows weird behavior, we can focus on that specific aspect of our software with a dedicated dashboard."
"The solution has been stable in our usage."
"I can collect logs from various data sources, including hardware."
"We have three or four Logstash servers for high availability."
"The transformation means we ship the logs in the way that we want them to be presented in Kibana, which is the main function we use Logstash for."
"Everything aligns well with improving our organization."
"The functionality of Logstash is quite easy to implement and the plugin ecosystem of Logstash is great, with plugins for shell script monitoring and SQL monitoring working well with the tool."
"Logstash has numerous plugins for inputs and outputs, allowing it to work well in environments that do not contain other Elastic components."
 

Cons

"The interface could be improved."
"The tool's scalability involves a more complex implementation process. It requires careful calculations to determine the number of nodes needed, the specifications of each node, and the configuration of hot, warm, and cold zones for data storage. Additionally, managing log retention policies adds further complexity. The solution's pricing also needs to be cheaper."
"The only challenging aspect for new users is often writing the query language."
"The cost must be made more transparent."
"Elastic Observability is an excellent product for monitoring and visibility, but it lacks predictive analytics. Most solutions are aligned with the AIOps requirements, but this piece is missing in Elastic and should be included."
"There is room for improvement regarding its APM capabilities."
"If we had some pre-defined templates for observability that we could start using right away after deploying it – instead of having to build or to change some of the dashboards – that would be helpful."
"It lacked some capabilities when handling on-prem devices, like network observability, package flow analysis, and device performance data on the infrastructure side."
"Almost all the research can be very bad. We still have a problem with importing the log system."
"There can be a UI to implement with Logstash. Currently, I have to work with config files and everything."
"An enhancement we could implement is the ability to cluster Logstash to exist in more than one node."
"The product needs to improve its compatibility."
"Elastic does not provide proper support for Logstash worldwide, and I rate their technical support as one out of ten."
 

Pricing and Cost Advice

"Elastic Observability is cheaper than other similar solutions, such as Dynatrace. Its license calculation is based on various factors like data volume and physical infrastructure, particularly related to RAM capacity."
"Users have to pay for some features, like the alerts on different channels, because they are unavailable in different source versions."
"We will buy a premium license after POC."
"The price of Elastic Observability is expensive."
"One needs to pay for the licenses, and it is an annual subscription model right now."
"Elastic Observability's pricing could be better for small-scale users."
"We have been using the open-source version."
"Pricing is one of those situations where the more you use it, the more you pay."
Information not available
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
11%
Government
7%
Manufacturing Company
7%
Financial Services Firm
17%
Manufacturing Company
8%
Comms Service Provider
7%
University
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise16
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Elastic Observability?
The problem is their licensing model, which is a bit confusing. Many customers struggle to understand their total cost of ownership because Elastic licensing is not dependent on easy, quantifiable ...
What needs improvement with Elastic Observability?
After careful consideration about areas for improvement in Elastic Observability, aspects such as pricing, customization, implementation, and scalability could be improved. As a user of the system,...
What is your primary use case for Elastic Observability?
My use case for Elastic Observability is observability, as we upload our customers' data, including logs, and when there is an issue, we can analyze what went wrong.
What needs improvement with Logstash?
Customization can be automated with Logstash, but it is at the developer's disposal. The developer has to do it, not the tool as such. There is scope for optimization, but that is all outside the t...
What is your primary use case for Logstash?
The purposes for which I am using Logstash largely include log aggregation and application monitoring.
What advice do you have for others considering Logstash?
I am using Logstash for log management and also implement it. Logstash can be deployed both on-cloud and on-premises. On a scale of 1-10, I rate Logstash an 8.
 

Comparisons

 

Overview

 

Sample Customers

PSCU, Entel, VITAS, Mimecast, Barrett Steel, Butterfield Bank
Information Not Available
Find out what your peers are saying about Elastic Observability vs. Logstash and other solutions. Updated: June 2026.
900,747 professionals have used our research since 2012.