Auvik vs. Graylog

Auvik is well suited for managed service customers and small-scale SMB customers who do not have enough technical resource to manage and monitor their network. Also for customer who has distributed networks spreaded across worldwide or nation wide, Auvik is well suited since it does not need any on-premise setup at each site except for a collector. For customer who has already adopted and used cloud network and hosting services, Auvik is better as Auvik is also fully cloud based offering

Incentivized

For small companies, Graylog is the best solution possible. It's easy to configure and "just works." Above everything else, it's free. The only thing I hold against it is the fact that it's Linux-based. [This] makes sense because Elasticsearch is Linux-based. But Linux adds a layer of complexity that we don't need for something basic as a logging server. I'm pretty sure that we would have had a logging server years earlier if I had to convince quite a few decision-making people to go ahead with it anyway.

Incentivized

• Auvik is the big pic tool of choice for network diagramming, helps layout of our network infrastructure, and we'll know immediately the status of the devices that are successfully communicating, and those that may have, for example, credentials issues.
• Auvik's "Traffic Insights" are key accelerators for intuitively isolating and resolving traffic-related issues quickly and easily, and the historical information makes it simpler to deduce what aspects may need replacement, capacity improvement, or possibly even re-architecture.
• Auvik integration tools are excellent solution enhancers - that are of particular interest to our company, as we make use of MS Teams and Connectwise products; we would like to see some features to integrate to ServiceNow as well.

Incentivized

• Graylog does a great job of its core function: log aggregation, retention, and searching.
• Graylog has a very flexible configuration. The backend for storage is Elasticsearch and MongoDB is used to store the configuration. You have to option to make your configuration as simple as possible by storing everything on one box, or you can scale everything out horizontally by using a cluster of Elasticsearch nodes and MongoDB servers with several Graylog servers pointed to all the necessary nodes.
• Graylog does a good job of abstracting away a fair portion of Elasticsearch index management (sharding, creation, deletion, rotation, etc).

Incentivized

• The map is not easy to quickly zoom in and out of or pan around. Usually requires a lot of filter toggling. Keyboard shortcuts for this would be nice.
• Better global settings that can be pushed to multiple client organizations
• Security groups/RBAC for user permissions across multiple clients
• Ability to change the URL

Incentivized

• Configuration can be hard to understand
• More quickly and easy ways to search for data
• Auto-categorization of log entries would be excellent

Incentivized

Because it's an amazing product.

Incentivized

The program can be a bit unwieldy at times, however the majority of information is displayed in a readable and friendly way. The maps and popup information box from the bottom can be harder to use on a smaller screen but on a 1080p+ display tends to work fine.

Incentivized

Graylog is easy to deploy. The tricky part is to configure all hosts that are going to send their log data to Graylog, considering the retention period of this data, it will need a lot of disk space to store it. Its rotation works fine. It is very simple to navigate and explore the data you send to it, and very easy to filter and export them too.

Incentivized

We have never had a major outage or impact that was noticeable.

Incentivized

Pages can be slow to load on larger sites but tends to be fine for most clients.

Incentivized

Fast response and knowledgeable. If the technician does not know, they will look for the information and get back to you.

Incentivized

Community support does not give simple straightforward answers; simply search up Graylog Issues and look at some of the responses on the forums. The documentation is your only hope if you are on the free version, as you can NOT purchase only support. The few times I have worked with Graylog Enterprise support they were great though.

Incentivized

Auvik can stand up against any of the big network management and monitoring solutions on the market. I've implemented and used SolarWinds at many organizations for over 15 years. The paradigm that SolarWinds, PRTG, Prime, etc., work under is completely different than Auvik. It's apparent that Auvik was aiming to solve a different problem and built that solution from the ground up. For any organization responsible for multiple other organizations' infrastructure, Auvik is invaluable in comparison to the other products listed.

In terms of log aggregation, the free product fully stacks up with the competitors listed. Full control over the data ingests for flexible configuration. Graylog even better on that front than AlienVault USM because you cannot configure the variable mapping. We haven't used the threat exchange stuff or correlation. But with regex searches, we have created function dashboards that show threat theater pictures of our network based on logs from our firewall.

Incentivized

Auvik has worked on sites with 15+ offices connected with VPN's and we have not encountered any issues with the monitoring. On larger sites the map can be a bit cumbersome to read however it can be cleaned up easily with device filters.

Incentivized

• the ROI for Auvik comes from the time it saves in updating documentation and onboarding, new clients. We no longer have to spend a day investigating a network and documenting it, this is life and up to date so you always have true information for reporting and troubleshooting.

Incentivized

• Able to offer monitoring services to new and existing clients to increase revenue
• Staff have increased billing percentage
• Potential to expand security services

Incentivized