Elastic Enterprise Search vs. Microsoft Sentinel

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Elastic Enterprise Search
Score 6.5 out of 10
N/A
Elastic Enterprise Search Swiftype is a platform with modules for Site Search, App Search and Workplace Search, that boasts powering search for thousands of enterprises and websites. The services were developed by Swiftype and acquired by Elastic in late 2017. Powered by Elasticsearch, the vendor states Elastic Enterprise Search is fast, with proven, optimized relevance models designed for real-life, natural search.
$79
per month
Microsoft Sentinel
Score 8.2 out of 10
N/A
Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.
$2.46
per GB ingested
Pricing
Elastic Enterprise SearchMicrosoft Sentinel
Editions & Modules
Standard
$79
per month
Pro
$199
per month
Premium
Custom
Azure Sentinel
$2.46
per GB ingested
100 GB per day
$123.00
per day
200 GB per day
$221.40
per day
300 GB per day
$319.80
per day
400 GB per day
$410.00
per day
500 GB per day
$492.00
per day
More than 500 GB per day
$492.00 + $98.40
per day/plus each additional 100 GB increment
Offerings
Pricing Offerings
Elastic Enterprise SearchMicrosoft Sentinel
Free Trial
YesYes
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details
More Pricing Information
Community Pulse
Elastic Enterprise SearchMicrosoft Sentinel
Top Pros
Top Cons
Features
Elastic Enterprise SearchMicrosoft Sentinel
Security Information and Event Management (SIEM)
Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
Elastic Enterprise Search
-
Ratings
Microsoft Sentinel
7.4
24 Ratings
5% below category average
Centralized event and log data collection00 Ratings8.124 Ratings
Correlation00 Ratings7.224 Ratings
Event and log normalization/management00 Ratings7.224 Ratings
Deployment flexibility00 Ratings7.222 Ratings
Integration with Identity and Access Management Tools00 Ratings7.022 Ratings
Custom dashboards and workspaces00 Ratings7.324 Ratings
Host and network-based intrusion detection00 Ratings6.320 Ratings
Data integration/API management00 Ratings7.022 Ratings
Behavioral analytics and baselining00 Ratings6.920 Ratings
Rules-based and algorithmic detection thresholds00 Ratings7.722 Ratings
Response orchestration and automation00 Ratings7.721 Ratings
Reporting and compliance management00 Ratings9.04 Ratings
Incident indexing/searching00 Ratings7.922 Ratings
Best Alternatives
Elastic Enterprise SearchMicrosoft Sentinel
Small Businesses
Yext
Yext
Score 8.9 out of 10
AlienVault USM
AlienVault USM
Score 7.2 out of 10
Medium-sized Companies
Guru
Guru
Score 9.2 out of 10
InsightIDR
InsightIDR
Score 9.2 out of 10
Enterprises
Guru
Guru
Score 9.2 out of 10
InsightIDR
InsightIDR
Score 9.2 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Elastic Enterprise SearchMicrosoft Sentinel
Likelihood to Recommend
8.1
(2 ratings)
8.2
(43 ratings)
Likelihood to Renew
-
(0 ratings)
8.2
(1 ratings)
Usability
-
(0 ratings)
7.3
(4 ratings)
Support Rating
-
(0 ratings)
8.0
(3 ratings)
Professional Services
-
(0 ratings)
5.0
(1 ratings)
User Testimonials
Elastic Enterprise SearchMicrosoft Sentinel
Likelihood to Recommend
Elastic
Swiftype is excellent for e-commerce companies and especially the financial services sector where speed plays a major role in executing transactions. It is also very dynamic and customizable. It is very useful for electronics/travel reservations on e-commerce sites also. The only place it is inappropriate is when it comes to indexing a website in which case Google is slightly better, as I mentioned before. There is nothing much to complain about here in regards to the breadth of applications and analytics it offers.
Read full review
Microsoft
I'll go with where it's very suited in certain industries, including ours where the data resides or where it's being sent is incredibly important. So because the data stays within Microsoft World Garden, we are able to piggyback off of a lot of those certifications and meet certain requirements that allow us to expand where we sell our product to outside of scopes that we couldn't reach ourselves.
Read full review
Pros
Elastic
  • It's very easy to implement. The documentation is great and you can be up and running very quickly.
  • It's easy to configure. The web-based user interface makes it super simple to configure (i.e. customize search rankings, edit synonyms, etc.).
  • Their support is very friendly and helpful. Whenever I had a question or couldn't figure something old, they were quick to help me out.
Read full review
Microsoft
  • It is a good tool for threat detection and analysis of the threats. We are using this tool for real time threat detection on our employee machines as well as some servers.
  • It provides various options for collecting data sources by leveraging multiple sources using data connectors. This helps us in gathering data from multiple sources such as our servers as well as our employee machines.
  • One good thing about this tool is automated incident response thereby increasing the security of servers.
Read full review
Cons
Elastic
  • Swiftype does not have indexes ready to go. When you add a new website to the search set, it takes some time to index the website. This is something that is different from what Google does. Google in this particular aspect does a relatively better job.
  • Swiftype is very expensive, this makes it difficult for smaller companies to afford.
Read full review
Microsoft
  • It takes some time to learn how to use and install it properly, and it does not connect effectively with external PaaS systems such as Salesforce CRM, Salesforce Commerce Cloud, and so on.
  • Microsoft can simplify the display of the logs to make them easier to study, and the user interface occasionally delays, which can also be enhanced.
Read full review
Usability
Elastic
No answers on this topic
Microsoft
The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.
Read full review
Support Rating
Elastic
No answers on this topic
Microsoft
Azure Sentinel is very easy to use and configure. If you are stuck somewhere, Microsoft support is excellent in assisting and solving your issue.
Read full review
Alternatives Considered
Elastic
Google Search Appliance is no longer supported. Apache Solr is a popular, free open source solution, but it lacks a web crawler and is more difficult to configure and maintain.
Read full review
Microsoft
I use most of the Sims that are out there, but RSAs, old Sim Log, logic, elastic, a lot of them. Sumo, we checked out Sumo too. We're a Microsoft shop and live almost entirely on top of a Microsoft ecosystem. We are considering other Microsoft security products to integrate with it. So it made a lot of sense to really drive as hard as we could Microsoft Sim at least for a few years to make sure it would fit us.
Read full review
Professional Services
Elastic
No answers on this topic
Microsoft
Did not use professional services
Read full review
Return on Investment
Elastic
  • It has a positive impact as it helps traders and other users to seamlessly use applications.
  • It has a positive ROI and we would know the results in time to come.
Read full review
Microsoft
  • Log Management is a little difficult in-house as everything is situated on the cloud.
  • Paying according to the throughput of the data can be costlier for some organizations.
  • Excellent integration and log parsing for Microsoft products save many man-hours for the SIEM admin to focus on other things.
Read full review
ScreenShots

Microsoft Sentinel Screenshots

Screenshot of Screenshot of Screenshot of Microsoft Sentinel Capabilities