TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Elasticsearch

    Score8.5 out of 10
    N/AElasticsearch is an enterprise search tool from Elastic in Mountain View, California.

    $16

    per month

    Trellix Helix

    Score7.1 out of 10
    Enterprise companies (1,001+ employees)
    Trellix Helix (formerly FireEye Helix) is a SIEM solution providing a non-malware threat detection solution.

    $0

    Events per second

    Pricing
    ElasticsearchTrellix Helix
    Editions & Modules
    Standard
    $16.00
    per month
    Gold
    $19.00
    per month
    Platinum
    $22.00
    per month
    Enterprise
    Contact Sales
    Helix Console
    $0
    Events per second
    Helix Enterprise
    $0
    Events per second
    Offerings
    Pricing Offerings
    ElasticsearchTrellix Helix
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup feeOptional
    Additional Details——
    More Pricing Information
    Community Pulse
    ElasticsearchTrellix Helix
    Considered Both Products
    Elastic
    No answer on this topic
    Trellix (Musarubra US LLC)
    No answer on this topic
    Key User Insights
    Would buy again
    82%
    Would buy again
    14 Answers
    No answers on this topic
    Delivers good value for the price
    100%
    Delivers good value for the price
    16 Answers
    No answers on this topic
    Happy with the feature set
    100%
    Happy with the feature set
    17 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    13 Answers
    No answers on this topic
    Implementation went as expected
    87%
    Implementation went as expected
    13 Answers
    No answers on this topic
    Features
    ElasticsearchTrellix Helix
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Elasticsearch and Trellix Helix
    Feature
    Elasticsearch
    -
    Ratings
    Trellix Helix
    9.6
    3 Ratings
    19% above category average
    Centralized event and log data collection00 Ratings9.93 Ratings
    Correlation00 Ratings9.93 Ratings
    Event and log normalization/management00 Ratings9.03 Ratings
    Deployment flexibility00 Ratings9.73 Ratings
    Integration with Identity and Access Management Tools00 Ratings9.63 Ratings
    Custom dashboards and workspaces00 Ratings9.03 Ratings
    Host and network-based intrusion detection00 Ratings10.03 Ratings
    Best Alternatives
    ElasticsearchTrellix Helix
    Small Businesses
    Apache Solr
    Score7.9 out of 10
    No answers on this topic
    Medium-sized Companies
    IBM Watson Discovery
    Score9 out of 10
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Enterprises
    Amazon CloudSearch
    Score8.5 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    ElasticsearchTrellix Helix
    Likelihood to Recommend
    9.0
    (48 ratings)
    9.8
    (3 ratings)
    Likelihood to Renew
    10.0
    (1 ratings)
    -
    (0 ratings)
    Usability
    10.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    7.8
    (9 ratings)
    9.0
    (1 ratings)
    Implementation Rating
    9.0
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    -
    (0 ratings)
    9.8
    (3 ratings)
    User Testimonials
    ElasticsearchTrellix Helix
    Likelihood to Recommend
    Elastic
    Elasticsearch is a really scalable solution that can fit a lot of needs, but the bigger and/or those needs become, the more understanding & infrastructure you will need for your instance to be running correctly. Elasticsearch is not problem-free - you can get yourself in a lot of trouble if you are not following good practices and/or if are not managing the cluster correctly. Licensing is a big decision point here as Elasticsearch is a middleware component - be sure to read the licensing agreement of the version you want to try before you commit to it. Same goes for long-term support - be sure to keep yourself in the know for this aspect you may end up stuck with an unpatched version for years.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    Great for organizations that are considering improving their operational security by utilizing their threats intelligence capabilities. It offers a great collection and analysis of security events and provides solutions to solve them. When considering a solution that is secure and can provide very extensive visualization of your environment for threats.
    Read full review
    Pros
    Elastic
    • As I mentioned before, Elasticsearch's flexible data model is unparalleled. You can nest fields as deeply as you want, have as many fields as you want, but whatever you want in those fields (as long as it stays the same type), and all of it will be searchable and you don't need to even declare a schema beforehand!
    • Elastic, the company behind Elasticsearch, is super strong financially and they have a great team of devs and product managers working on Elasticsearch. When I first started using ES 3 years ago, I was 90% impressed and knew it would be a good fit. 3 years later, I am 200% impressed and blown away by how far it has come and gotten even better. If there are features that are missing or you don't think it's fast enough right now, I bet it'll be suitable next year because the team behind it is so dang fast!
    • Elasticsearch is really, really stable. It takes a lot to bring down a cluster. It's self-balancing algorithms, leader-election system, self-healing properties are state of the art. We've never seen network failures or hard-drive corruption or CPU bugs bring down an ES cluster.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Single location for all security event management
    • Detect advanced threats
    • Provide audit artifacts to ensure compliance
    Incentivized
    Read full review
    Cons
    Elastic
    • Joining data requires duplicate de-normalized documents that make parent child relationships. It is hard and requires a lot of synchronizations
    • Tracking errors in the data in the logs can be hard, and sometimes recurring errors blow up the error logs
    • Schema changes require complete reindexing of an index
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Additional integration points (API cloud integrations).
    Incentivized
    Read full review
    Likelihood to Renew
    Elastic
    We're pretty heavily invested in ElasticSearch at this point, and there aren't any obvious negatives that would make us reconsider this decision.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Usability
    Elastic
    To get started with Elasticsearch, you don't have to get very involved in configuring what really is an incredibly complex system under the hood. You simply install the package, run the service, and you're immediately able to begin using it. You don't need to learn any sort of query language to add data to Elasticsearch or perform some basic searching. If you're used to any sort of RESTful API, getting started with Elasticsearch is a breeze. If you've never interacted with a RESTful API directly, the journey may be a little more bumpy. Overall, though, it's incredibly simple to use for what it's doing under the covers.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Support Rating
    Elastic
    We've only used it as an opensource tooling. We did not purchase any additional support to roll out the elasticsearch software. When rolling out the application on our platform we've used the documentation which was available online. During our test phases we did not experience any bugs or issues so we did not rely on support at all.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    We've been fairly happy with FireEye Helix support overall. Most issues are resolved the same day the case is opened.
    Incentivized
    Read full review
    Implementation Rating
    Elastic
    Do not mix data and master roles. Dedicate at least 3 nodes just for Master
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Alternatives Considered
    Elastic
    As far as we are concerned, Elasticsearch is the gold standard and we have barely evaluated any alternatives. You could consider it an alternative to a relational or NoSQL database, so in cases where those suffice, you don't need Elasticsearch. But if you want powerful text-based search capabilities across large data sets, Elasticsearch is the way to go.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    It offers extensive visibility thus easy detection of threats and easy mitigation practices. Utilization of its threats intelligence capabilities thus early detection of incidents and maximization of security investments. Offers great integration of cloud resources with existing security tools thus ensuring seamless performance and all-time security for the organizational resources.
    Read full review
    Return on Investment
    Elastic
    • We have had great luck with implementing Elasticsearch for our search and analytics use cases.
    • While the operational burden is not minimal, operating a cluster of servers, using a custom query language, writing Elasticsearch-specific bulk insert code, the performance and the relative operational ease of Elasticsearch are unparalleled.
    • We've easily saved hundreds of thousands of dollars implementing Elasticsearch vs. RDBMS vs. other no-SQL solutions for our specific set of problems.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Optimization of your security investments.
    • Operations are seamless and better with easy integrations that enhance performance.
    • Efficiency in running of incidences with enhanced case management for all its alerts.
    Read full review
    ScreenShots

    Trellix Helix Screenshots

    Screenshot of Helix Cloud IntegrationsScreenshot of Helix Asset Alert Correlation