Graylog vs. Kibana vs. Looker

For small companies, Graylog is the best solution possible. It's easy to configure and "just works." Above everything else, it's free. The only thing I hold against it is the fact that it's Linux-based. [This] makes sense because Elasticsearch is Linux-based. But Linux adds a layer of complexity that we don't need for something basic as a logging server. I'm pretty sure that we would have had a logging server years earlier if I had to convince quite a few decision-making people to go ahead with it anyway.

Incentivized

Kibana is indeed a powerful tool and has many use cases especially in environments that rely heavily on real-time log analysis and visualisation. Kibana’s ability to handle large volumes of log data and present it in an accessible, searchable format is invaluable. We use Kibana to monitor security related issues and it proactively alerts our Slack channels about any anomality or issues.

Incentivized

When data drives potential for new orders, Looker earns its place in our tech stack. If, on the other hand, we are hoping for pipeline generation, Looker is useful if you are willing to repeatedly go check customer utilizations .... it is not appropriate if you are hoping to automate data analysis for this purpose.

Incentivized

• Graylog does a great job of its core function: log aggregation, retention, and searching.
• Graylog has a very flexible configuration. The backend for storage is Elasticsearch and MongoDB is used to store the configuration. You have to option to make your configuration as simple as possible by storing everything on one box, or you can scale everything out horizontally by using a cluster of Elasticsearch nodes and MongoDB servers with several Graylog servers pointed to all the necessary nodes.
• Graylog does a good job of abstracting away a fair portion of Elasticsearch index management (sharding, creation, deletion, rotation, etc).

Incentivized

• Fast searches with powerful index.
• Beautiful data visualizations.
• Real-time observability.

Incentivized

• Show visited pages - sessions, pageviews - which programs are viewed the most.
• Displays session source/medium views to see where users are coming from.
• It shows the video titles, URLs, and event counts so we can monitor the performance of our videos.
• It gives a graphic face to the numbers, such as using bar charts, pie graphs, and other charts to show user trends or which channels are driving engagement.
• Our clients like to see the top pages visited for a month.
• I like the drop-and-drag approach, and building charts is a little easier than it was before.

Incentivized

• Configuration can be hard to understand
• More quickly and easy ways to search for data
• Auto-categorization of log entries would be excellent

Incentivized

• Some performance issues with large datasets.
• Linking to dashboards makes extremely long urls.
• Lack of reports.

Incentivized

• Documentation is scarce, and very difficult to find when you need it.
• Pricing is unclear, particularly as you look to scale your reports across the business.
• Data from other sources is not represented in the system as well as first party Google services.

Incentivized

I give it this rating because it deems as effective, I am able to complete majority of my tasks using this app. It is very helpful when analyzing the data provided and shown in the app and it's just overall a great app for Operational use, despite the small hiccups it has (live data).

Incentivized

Graylog is easy to deploy. The tricky part is to configure all hosts that are going to send their log data to Graylog, considering the retention period of this data, it will need a lot of disk space to store it. Its rotation works fine. It is very simple to navigate and explore the data you send to it, and very easy to filter and export them too.

Incentivized

Its usability is generally good and it provides teams with a basic to intermediate understanding about data visualization. It is very user-friendly when it comes to creating dashboards. The UI is very good and simple. Its integration with other tools for alerting and reporting is amazing. But its advance features have a learning curve and a first timer needs some time to use the advance features.

Incentivized

Looker is relatively easy to use, even as it is set up. The customers for the front-end only have issues with the initial setup for looker ml creations. Other "looks" are relatively easy to set up, depending on the ETL and the data which is coming into Looker on a regular basis.

Incentivized

No objections

Incentivized

Somehow resources heavy, both on server and client. I recommned at least 50Mbs data rate and high performance desktop comouter to be abke to run comolex tasks and configure larger amount of data. On the other hand, the client does not need to worry when viewing, the performance is usually ok

Incentivized

Community support does not give simple straightforward answers; simply search up Graylog Issues and look at some of the responses on the forums. The documentation is your only hope if you are on the free version, as you can NOT purchase only support. The few times I have worked with Graylog Enterprise support they were great though.

Incentivized

We did not use the official Kibana support. Documentation was easy enough to follow.

Incentivized

Never had to work with support for issues. Any questions we had, they would respond promptly and clearly. The one-time setup was easy, by reading documentation. If the feature is not supported, they will add a feature request. In this case, LDAP support was requested over OKTA. They are looking into it.

Incentivized

Very satisfied, easy to implement

Incentivized

In terms of log aggregation, the free product fully stacks up with the competitors listed. Full control over the data ingests for flexible configuration. Graylog even better on that front than AlienVault USM because you cannot configure the variable mapping. We haven't used the threat exchange stuff or correlation. But with regex searches, we have created function dashboards that show threat theater pictures of our network based on logs from our firewall.

Incentivized

Kibana is free; it was the first and only thing we've tried in this area.

Incentivized

Looker Studio, you can easily report on data from various sources without programming. Looker Studio is available at no charge for creators and report viewers. Enterprise customers who upgrade to Looker Studio Pro will receive support and expanded administrative features, including team content management. So it's good.

Incentivized

Perfect price to performance

Incentivized

• Able to offer monitoring services to new and existing clients to increase revenue
• Staff have increased billing percentage
• Potential to expand security services

Incentivized

• Issues that affect checkout experiences for customers are able to be prioritized and solved quickly.
• We are able to more efficiently use resources due to the automation of reporting alerts. Decreasing employee resources needed.
• Visualization allows us to quickly share issues and explain to coworkers in order to escalate issues that can cost our bottom line.

Incentivized

• Looker has a poignant impact on our business's ROI objectives. As an advertising exchange we have specific goals for daily requests and fill, and having premade Looks to monitor this is an integral piece of our operational capability
• To facilitate an efficient monthly billing cycle in our organization, Looker is essential to track estimated revenue and impression delivery by publisher. Without the Looks we have set up, we would spend considerably more time and effort segmenting revenue by vertical.
• Looker's unique value proposition is making analytical tools more digestible to people without conventional analytical experience. Other competing tools like Tableau require considerably more training and context to successfully use, and the ability to easily plot different visualizations is one of its greatest selling points.

Incentivized