Graylog vs. Kibana vs. QlikView

For small companies, Graylog is the best solution possible. It's easy to configure and "just works." Above everything else, it's free. The only thing I hold against it is the fact that it's Linux-based. [This] makes sense because Elasticsearch is Linux-based. But Linux adds a layer of complexity that we don't need for something basic as a logging server. I'm pretty sure that we would have had a logging server years earlier if I had to convince quite a few decision-making people to go ahead with it anyway.

Incentivized

Kibana is indeed a powerful tool and has many use cases especially in environments that rely heavily on real-time log analysis and visualisation. Kibana’s ability to handle large volumes of log data and present it in an accessible, searchable format is invaluable. We use Kibana to monitor security related issues and it proactively alerts our Slack channels about any anomality or issues.

Incentivized

Sales data validations have helped manage our justifications in the past, especially with regard to new product development and new business introduction. It has also been helpful in identifying trends with business impact and direction specific to quarter and monthly sales from ERP data as well as decisions to purchase equipment of staffing based on run rates and product demand.

One thing that can get out of hand is data output - if you aren't careful in your query, you may be overloaded with data dumps and drown in the amount of info you have to filter through. This is a user caution, not a comment on the software itself.

Incentivized

• Graylog does a great job of its core function: log aggregation, retention, and searching.
• Graylog has a very flexible configuration. The backend for storage is Elasticsearch and MongoDB is used to store the configuration. You have to option to make your configuration as simple as possible by storing everything on one box, or you can scale everything out horizontally by using a cluster of Elasticsearch nodes and MongoDB servers with several Graylog servers pointed to all the necessary nodes.
• Graylog does a good job of abstracting away a fair portion of Elasticsearch index management (sharding, creation, deletion, rotation, etc).

Incentivized

• Fast searches with powerful index.
• Beautiful data visualizations.
• Real-time observability.

Incentivized

• QlikView has a simple, relational data model that's REALLY fast. Filtering and changing data is dead simple results are almost immediately available.
• The free version of Qlikview is almost completely featured, so you roll a pro-level product out to an entire department for really cheap.
• QlikView is really flexible--if you can imagine it, you can build it.

Incentivized

• Configuration can be hard to understand
• More quickly and easy ways to search for data
• Auto-categorization of log entries would be excellent

Incentivized

• Some performance issues with large datasets.
• Linking to dashboards makes extremely long urls.
• Lack of reports.

Incentivized

• We found that QlikView can be a bit slow in supporting some forms of encryption. It is web-based and we needed to upgrade all of our server to not support the older SSL and TLS 1 protocols, only support TLS 1.2 and TLS 1.3. However, QlikView could not run with TLS 1.2 and TLS 1.3. We had to wait over six months to get a version that would handle the newer TLS versions.
• There are so many options with QlikView that you can get lost when developing a visualization. There are still items I have not yet figured out, such as labeling a graph with the name of a selected detail item.
• QlikView works by pulling the data it is going to use for visualization into its database. I am a security reviewer and I need to make certain that PII and PHI is not pulled by QlikView for a visualization, otherwise this could become a reportable indecent.

Incentivized

Ease of use, ability to load from pretty much any data source. today I created an application that loaded time sheets from excel that are not in a table format. With Qlik's "enable transformation steps" I was able to automate loads of multiple spreadsheets and multiple tabs easily. Could not do that with any other tool.

Incentivized

Graylog is easy to deploy. The tricky part is to configure all hosts that are going to send their log data to Graylog, considering the retention period of this data, it will need a lot of disk space to store it. Its rotation works fine. It is very simple to navigate and explore the data you send to it, and very easy to filter and export them too.

Incentivized

Its usability is generally good and it provides teams with a basic to intermediate understanding about data visualization. It is very user-friendly when it comes to creating dashboards. The UI is very good and simple. Its integration with other tools for alerting and reporting is amazing. But its advance features have a learning curve and a first timer needs some time to use the advance features.

Incentivized

QlikView is very easy to implement. The installation is very straight forward. QlikView has several different data connectors that can connect to different data sources very smoothly. The user interface to build the reports is very easy to understand. This helps to have a smaller learning curve. Something very helpful is that QlikView is a browser application for the end users. So, you don't need to install any applications on the user's computer.

Incentivized

We have not had any downtime issues with the product nor uncovered any significant bugs

It is not a SAAS product.

Community support does not give simple straightforward answers; simply search up Graylog Issues and look at some of the responses on the forums. The documentation is your only hope if you are on the free version, as you can NOT purchase only support. The few times I have worked with Graylog Enterprise support they were great though.

Incentivized

We did not use the official Kibana support. Documentation was easy enough to follow.

Incentivized

My experience with the Qlik support team has been somewhat limited, but every interaction I have had with them has been very professional and I received a response quickly. Typically if there is a technical issue, our IT team will follow up. My inquiries are specific to product functionality, and Qlik has been very helpful in clarifying any questions I might have.

Incentivized

My team attended, but I cannot myself rate, but I think it was good as they've successfully launched a training program at our company themselves for users. It was 3-4 day training.

Training was as expected. The demo environments tend to be more fully featured that our own environment, but the training was clear and well delivered.

"Implementation" can mean a few things... so I'm not sure that this is the answer you want.... but here it goes: To me, implementation means: "Is the user interface intuitive and can I produce meaningful reports with ease?" On that score, I'd say YES. The amount of training required was minimal and the results were powerful. The desktop implementation is a simple, "blank" interface just waiting for your creativity. The pre-populated templates give you a reasonable start to any project -- and a good set of objects to "play around with" if you're just getting started. Finally, note that the "implementation" I used was baked into QuickBooks 2016 Enterprise -- called "Advanced Reporting"..... That integration makes it ultra useful and simple.

Incentivized

In terms of log aggregation, the free product fully stacks up with the competitors listed. Full control over the data ingests for flexible configuration. Graylog even better on that front than AlienVault USM because you cannot configure the variable mapping. We haven't used the threat exchange stuff or correlation. But with regex searches, we have created function dashboards that show threat theater pictures of our network based on logs from our firewall.

Incentivized

Kibana is free; it was the first and only thing we've tried in this area.

Incentivized

The only other vendor product that I have worked with that provides a similar experience to Qlikview is Tableau. I would recommend Tableau if your use case is to build a fixed dashboard. You can share reports for free without needing to buy additional licenses. I would recommend Qlikview if your users are looking for a more interactive experience. They can create new objects to represent the data which can't be accomplished as easily in Tableau

Incentivized

• Able to offer monitoring services to new and existing clients to increase revenue
• Staff have increased billing percentage
• Potential to expand security services

Incentivized

• Issues that affect checkout experiences for customers are able to be prioritized and solved quickly.
• We are able to more efficiently use resources due to the automation of reporting alerts. Decreasing employee resources needed.
• Visualization allows us to quickly share issues and explain to coworkers in order to escalate issues that can cost our bottom line.

Incentivized

• You can use the free desktop version to do a lot of reporting and analysis work more quickly so the ROI is huge
• QlikView is great at finding outliers such as data entry errors
• QlikView is great at helping you quickly discover new insights about your business that can prompt you to take action that can immediately affect your cash flow.

Incentivized