Graylog vs. ManageEngine ADAudit Plus

For small companies, Graylog is the best solution possible. It's easy to configure and "just works." Above everything else, it's free. The only thing I hold against it is the fact that it's Linux-based. [This] makes sense because Elasticsearch is Linux-based. But Linux adds a layer of complexity that we don't need for something basic as a logging server. I'm pretty sure that we would have had a logging server years earlier if I had to convince quite a few decision-making people to go ahead with it anyway.

Incentivized

ManageEngine is mostly a "check the box" solution for SIEM systems. We needed something that satisfied our customer and was cost-effective. I would highly rate the system on "worth what paid for". Support is eager to please and prompt. My only issue is that it's mostly based outside the US with helpful, but non-native speakers so it's hard to understand them. I wish they would spring for better help "phone lines" so I'm not dealing with difficult to understand and unclear speakers.

Incentivized

• Graylog does a great job of its core function: log aggregation, retention, and searching.
• Graylog has a very flexible configuration. The backend for storage is Elasticsearch and MongoDB is used to store the configuration. You have to option to make your configuration as simple as possible by storing everything on one box, or you can scale everything out horizontally by using a cluster of Elasticsearch nodes and MongoDB servers with several Graylog servers pointed to all the necessary nodes.
• Graylog does a good job of abstracting away a fair portion of Elasticsearch index management (sharding, creation, deletion, rotation, etc).

Incentivized

• ManageEngine ADAudit Plus changes for user and group management can be looked up in builtin reports
• You can build your own reports based on almost every logic you can think of
• You have the ability to create alerts based on logic and filters and sendout custom alerts to email, SMS or other means.
• First you need to understand the basics of the software, after that the software itself is very helpfull in configuring specific items.
• I really love the support that ManageEngine is giving the customer, for all questions I use the chat on their website. This is for me the best remote support I ever saw, and I saw a lot in my 20 years of experience in IT.

Incentivized

• Support for more log sources
• Event alerts/emails - Some cases where unable to separate data from multiple clients, and no easy fix
• API - Limits results to 10,000 and can cause server to lockup on queries that exceed the limit

Incentivized

• In earlier releases there were quite a few bugs and performance issues. These have since been resolved.
• When integrated with the Log360 Suite, it can be confusing on whether EventLog Analyzer or ADAudit Plus are "managing"/"Ingesting" the data from a given endpoint.

Incentivized

It works great for everything we need and use. Any issues in the software are pretty easy to resolve with tech support. And they are very responsive to resolving issues. Even ones where a fix/patch are required. At present, the software does everything we need it to for compliance, audit, and account review.

Incentivized

ADAudit with its cloud and on prem install option allows any organization to get in on AD report management. Whether you need to report internally only for for external audit controls its a great tool with flexibility to handle most any user or group report capability. Since this also includes m365 integration it enables IT pros to administer usage, license, cost control and permission access to most anything in Microsoft's portfolio. Its a great tool all around for AD integrated access needs.

Incentivized

uptime good

Incentivized

Integration/overlap between products could be improved

Incentivized

Community support does not give simple straightforward answers; simply search up Graylog Issues and look at some of the responses on the forums. The documentation is your only hope if you are on the free version, as you can NOT purchase only support. The few times I have worked with Graylog Enterprise support they were great though.

Incentivized

The attention to cases or situations with the tool has been exceptional. being able to count on the manufacturer either by mail, call or chat. generate cases directly from the application allows you to have personalized support in order to solve problems that has been able to appear.

Incentivized

knowledgable and prompt response

Incentivized

The remote setup team helped when i needed it and setup weas very straight forward and easy. The advanced setup for an external db and customizations for our latest version AD environment went pretty easy once they found documentation on customization.

Incentivized

In terms of log aggregation, the free product fully stacks up with the competitors listed. Full control over the data ingests for flexible configuration. Graylog even better on that front than AlienVault USM because you cannot configure the variable mapping. We haven't used the threat exchange stuff or correlation. But with regex searches, we have created function dashboards that show threat theater pictures of our network based on logs from our firewall.

Incentivized

In terms of features, ADAudit Plus offers a comprehensive set of features for monitoring and auditing Active Directory, including real-time alerts, detailed reports, and user behavior analytics. The platform also offers support for multiple platforms, including Windows, UNIX, and Linux, as well as integration with other ManageEngine tools.

Incentivized

updates are effective and system is reliable

Incentivized

• Graylog is just less expensive than some other options which meant it fit into our budget otherwise we might not be able to justify a higher cost.
• Being able to track issues that we normally couldn't track using other tools is a bonus to help us know of any issues we have and can fix before an outage or failure that could potentially cost money.
• We have had to spend more time than I would like to understand and customize Graylog which has taken time away from other tasks and projects.

Incentivized

• Positive impact- instead of paying an external source to do reports manually, ManageEngine has provided this in just a few clicks of a button
• Positive Impact- Less disruption to staff in gathering data for important occurrences
• Positive impact- full visibility into real time information , alerts etc.