Graylog vs. SnapLogic

For small companies, Graylog is the best solution possible. It's easy to configure and "just works." Above everything else, it's free. The only thing I hold against it is the fact that it's Linux-based. [This] makes sense because Elasticsearch is Linux-based. But Linux adds a layer of complexity that we don't need for something basic as a logging server. I'm pretty sure that we would have had a logging server years earlier if I had to convince quite a few decision-making people to go ahead with it anyway.

Incentivized

Snaplogic is unique from other IPASS tools if you're very sensitive about data security as they have an on-premise option where your data never needs to leave your data center. And data pipelines can be quickly created if Snaplogic has the requisite connector to your data sources. On the downside, if you're transforming a large amount of data for example in training machine learning models, a tool with elastic compute capability is more appropriate.

• Graylog does a great job of its core function: log aggregation, retention, and searching.
• Graylog has a very flexible configuration. The backend for storage is Elasticsearch and MongoDB is used to store the configuration. You have to option to make your configuration as simple as possible by storing everything on one box, or you can scale everything out horizontally by using a cluster of Elasticsearch nodes and MongoDB servers with several Graylog servers pointed to all the necessary nodes.
• Graylog does a good job of abstracting away a fair portion of Elasticsearch index management (sharding, creation, deletion, rotation, etc).

Incentivized

• Easy access to any type of source system. Data could be in any format.
• Very beautiful visual representation of transforms that makes it super easy to use it by any non developer.
• It can be run in cloud or on-premise. helping you choose your comfort of security.
• Has pretty good customer support and have recently started their community forum as well.

Incentivized

• Configuration can be hard to understand
• More quickly and easy ways to search for data
• Auto-categorization of log entries would be excellent

Incentivized

• They need to have a way to connect to GitHub to allow the users to maintain their version control in GitHub. This is a missing functionality.
• As pipelines become complex, it's difficult to have all the snaps stitched together - just like to see it done differently.
• They do not have a way to start/stop a preview. This is hard to use, especially if you have to stop an accidental preview invocation.

Incentivized

This has been hands down the BEST software company I have ever used and dealt with. I am a 25 year IT veteran at this college. They go above and beyond in soliciting our feedback/input and proactively follow up about bugs, issues, etc. I have given multiple potential clients my thoughts and after seeing the SL demo they all sign up. I appreciate their support model, it's REFRESHING!

Incentivized

Graylog is easy to deploy. The tricky part is to configure all hosts that are going to send their log data to Graylog, considering the retention period of this data, it will need a lot of disk space to store it. Its rotation works fine. It is very simple to navigate and explore the data you send to it, and very easy to filter and export them too.

Incentivized

It is very powerful but has a steep learning curve

Incentivized

Community support does not give simple straightforward answers; simply search up Graylog Issues and look at some of the responses on the forums. The documentation is your only hope if you are on the free version, as you can NOT purchase only support. The few times I have worked with Graylog Enterprise support they were great though.

Incentivized

They can be prompt but they have not been as useful as I've wanted. We had a bug that affected many of our customers through an API connection between SnapLogic and our platform. Eventually they were able to figure it out, but it took a long time of negotiating between our engineering team and theirs. Additionally, we installed the SnapLogic groundplex for our customers and we've run into a bunch of problems of connectivity. If SnapLogic offered to be on those calls with our clients to troubleshoot how to fix these problems, I would give them a better grade here.

Incentivized

The groundplex in our VPC is very nice for security reasons and the SnapLogic team was extremely helpful during our implementation

Incentivized

In terms of log aggregation, the free product fully stacks up with the competitors listed. Full control over the data ingests for flexible configuration. Graylog even better on that front than AlienVault USM because you cannot configure the variable mapping. We haven't used the threat exchange stuff or correlation. But with regex searches, we have created function dashboards that show threat theater pictures of our network based on logs from our firewall.

Incentivized

We opted for SnapLogic due its ease of use and the flexibility it offers, it was the platform that was strongest in both application integration and data integration and both were use cases we wanted to be able to cover.

• Able to offer monitoring services to new and existing clients to increase revenue
• Staff have increased billing percentage
• Potential to expand security services

Incentivized

• We have cut development time down by at least 70%
• The software was more on the expensive side at renewal which required some further approvals to be sought for the spend
• More developers are able to build and use Snaplogic pipelines in their projects

Incentivized