Huntress vs. ManageEngine EventLog Analyzer vs. SolarWinds Kiwi Syslog Server

A great product that highlights any and all persistent footholds on the network and does a great job on breach monitoring. The support staff are great, efficient, and are able to reach out when there is an issue. Most problems are cleared out/mitigated before we even know about them. A great product to add to your security stack.

scenarios such as tracking the issue to troubleshooting the issue the ManageEngine EventLog Analyzer provides a rood map vision to look into the problem in bird eye view. its easy to view the problems

The SolarWinds Kiwi Syslog Server does what it's supposed to do. It's a bare-bones Syslog Server. If your company is just trying to fulfill security requirements or doesn't need all the advanced features of a product such as Splunk, then Kiwi will work well and not break the bank. Using the tool is very straightforward as there aren't a lot of options outside of just viewing logs.

Incentivized

• Using the latest industry knowledge of threats that have been ongoing, but not previously known and projecting it back in time against their installed endpoints to identify machines that are vulnerable or breached and when it these events occurred
• Very quiet. If they alert, it is a thing.
• Very good at remediation.
• They communicate extremely well when it matters.
• While there are the most extensive products more often than not they are the first to alert us to a threat.

Incentivized

• Detailed report & Great GUI
• ManageEngine EcoSystem
• RCA

• Collection of SNMP traps a reliable and stable collection server for these is crucial to troubleshooting and time to ROS. Kiwi excels at this.
• Easy to install set up and train users on.
• The free version is a good free tool and handy to use for personal labs and other smalle use cases.
• SNMP traps to user readable format is great, sometimes syslog and smnp messages can be hard to interpret and read with out a knowledge of how to do this.

Incentivized

• Now that they have EDR capability, they need to fully participate in MITRE testing for direct comparison against other EDR products.
• Now that they are going into Managed Antivirus and EDR with isolation capabilities they need to update their SLA comparative to other vendors
• Support for non-Windows OSes for consistency in a network
• It would be nice to seed canary files in custom shares on servers.

Incentivized

• Nothing, we haven't faced any problem with EventLog

• Minimalistic; If you're looking for something with analysis features look elsewhere.
• Operating System support is Windows only.
• Some management features cannot be configured via web interface.

Incentivized

We dropped SentinelOne in favor of Huntress because the UI was much more simplistic for the tier 1 techs to maintain. It beats the old web design model of three clicks to where you want to go. It is very intuitive. No one needs training to figure out how to navigate its console.

Incentivized

Kiwi Syslog has the best usability of any syslog server. While not being able to offer the most features, the ones it does have are intuitive and easy to work with. Everything that it has is where you think it should be. If you can't find it in the menus, it doesn't exist.

Incentivized

Because the solution is so simple to use and implement, support wasn't very necessary. The one time I did call them to better understand where logs were stored, they were very helpful and friendly. Kiwi has been around for some time and not a lot has changed over the years, so support for it is pretty straightforward and quick.

Incentivized

Huntress may not be a complete SOC such as Blackpoint, but the level of protection is close. Huntress provides a set of human eyes always hunting for persistent threats on your endpoints. Huntress also seems less noisy with no false positives, so no time is wasted reviewing alerts.

Incentivized

Syslog-ng don't have customer support or technical support .But its a free software and no clarity on limitations ingestion bandwidth. No gui feature and everything should be done from backend. Gui can easily help to start and stop service ,easy to configure. Unlimited technical and customer support . Even when server got shutdown will get on-call or immediate support that will helps a lot to resolve errors

• We have been able to lower operational costs by shifting to Huntress.
• We've been able to cut costs to our clients by utilizing Huntress over competing products.
• In spite of inflation, we've been able to keep our managed service prices at a steady, below market rate, because of Huntress.

Incentivized

• Positive note is improved our support team productivity
• Improved our support Team RCA Report

• SolarWinds Kiwi Syslog Server has made it easier for me to monitor events on all of my network devices and servers.
• As a small business, we needed something powerful but inexpensive and SolarWinds Kiwi Syslog Server is exactly that.

Incentivized