Kibana vs. Microsoft Sentinel

Kibana integrates seamlessly with Elastic Search which gives us access to parse and analyze data generated from our systems in order to make decisions. Also, Kibana helps us create insightful reports and dashboards that give us insights into the end-users usage on the system and helps us find the root cause of issues as well.

Incentivized

Azure Sentinel is an excellent option like SIEM. It has cool, smart features and functionality, and is quite powerful in terms of processing information in the cloud. I recommend it to colleagues because it is very easy to deploy and configure, and learn to use it on a daily basis. The panel is super intuitive and rich in details. When opening Sentinel, it is already possible to analyze the indices that happened and those that deserve further attention and treatment.

Incentivized

• Fast searches with powerful index.
• Beautiful data visualizations.
• Real-time observability.

Incentivized

• Automated detection and response
• Detailed user/device information
• Part of the MS cloudsphere, so has a familiar feel.

Incentivized

• Some performance issues with large datasets.
• Linking to dashboards makes extremely long urls.
• Lack of reports.

Incentivized

• There's not much that needs improvement, but the on-prem log sources still require a lot of development.

Incentivized

The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.

Incentivized

We did not use the official Kibana support. Documentation was easy enough to follow.

Incentivized

I haven't yet had to use support for Sentinel.

Incentivized

Kibana has a better usability experience, the core features I was using existed in all of them. I liked more in Kibana how you can easily create dashboards, charts, and reports without the need to be a tech person.

Incentivized

Did not use professional services

Incentivized

• Improved understanding of production environment.
• Reduced downtime.
• More empowered developers who understand their systems in production.

Incentivized

• Cost saving as you don't need to use multiple platforms to monitor your security events.

Incentivized