TrustRadius: an HG Insights company

Logstash vs. Trellix Enterprise Security Manager

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Logstash

    Score8.6 out of 10
    N/AN/AN/A

    Trellix Enterprise Security Manager

    Score8.6 out of 10
    N/ATrellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.N/A
    Pricing
    LogstashTrellix Enterprise Security Manager
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    LogstashTrellix Enterprise Security Manager
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Features
    LogstashTrellix Enterprise Security Manager
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Logstash and Trellix Enterprise Security Manager
    Feature
    Logstash
    -
    Ratings
    Trellix Enterprise Security Manager
    8.4
    9 Ratings
    5% above category average
    Centralized event and log data collection00 Ratings8.69 Ratings
    Correlation00 Ratings7.09 Ratings
    Event and log normalization/management00 Ratings8.09 Ratings
    Deployment flexibility00 Ratings8.39 Ratings
    Integration with Identity and Access Management Tools00 Ratings9.37 Ratings
    Custom dashboards and workspaces00 Ratings9.39 Ratings
    Host and network-based intrusion detection00 Ratings8.37 Ratings
    Data integration/API management00 Ratings9.32 Ratings
    Behavioral analytics and baselining00 Ratings8.62 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings8.62 Ratings
    Response orchestration and automation00 Ratings8.02 Ratings
    Reporting and compliance management00 Ratings8.62 Ratings
    Incident indexing/searching00 Ratings7.62 Ratings
    Best Alternatives
    LogstashTrellix Enterprise Security Manager
    Small Businesses
    SolarWinds Papertrail
    Score8.9 out of 10
    No answers on this topic
    Medium-sized Companies
    SolarWinds Kiwi Syslog Server
    Score8.1 out of 10
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Enterprises
    SolarWinds Loggly
    Score7.7 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    LogstashTrellix Enterprise Security Manager
    Likelihood to Recommend
    9.0
    (4 ratings)
    9.0
    (9 ratings)
    Usability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    -
    (0 ratings)
    6.5
    (2 ratings)
    User Testimonials
    LogstashTrellix Enterprise Security Manager
    Likelihood to Recommend
    Elastic
    Perfect for projects where Elasticsearch makes sense: if you decide to employ ES in a project, then you will almost inevitably use LogStash, and you should anyways. Such projects would include: 1. Data Science (reading, recording or measure web-based Analytics, Metrics) 2. Web Scraping (which was one of our earlier projects involving LogStash) 3. Syslog-ng Management: While I did point out that it can be a bit of an electric boo-ga-loo in finding an errant configuration item, it is still worth it to implement Syslog-ng management via LogStash: being able to fine-tune your log messages and then pipe them to other sources, depending on the data being read in, is incredibly powerful, and I would say is exemplar of what modern Computer Science looks like: Less Specialization in mathematics, and more specialization in storing and recording data (i.e. Less Engineering, and more Design).
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    I believe that McAfee Enterprise Security Manager is best-suited for anyone in an office setting with a computer containing sensitive information. McAfee Enterprise Security Manager is constantly working to make sure that your device is free from an threats. Our field workers, however, probably wouldn't have a need for McAfee Enterprise Security Manager. They do not use computers for work and have no sensitive information stored in a work-related cloud.
    Incentivized
    Read full review
    Pros
    Elastic
    • Logstash design is definitely perfect for the use case of ELK. Logstash has "drivers" using which it can inject from virtually any source. This takes the headache from source to implement those "drivers" to store data to ES.
    • Logstash is fast, very fast. As per my observance, you don't need more than 1 or 2 servers for even big size projects.
    • Data in different shape, size, and formats? No worries, Logstash can handle it. It lets you write simple rules to programmatically take decisions real-time on data.
    • You can change your data on the fly! This is the CORE power of Logstash. The concept is similar to Kafka streams, the difference being the source and destination are application and ES respectively.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
    • This is a core McAfee product that is still getting support.
    • It has a substantial amount of compatibility and integration with other products.
    Incentivized
    Read full review
    Cons
    Elastic
    • It is heavy i.e., intensive as of now. Need to reduce overhead to save CPU/RAM consumption
    • Need to be more Kubernetes-friendly. Should support auto-scaling and K8s observability
    • Initial configuration is still complex. A seamless config procedure is still required
    Read full review
    Trellix (Musarubra US LLC)
    • The user interface is not the best, it is still based on Flash player (but they have plans to migrate to HTML5).
    • While the "user" interface is pretty straight forward, the management interface is fairly complicated.
    Incentivized
    Read full review
    Usability
    Elastic
    As I said earlier, for a production-grade OpenStack Telco cloud, Logstash brings high value in flexibility, compliance, and troubleshooting efficiency. However, this brings a higher infra & ops cost on resources, but that is not a problem in big datacenters because there is no resource crunch in terms of servers or CPU/RAM
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Support Rating
    Elastic
    No answers on this topic
    Trellix (Musarubra US LLC)
    McAfee Enterprise Security Manager overall is a great tool. It is effective in today's setting, wherein lots of potential threats are lurking. Its operations within the network are seamless. Users won't even notice that a SIEM is working in the background. But in today's trend, most of the businesses is heading towards the migration to cloud, which McAfee should improve its integration with.
    Incentivized
    Read full review
    Alternatives Considered
    Elastic
    Logstash can be compared to other ETL frameworks or tools, but it is also complementary to several, for example, Kafka. I would not only suggest using Logstash when the rest of the ELK stack is available, but also for a self-hosted event collection pipeline for various searching systems such as Solr or Graylog, or even monitoring solutions built on top of Graphite or OpenTSDB.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter of seconds. The ability to retain logs for a very long time.
    Incentivized
    Read full review
    Return on Investment
    Elastic
    • Positive: LogStash is OpenSource. While this should not be directly construed as Free, it's a great start towards Free. OpenSource means that while it's free to download, there are no regular patch schedules, no support from a company, no engineer you can get on the phone / email to solve a problem. You are your own Engineer. You are your own Phone Call. You are your own ticketing system.
    • Negative: Since Logstash's features are so extensive, you will often find yourself saying "I can just solve this problem better going further down / up the Stack!". This is not a BAD quality, necessarily and it really only depends on what Your Project's Aim is.
    • Positive: LogStash is a dream to configure and run. A few hours of work, and you are on your way to collecting and shipping logs to their required addresses!
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Centralisation of events form NIDS/IPS/IDS, Firewall(s), Web Proxy and Endpoint
    • Ability to have third party management
    • Actively upgraded product with good vendor support
    Incentivized
    Read full review
    ScreenShots