Logz.io vs. Trellix Helix

Logz.io is an effective solution if your alerting needs are fairly straightforward and you don't need long-term retention of logs with easy access. If being able to maintain easy access to logs longer than this is necessary, another solution might be better. If you need a high degree of precision with alerting triggers and the ability to suppress alerts, you will need to combine Logz.io with an integration to get this or you might consider a different solution.

Incentivized

The UI displays wells the deviations and anomalies using advanced threat intelligence so you have full control of your security ecosystem. We've used it for two years to secure our servers and we easily customize threat detections to reduce the stressful false positives. We fill the XDR AI with data and it correlates with incident data to deliver unmatched frontline security intelligence.

Incentivized

• Well documented and easy to set up.
• Their alerting mechanism is really great especially when it comes to application monitoring.
• Our data analysis in Kibana is made easy with the solution for Logz.io.
• The issue checking and fixing is escalated quickly and is reported in time.

Incentivized

• Detection of advanced threats.
• Easy integration with cloud resources and our existing security tools thus enhancing performance.
• Easy deployment with great threats intelligence capabilities.

• Its price can be very high, so you should have good control of it to avoid exaggerated figures.
• Some functions can be confusing.
• It has limits to create subaccounts, which is a big problem for large companies.

Incentivized

• Overly complex platform
• Multiple logins needed for various tools--leads to confusion
• Costs can add up

Incentivized

I initially struggled trying to ensure the correct data was returned in the Kibana search, but I found it overall easy to use. Some of the UI is not as seamless as I'd expect, like changing the environment completely resets your search criteria and filters, which is annoying since it's a common use case to search something in multiple environments

Incentivized

Their support team is the best in the world! They supported us in most of the critical times and helped to resolve the issue in real time. Also their email support is well maintained and never a mail is missed unanswered. Kudos to the support team of logz.io for maintaining professionalism.

Incentivized

We've been fairly happy with FireEye Helix support overall. Most issues are resolved the same day the case is opened.

Incentivized

Logz.io is more affordable, less work to maintain, and has more features. It was an easy choice. After my last team had to manage their own ELK stack, this was a no brainer. It helps us be focused on our core competencies.

Incentivized

I find Helix to be super-efficient and able to cut through the noise. Previous installations of LogRhythm and Splunk resulting in an overwhelming amount of noise (out of the gate), and we had to constantly tune out false positives. Helix is different. Out of the gate, Helix provided higher fidelity hits, and our teams don't spend half their day turning out the noise.

Incentivized

• Be capable to efficiently identify problems
• Efficiently investigate issues and find the root cause
• Be able to improve the logging of services and products

Incentivized

• Optimization of your security investments.
• Operations are seamless and better with easy integrations that enhance performance.
• Efficiency in running of incidences with enhanced case management for all its alerts.