Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.
$2.46
per GB ingested
Webtrends Analytics
Score 4.4 out of 10
N/A
WebTrends provides an enterprise web analytics platform and, according to Forrester, has a strong focus on support for mobile and social channels and a very open platform. Webtrends competes directly with Adobe Site Catalyst, IBM Coremetrics. and comScore DigitalAnalytix.
Specifically for Microsoft Sentinel, it's going to have what's next to no value if you're not on Azure. You have to be in as your customer. If you want greater insight into what is going on in your cloud environment, turn Microsoft Sentinel on, but focus on where you enable it. You're not going to turn it on to see everything because it's not like focus on the areas where you are at risk or you believe you're at risk or something that you're, depending on your environment, do you have multiple subscriptions? Do you have a Microsoft Sentinel subscription that you just turned on, but it's not getting the visibility, and then you can alert on stuff that goes out of trend, etc.?
Scenarios 1. If you want to use web server log files as input to your web analytics, then Webtrends will provides a good product, with great ease of implementation. Don't even think about being cheap on hardware, and make sure Webtrends runs on real servers, not in a VM environment. 2. If you want to use Data Tagging, similar to Google Analytics or Site Catalyst, Webtrends has a powerful product, just be prepared to pay. 3. If you are new to Web Analytics, but it is the strategic direction, start with Webtrends on Premises. Questions to Ask 1. What are you trying to accomplish? 2. Can you place a dollar value on the benefit that you expect/need from Webtrends? 3.Can you live with Webtrends running SaaS?
Strong integration with the Microsoft security ecosystem allows seamless connection to services such as Microsoft Defender, Microsoft 365, and Azure. This makes it easy to bring together identity, endpoint, and cloud signals to support investigation and detection scenarios.
Effective correlation of alerts and incidents in collaboration with Microsoft Defender XDR helps combine related signals into higher‑fidelity incidents. This reduces noise and improves visibility into attack context, making investigations more efficient.
High scalability for data ingestion and processing enables large volumes of security telemetry to be handled efficiently.
Control privacy, data sharing and competitive industrial knowledge using Webtrends on premises
Great control over custom reports, custom dimensions and metrics
Flexible tool which allows multiple methods of data capture. To my knowledge it was the first tool with a Tag Builder / Tag Management function built in via a supporting website.
I think it's primarily going to be cost, since Microsoft Sentinel uses Microsoft Log Analytics as its base, right? So storing the logs and log retention is very expensive. That might result in users not adopting it as quickly. Second, I think Copilot for security can just do summarization and not many remediation tasks. In the future, we would like to see Copilot create many playbooks, including all box playbooks, to remediate many security issues.
The big downside, the elephant in the room, is that it does not (as of right now) have on-demand segmenting, drilldowns, etc. You have to think of what you want in advance and create those reports then analyze some data. This is huge. You can, of course, re-analyze old data after creating new reports but you still have to wait. (This deficiency may become obsolete with the release of Webtrends Explore later this month (May 2014).)
It has fewer mature integrations with other products and databases than competitors do, although I'm told it works with SharePoint better than anything else does.
Its attribution modeling capability is behind Google Analytics'. In my humble opinion, this could be changed quickly if Webtrends would make some tweaks to its standard visitor history files (i.e. preserve the order in which past visits were sourced beyond the single most recent one, rather than storing all those past sources as a randomized list).
It doesn't incorporate statistical tests, confidence intervals, or statistical associations. However, this same criticism can be applied to its competitors (other than A/B Testing products). It's a tabulation program, as they all are. In this respect, web analytics tools as a group are relatively primitive. Sorry to bring this up as a criticism of Webtrends but it's my pet peeve about the whole industry and I just have to say it. (p.s. take advantage of the heavy-duty Webtrends Scheduled Export functionality to get really granular data that you can feed to a stats program to get significances.)
Although the documentation, help screens, phone support and the knowledge base have improved tremendously in recent years, there is still a pretty steep learning curve because it is different from the tools that entry-level users may have already been exposed to. This can be a shock and many users are alienated at first because they just don't get some of the fundamentals at first. I'd like to see much better help screens that are thoroughly interlinked with the KB and documentation. Having superb online support would make a world of difference with the adoption of this basically powerful tool.
I would be willing to try Webtrends again AFTER some research from other users. I would need to see that users mention better and faster customer support on questions and issues that arise while using the software. The software is capable of vast and incredible things, but if it isnt properly set up and supported during use, it is just a big hassel and waste of everyones time and money.
The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.
If I could give it a 0, I would. Not having an intuitive user interface made it impossible to convince non-analytic business users to use the tool on their own. Even as a seasoned analyst, frequent calls were needed to get what should be simple tasks done. Account managers don't understand the tool either, and have to refer you to technical support
The v9 admin interface and v10 reporting interface work as well as expected, but have a tendency to be pokey, especially for bulky reports and whenever you're connected to wifi. I much prefer using the REST API for all reporting for this reason, which simply dumps out the data and doesn't bother with the user interface.
I once went on to Twitter to ask for help from my network of analytics people, and Webtrends themselves responded. They have been an excellent partner in making sure that their product is being used to the best of it's ability and I greatly appreciate that. Both Omniture and Google Analytics, do not have that level of support over social media
The in-person training was comprehensive enough to get you started, but I strongly recommend having a more experienced person when beginning with the tool.
Webtrends provides several free webinars over the course of the year, many of which I would expect to pay for. The people providing the webinars seem to have a good feel for real-world application of the product.
Careful planning and patience. Use a non-public test site to fine tune tags and reporting. Despite best laid plans, there will be surprises when you collect the data, run the analysis and begin generating reports using the tool. Perform a tag audit to ensure tags fire as desired.
Microsoft Sentinel excels in cloud-native scalability, Microsoft ecosystem integration, and AI-driven threat detection with UEBA and Fusion rules, offering faster deployment and lower costs (48% cheaper per Forrester) than Splunk, QRadar, Exabeam, SentinelOne, Securonix, and Wazuh. It lags in third-party integrations and syslog parsing. Organizations choose Microsoft Sentinel for its cost-effectiveness, automation, and Microsoft synergy, especially in Azure-heavy environments, though Splunk and Exabeam lead in flexibility and UEBA, respectively.
Webtrends has its work cut out for itself considering you have the behemoth Google Analytics and Google Analytics Premium having a strong offering and brand recognition for the price of free. After reviewing the paid service I'd suggest you start off with GA as a cheaper alternative that is just as robust, if not much more flexible in regards to the reporting and goal tracking needs for our company.
As any cybersecurity product, this has to be more with risk to avoid loss in case of a ransomware that more than relate to a productivity increase. Maybe the impact could be that instead of having people that are checking 24/7 the dashboard, you could implement Sentinel and have less people checking that or people with less expertise. So the saving will be a minor but will be a saving in the cost of your team.
Webtrends has had a positive impact on site visitation because it allowed us to understand the sources by domain for site traffic and find out ways to increase visits from those domains.
Webtrends has also allowed us to understand areas of optimization on the site, which has had a positive impact on the overall user journey on the site, likely leading to longer site duration and engagement.
