Nagios Log Server vs. Splunk Log Observer

Nagios Log Server facilitates the ability to search all entries of logs in a quick and easy way. Beyond that, it has allowed us to configure alerts for notification when there are potential threats (may they be security threats or only application-side problems), and to filter the data for audits and compliance.

Incentivized

Great for organizations that need to centralize different types of logging across integration, qa, sandbox and production environments. Would be less impactful for organizations that don't have complex logging needs.

• Log auditing.
• Server monitoring.

Incentivized

• Providing in-depth insights
• A related content feature which really helps us to figure out which service is breaking the infrastructure.
• The Log explorer which helps us to explore the entire log and pin point the errors/issues.
• Fast and powerful log investigation

Incentivized

• A bit hard to install and configure.
• High price.

Incentivized

• Integrating the system with Slack channels
• Saving the logs in different cloud provider
• Viewing the logs at more fine grained level based on user roles and permissions

Incentivized

I'm a Splunk specialist, and I'm involved in its use and improvement.

Incentivized

It gives access to data features for every level of users: from managers and executives to Analysts, each one with the correct level of observation and analysis.

Incentivized

Nagios support is decent. Nothing bad to say about them, but nothing extraordinary too. We mostly asked them questions instead of actively asking them to change or fix things for us. The response time is OK, commonly you can get a response in the same day. You can also call, but they are available only during US office hours.

Incentivized

Splunk support is very quick and efficient. Pre-sale specialists are very skilled and available.

Incentivized

Follow a training before starting.

Incentivized

Windows Event Log doesn't have 10% of the capabilities of Nagios Log Server. No real-time alerts, no scheduling, no external plugins or APIs. Nothing. The only advantage is that it is a native Windows application.

Incentivized

I had not considered other products because Splunk Log Observer was in use in my company before I started working there.

Incentivized

• We could react in way less time to a lot of potential outages since we started using it.

Incentivized

• Significantly reduced the MTTR (Mean Time To Recovery), which in turn has improved the end-user experience tremendously.
• Meets compliance requirements of security policies, audit, regulation, and forensics.
• Helps us to track/manage the resource usage on our cloud instances which has a direct implication on the recurring cost.

Incentivized