Netwrix Auditor is designed to enable auditing of the broadest variety of IT systems, including Active Directory, Exchange, file servers, SharePoint, SQL Server, VMware and Windows Server. It also supports monitoring of privileged user activity in all other systems. According to the vendor, Netwrix Auditor eliminates these blind spots by delivering complete visibility into all changes to system configurations, content and permissions across the IT infrastructure.…
N/A
SolarWinds Database Performance Analyzer
Score 5.6 out of 10
N/A
SolarWinds Database Performance Analyzer (DPA) enables deep visibility into database performance and expert advice for performance optimization and tuning. What can you monitor with DPA? Oracle Oracle Exadata Oracle EBS Microsoft SQL Server Azure SQL Database Azure SQL Database Managed Instance MySQL DB2 SAP ASE Aurora MariaDB DPA monitors physical, virtual,…
N/A
Splunk Observability Cloud
Score 8.4 out of 10
N/A
Splunk Observability Cloud aims to enable operational agility and better customer experience through real-time AI-driven streaming analytics allowing accurate alerts in seconds. It is designed to shorten MTTD and MTTR by providing real-time visibility into cloud infrastructure and services.
Netwrix [Auditor] is a great tool for any SysAdmin no matter the company size. Licensing is determined by users, not employee count, and that makes it a great product from a small business to an enterprise application. The time savings coupled with the increased productivity is a key factor is determining this tool over other products.
This is an easy 10 because I actually have recommended this product to multiple clients and colleagues! Any shop that writes its own SQL queries will benefit from the insight provided by SolarWinds Database Performance Analyzer, so they know which of their queries is causing a bottleneck. Small shops or databases with only a few tables likely will see far fewer opportunities for optimization.
Its great if you need real-time visibility across complex or regulated environments. Also strong for hybrid or multi-cloud setups where uptime, observability and fast IR are required. It’s probably overkill for smaller teams or environments that don’t have constant changes or compliance reporting needs. It's expensive and has a steep learning curve. Also, in my opinion, do not get yourself into a consumption based model. Costs can certainly get out of control quickly.
Netwrix Auditor performs the audit collection process in a method that does not burden the systems it is auditing. It usually just pulls the log and event logs data from the machine it is auditing and then performs the extraction of the information in these files on the Netwrix Auditor server. This reducing the audit processes to only pulling log data from the server but does not keep the server busy processing the data.
Once the log data has been pulled from a server being audited, Netwrix will store the log data in a compressed form in its Long Term Archive. This allows the database to be kept smaller than the all the data being kept in the Log Term Archive and therefore makes creating reports much faster since the database is not as big as it could be.
Since Netwrix Auditor uses standard Microsoft SQL Server and SQL Server Reporting Services (SSRS) to perform reporting, working with the results of the audit is much easier. Anyone who knows SQL Server and SSRS can work with the data and create their own reports.
The predefined reports that come with Netwrix Auditor cover most of the items required to properly report on the status of a system. They have many predefined reports for FedRamp, PCI, HIPPA, and other compliance regulations.
The first one is its Kubernetes container monitoring.
I really like this features because as we know how much K8s is vast and to manually monitor each part of the Kubernetes it takes so much time but Splunk Observability Cloud makes it easier. And even once we integrate K8s with Splunk Observability Cloud it gives us some prebuilt dashboards which gives holistic view of our Cluster and its nodes, pods, etc.
The dashbaord feature of Splunk Observability Cloud, it gives us full flexibility to customize our dashboard with a wide range of predefined chart types.
Now it also supports OTEL, which is a plus point for observability. As now everyone is moving towards Otel and in current market there are only few tools who supports OTEL based integrations, Splunk Observability Cloud is one out of them.
Alerts seem to be lacking in DPA compared to competitor's tools. They can be setup but are not quite as easy or as helpful as some other tools I have used.
Grooming/pruning the repository database isn't very easy. We don't manage a lot of instances but our repo DB has grown pretty significantly.
At times when I am drilled-down to a chart, it can be difficult to navigate around from that point to another time range/query/metric.
You can use table-like functionality to generate dashboards, but these queries are heavy on the system.
It could be easier to give insight into what type of line parsing is used for specific documents in a company-managed environment and/or show ways to gain the insights needed.
I would like to see ways to anonymize specific data for shared reports without pre-formatting this in a dashboard on which reports could be based.
We have renewed already the licensing of the product minus SQL Server and Oracle Database because the organisation believes the modules are very expensive and have identified a different product for auditing Databases Other modules are very important like the User Activity monitor, AD queries that we can not get from the native AD itself or you have to run complicated powershell scripts! Easy to use interface Pre-defined Reports Easy way to subscribe to important alerts e.g Privilege account group membership changes
We have relied on this product for a very long time and it continues to exceed expectations. The product is a vital part of our organization at this point, it would not be very ideal for us to abandon it. We use it almost every day and depend on its alerts for critical parts of our business
Good: Stable system with low error rate Easy to use for simple use cases Bad: UI is not very clear for complex usage Mobile view (when logged in from phone) is bad No library for .net
Netwrix is easy to use; it has a simple reporting system and modules for each area, e.g., exchange, active directory, and Azure. The user interface is quite basic but easy to navigate and is only seen by administrators anyway. Reports can be generated that are meaningful and in a clear format.
I don't want to think about managing clusters of SQL servers in the future without this tool. We have demoed other tools and SolarWinds Database Performance Analyzer is the gold standard for usability and insight into what your servers are doing. The UI is a bit dated, but everything is laid out in a logical manner and drilling down into queries or timeslices is extremely intuitive.
When there is an issue, it’s a win if one can easily identify the root cause. To do the same, it should allow the user to dig deep with multiple data points and compare the data and identify the anomaly. In this use case, it’s good to drive from Splunk 011y.
Customer support has always been fast and helpful when we run into any issues. The smaller issues are usually resolved within a day or two. It is great support and I feel like I am in good hands anytime an issue comes up. However, we don't run into many issues
I have had to use their support on a few occasions, for reasons that I am not clear about until recently I have always had problems upgrading the software (although the last 2 updates have gone without issue which I am very pleased to say). On those unfortunate occasions, the support has been brilliant with either excellently documented guides on how to resolve the issue by myself or have been hands-on with calls and screen sharing to remotely fix the issue. Every time the problem was sorted and more importantly, nothing was lost (apart from a bit of time). And as I stated above whatever the problem was that was causing my upgrade issues appears to have been resolved in the last 2 updates.
Make sure you trial the software and understand the fundamentals of each module that you are interested in Make sure you get the buy in from both Management and most importantly your team members (the product users) for a successful implementation Watch the webinars of the product from the product website
Follow the guidelines for the capacity of the servers. We found that the DPA databases were getting rather large and also that there are ways to reduce their size built into some of the options.
I can only compare it to SolarWinds. Their similar products have larger foot prints and seem a little clumsy in comparison. The Netwrix product turns on a lot of the auditing options that were required for the product to work properly where it seemed I had to do a lot of manual tweeking with the SolarWinds product.
At the time, we found SolarWinds Database Performance Analyzer to be easier to setup and to have a richer feature set than Redgate SQL Monitor, plus, from what I remember, the DPA pricing worked better for us over the course of a year. We're very happy with all the features DPA has to offer.
Splunk Infrastructure Monitoring provides far superior options for anybody using a complex hybrid multi-cloud environment and allows both your SOC and NOC to work together on the same data while driving their own insights. We found other products are still in the old world view of servers and agents residing together within a single data centre, but modern apps are no longer like this.
