Rapid7 InsightOps vs. SolarWinds Papertrail

Rapid7 InsightOps has been able to highlight threats that we have been able to mitigate. It has given us data enriched graphs that can be used by technical staff to assist in strengthening our defenses against cyber threat actors It also has given us data that can be used by nontechnical staff and management for strategic decision making

Incentivized

As a 3rd party endpoint, SolarWinds Papertrail did exactly what it needed to. My hesitation is on the technical aptitude of the colleague receiving the recommendation, as the overall level of command line skill/understanding would have to be high. Web applications are a great solution here, but MOST of them already provide some sort of logging output. The scenario would definitely be in the situation where logging wasn't readily available in the current solution space. IF something like SolarWinds Papertrail was needed, it's probably the de facto thing that I would recommend.

Incentivized

• Log Consilidation
• Threat Analysis
• Alerting

Incentivized

• Free configuration on how Papertrail will alert you
• Easy to setup with your server/application
• Very intuitive and easy to use
• Fair pricing policy/plan

Incentivized

• The CLI was a bit clunky and required some Linux-y thought to get right (obviously more designed with scripting in mind)
• Tracking logs in real time (think something like `tail`) wasn't wildly intuitive
• Accessing/searching archives required a lot of CLI-style pulling/extracting/reg-exing

Incentivized

We are definitely going to continue using Papertrail. It's been a lifesaver.

Incentivized

It's extremely easy to use. I and new colleagues have never had any issues configuring this tool or setting it up, it works almost out of the box with very simple instructions to follow to configure it to our own environment. I would highly recommend it on that ability alone.

Incentivized

I honestly have never had the need to use the support team, as we have not run into any issues so far. If we did however, judging from how the tool itself works, I don't doubt that the team would provide excellent support for any issues that we may possibly run into.

Incentivized

Rapid7 InsightOps has much deeper integration and logging capabilities and has made the Rapid7 InsightOpssecurity of our environment an ongoing improvement. We use InsightOps' Search capabilities to discover precise, contextual information about our infrastructure. We have set up automatic notifications when important events happen within our network and domain. Rapid7 InsightOps has allowed us to create Dashboard visualizations based on our data to gain better insight into what is going on.

Incentivized

CloudWatch, by itself, is terrible at search. CloudWatch Insights works great and has powerful search capabilities, but it's more difficult to set up alerts. Also, because Insights charges per search, you have the potential to accumulate a large bill if you need to do many searches. I like that SolarWinds Papertrail has a known monthly cost.

Incentivized

• Dashboards for easy identification of trends and analysis
• Freed up staff time for other duties

Incentivized

• SolarWinds Papertrail cost compared to the benefits it provides is a win.
• When the logs are flooded, and the monthly limits are reached, the failure to post new logs may be a significant drawback.
• The great search/filter capabilities is key for speedy and precise debugging of incidents that may happen during testing and operation.

Incentivized