We compared Fortinet FortiAnalyzer and Graylog based on our users' reviews in five categories. We reviewed all of the data and you can find the conclusion below.
Features: Fortinet FortiAnalyzer features exceptional log collection capabilities and customizable reporting. Graylog stands out with its exceptional search functions, seamless integration with Elasticsearch, and real-time data access. FortiAnalyzer enables users to centrally manage and analyze logs in real time. Fortinet FortiAnalyzer could simplify its reporting module and cloud storage capabilities. Graylog could benefit from additional customization options and an improved rule-creation process.
Service and Support: Some Fortinet customers were dissatisfied with support, but others said it was helpful and responsive. Graylog's customer service is generally well-regarded, with reviewers noting effective solutions and satisfactory experiences. While response times may differ, Graylog's support is considered superior compared to that of other products.
Ease of Deployment: FortiAnalyzer's initial setup is uncomplicated and manageable, typically taking approximately 30 minutes to a few hours. Some IT knowledge may be required. Some Graylog users said the setup was easy. Other reviewers faced challenges, but these were easily resolved with help from the vendor’s support staff. Graylog is easier to set up in smaller environments, but it could get complicated in large clusters.
Pricing: While FortiAnalyzer isn't the most expensive option, users say the pricing could be more competitive. FortiAnalyzer's cost depends on the storage requirements, and many customers consider it reasonable. Graylog offers an enterprise edition and an open-source option with a daily capacity restriction. Some users said that data costs can be expensive.
ROI: FortiAnalyzer helps customers by providing insight into network traffic and speeding up issue resolution. Graylog can offer some cost savings. The precise ROI may vary depending on the organization’s size and use case.
"The initial setup is straightforward."
"The most valuable feature of Fortinet FortiAnalyzer is its performance."
"It has a simplified and user-friendly interface."
"FortiAnalyzer has a robust ability to find a compromised host on your network, and when you identify a compromised host, you can address it."
"The program is stable and it gives me great visibility."
"I would say that Fortinet's tech support is really good."
"The initial setup is easy, and the deployment is fast."
"The solution allows for a lot of customization."
"Graylog's search functionality, alerting functionality, user management, and dashboards are useful."
"The build is stable and requires little maintenance, even compared to some extremely expensive products."
"Message forwarding through the in-built module."
"Storing logs in Elasticsearch means log retrieval is extremely fast, and full text search is available by default."
"The solution's most valuable feature is its new interface."
"It is used as a log manager/SIEM. It provides visibility into the infrastructure and security related events."
"UDP is a fast and lightweight protocol, perfect for sending large volumes of logs with minimal overhead."
"I am very proud of how very stable the solution is."
"The pricing could be better. They could work to make it more competitive on the market."
"It should have customized reports as well. While it currently has them, you need to write a script which is not straightforward."
"FortiAnalyzer only integrates with Fortinet solutions. That is a limitation because many organizations use multiple vendors. It's often a mixture of Cisco network hardware and equipment from other vendors, such as switches, access points, etc."
"One of the main disadvantages is not having a direct link to the security policy when you see something in the log."
"I would like to see an improvement in the technical support. Stronger authentication will also be a plus."
"We'd like to see more embedded features."
"Their in-house technical support is extremely slow to respond. We have our own in-house team to manage issues so clients don't have to wait over two weeks for a response to issues."
"Fortinet FortiAnalyzer is not in the cloud environment like some of the other products. There could be a possibility of extending its functionality to the cloud environment. If possible, they could have a deal with or integrate with other firewall manufacturers, like Palo Alto and Cisco, and mix the information. It is a difficult functionality. I don't know if any product in the market provides such functionality."
"I would like to see a default dashboard widget that shows the topology of the clusters defined for the graylog install."
"Dashboards, stream alerts and parsing could be improved."
"It would be great if Graylog could provide a better Python package in order to make it easier to use for the Python community."
"Over six months, I had two similar issues where searches were performed on field "messages". It exhausted all the memory of the ES node causing an ES crash and a Graylog halt."
"Its scalability gets complicated when we have to update or edit multiple nodes."
"I would like to see a date and time in the Graylog Grok patterns so that I can save time when searching for a log. I like how the streams and the search query work, but adding a date and time will allow me to pull out a log in a milli-second."
"More customization is always useful."
"Since container orchestration systems are popular and Graylog fits the niche well, perhaps they could officially support running in docker containers on Kubernetes as a StatefulSet as a use case. That way, the declarative nature of Kubernetes config files would document their best case deployment scenario-"
Fortinet FortiAnalyzer is ranked 8th in Log Management with 81 reviews while Graylog is ranked 11th in Log Management with 18 reviews. Fortinet FortiAnalyzer is rated 8.0, while Graylog is rated 8.0. The top reviewer of Fortinet FortiAnalyzer writes "We can automate event-based handling solutions, is stable, and is great for heavy traffic". On the other hand, the top reviewer of Graylog writes "Great detailed search features and easy Java integration, but needs improvement in integration with Python". Fortinet FortiAnalyzer is most compared with Wazuh, Splunk Enterprise Security, Grafana Loki, LogRhythm SIEM and Datadog, whereas Graylog is most compared with Grafana Loki, Wazuh, syslog-ng, Splunk Enterprise Security and Elastic Security. See our Fortinet FortiAnalyzer vs. Graylog report.
See our list of best Log Management vendors.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
