Compare AlienVault OSSIM vs. RSA NetWitness Logs and Packets (RSA SIEM)

AlienVault OSSIM is ranked 12th in Security Information and Event Management (SIEM) with 10 reviews while RSA NetWitness Logs and Packets (RSA SIEM) is ranked 7th in Security Information and Event Management (SIEM) with 10 reviews. AlienVault OSSIM is rated 7.4, while RSA NetWitness Logs and Packets (RSA SIEM) is rated 7.0. The top reviewer of AlienVault OSSIM writes "Provides threat alerts on harmful code in the network". On the other hand, the top reviewer of RSA NetWitness Logs and Packets (RSA SIEM) writes "Good support, powerful decoders and concentrator, but the dashboard is not reflecting events in real-time ". AlienVault OSSIM is most compared with Splunk, AT&T AlienVault USM and Fortinet FortiSIEM (AccelOps), whereas RSA NetWitness Logs and Packets (RSA SIEM) is most compared with IBM QRadar, Splunk and ArcSight. See our AlienVault OSSIM vs. RSA NetWitness Logs and Packets (RSA SIEM) report.
Cancel
You must select at least 2 products to compare!
Most Helpful Review
Find out what your peers are saying about AlienVault OSSIM vs. RSA NetWitness Logs and Packets (RSA SIEM) and other solutions. Updated: March 2020.
406,607 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
The dashboard is the solution's most valuable aspect. It brings everything into one central point where I can actually look at it and go, "Okay, I understand what's going on."The most valuable features of this solution are the data correlation and vulnerability assessment.OSSIM is the only solution that includes the large number of modules that we need: a vulnerability scanner, a network IDS system, a host IDS system.The open vault component and the checking of vulnerabilities are the most valuable features. The page management helps with this. If you know how your device is vulnerable at least you can do something about it.You pay monthly for the solution. I think it's one of the best products. If you compare with other companies, like LogRhythm, etc., the top 8 or 10 CMs, I think Alien Vault has the best price-performance ratio.The initial setup was straightforward. I didn't have any problems.With AlienVault you get everything in one box.The solution has a very good open source community, and whenever we have problems, we are always able to resolve it online.

Read more »

Performance and reporting are very good.The most valuable features are the integration and ease of use.The most valuable feature is that we can create our own connectors for any application, and NetWitness provides the training and tools to do it.The most valuable features are the packet decoder, log decoder, and concentrator.It's fully scalable. There is no limit. Of course, the license limits per day the number of terabytes. In my opinion, it's very flexible.The most valuable feature is the ability to write rules and triggers for network communication, and then being able to investigate based on that.The most valuable features are its ingestion of logs and raising of alerts based on those logs.Their technical support responds quickly and are knowledgable.

Read more »

Cons
I would like the solution to be able to integrate with my firewall, my IDS and my Honeypot solutions so that it can provide real-time reporting as things occur and then have alert sent to me on my phone when suspicious activity is happening.The price of this solution is very high and it could be cheaper.We need more dashboards and we need more customization for dashboards.The initial setup was a bit complex. You've got to do a lot of reading. It's not an intuitive implementation.The user interface could be improved.It's under heavy traffic. If you have heavy traffic, the system is slow.Sometimes technical issues take very long to get resolved.The solution needs more integration with cyber intelligence systems.

Read more »

The user interface is a little bit difficult for new users and it needs to be improved.The documentation is not as structured as I would like, personally, and I think that it can be improved and made much more user-friendly.The initial setup is very complex and should be simplified.Log aggregation is an issue with this solution because there are a huge number of alerts in a single instance.They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams.The system looks like it is a mix of a bunch of different systems, and nothing looked like it was quite together.I'd like to see improvement in its ease of use. It's basically unusable. It's overly complex.The initial setup was complex because it takes a lot of time to complete the implementation.

Read more »

Pricing and Cost Advice
The licensing fees for the non-community edition are paid on an annual basis, and there are no costs in addition to this.OSSIM is free.The solution is open source, so it's free to use.AlienVault pricing is the best. Whatever cost you are paying, you are getting a return on every penny... It's not like your IBM, your QRadar, or Splunk, where the cost is too high.

Read more »

Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day.We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment.This is a pricey solution; it's not cheap.The licenses are good but the cost is very expensive.It is cheap.

Read more »

report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
406,607 professionals have used our research since 2012.
Ranking
Views
1,148
Comparisons
444
Reviews
8
Average Words per Review
576
Avg. Rating
7.4
Views
6,869
Comparisons
4,516
Reviews
10
Average Words per Review
474
Avg. Rating
6.9
Top Comparisons
Compared 47% of the time.
Also Known As
OSSIMRSA Security Analytics
Learn
AT&T
RSA
Overview

AlienVault OSSIM, Open Source Security Information and Event Management (SIEM), provides you with a feature-rich open source SIEM complete with event collection, normalization and correlation. Launched by security engineers because of the lack of available open source products, AlienVault OSSIM was created specifically to address the reality many security professionals face: A SIEM, whether it is open source or commercial, is virtually useless without the basic security controls necessary for security visibility.

If you’re relying on log data to detect and prevent cyber threats, you’re in trouble. Attackers increasingly evade detection of log-centric security and network monitoring tools. But logs combined with full packet, endpoint NetFlow data are proven to provide the essential details for early threat detection. Here’s a closer look at our solution.

Offer
Learn more about AlienVault OSSIM
Learn more about RSA NetWitness Logs and Packets (RSA SIEM)
Sample Customers
Council Rock School DistrictLos Angeles World Airports, Reply
Top Industries
No Data Available
VISITORS READING REVIEWS
Software R&D Company36%
Comms Service Provider17%
Financial Services Firm7%
Government6%
Find out what your peers are saying about AlienVault OSSIM vs. RSA NetWitness Logs and Packets (RSA SIEM) and other solutions. Updated: March 2020.
406,607 professionals have used our research since 2012.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.