Most Helpful Review
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
The most valuable features are customizing reports, and the ability to drill down to display critical information in real-time.
The program is stable and it gives me great visibility.
It has a simplified and user-friendly interface.
It is a simple and solution.
The IBS (Intent Based Segmentation) and application web filtering are the most valuable aspects of the solution.
The feature I find most useful is the handy dashboard.
We use this functionality every day, and obtain reports on things like how many people are using the VPN, which websites are being accessed, and whether hackers are trying to penetrate into our network.
It supports SQL for logging and reporting. Log data is inserted into the SQL database for log view and report generation.
I am very proud of how very stable the solution is.
Real-time UDP/GELF logging and full text-based searching.
UDP is a fast and lightweight protocol, perfect for sending large volumes of logs with minimal overhead.
Storing logs in Elasticsearch means log retrieval is extremely fast, and full text search is available by default.
We run a containerized microservices environment. Being able to set up streams and search for errors and anomalies across hundreds of containers is why a log aggregation platform like Graylog is valuable to us.
Allowing us to set up alerts and integrate with platforms we already use, such as Slack and OpsGenie to alert users of these errors proactively, is also a very useful feature.
The reports are good, but they are over-summarized.
The technical support is not very good.
When it comes to pushing logs to a SIEM, most of the time we have some issues when it comes to filtering.
I'm looking for something more efficient to analyze different foreign things. That's why FortiSIEM could compete with FortiAnalyzer.
The solution could use more graphics and be more specific in the dashboard. This way, I'm able to understand everything and effectively understand what's going on, including what's incoming and outgoing. Right now, I have to look up everything. I need a dashboard so that I can see specific items right there in one place.
I would like to see an improvement in the technical support. Stronger authentication will also be a plus.
When somebody is new to the system they find it difficult to perform certain operations, like backups, and to see where the reports are.
It is very important that FAZ can support FortiController as the architecture designed for the network. FortiController should be registered in FAZ at least for event logs.
I would like to see a date and time in the Graylog Grok patterns so that I can save time when searching for a log. I like how the streams and the search query work, but adding a date and time will allow me to pull out a log in a milli-second.
More complex visualizations and the ability to execute custom Elasticsearch queries would be great.
With technical support, you are on your own without an enterprise license.
Elasticsearch recommendations for tuning could be better. Graylog doesn't have direct support for running the system inside of Kubernetes, so it can be challenging to fill in the gaps and set up containers in a way that is both performant and stable.
We ran into problems with Elasticsearch throwing a circuit-breaking exception due to field data size being too large. It turned out that the heap size directly impacted this size in a high-throughput environment, causing unexplained instability in Graylog. We were able to troubleshoot on the Elasticsearch size, but we should have been able to reference some minimum requirements for Graylog to know that our settings weren't sufficient.
Since container orchestration systems are popular and Graylog fits the niche well, perhaps they could officially support running in docker containers on Kubernetes as a StatefulSet as a use case. That way, the declarative nature of Kubernetes config files would document their best case deployment scenario-
Pricing and Cost Advice
The pricing of this solution is fair, and it is based on what you can manage.
The program is expensive.
The price is quite expensive. Fortinet products are very expensive. That is something which they should also look at, because if you compare Fortinet product to, say, Sophos for example, Fortinet is really high and that's the only thing which is a drawback for most users.
We have around 12 devices and yearly we spend approximately $14,000.
All Fortinet programs come at a good price.
We have several products including Fortinet Wireless, FortiGate Firewalls, and FortiAnalyzer, which are bundled together and cost approximately $50,000 USD annually.
The cost and pricing should be in accordance with the calculation of log storage capacity for a time period required for historical analysis.
It depends upon the company.
I use the free version of Graylog.
You get a lot out-of-the-box with the non-enterprise version, so give it a try first.
Consider Enterprise support if you have atypical needs or setup requirements.
out of 47 in Log Management
Average Words per Review
out of 47 in Log Management
Average Words per Review
Compared 26% of the time.
Compared 18% of the time.
Compared 17% of the time.
Compared 42% of the time.
Compared 27% of the time.
Compared 6% of the time.
Also Known As
|FortiAnalyzer Network Security Logging, Analysis, and Reporting Appliances securely aggregate log data from Fortinet Security Appliances. A comprehensive suite of easily customable reports allows you to quickly analyze and visualize network threats, inefficiencies and usage. FortiAnalyzer is one of several versatile Fortinet Management Products that provide a diversity of deployment types, growth flexibility, advanced customization through APIs and simple licensing.|
Graylog is purpose-built to deliver the best log collection, storage, enrichment, and analysis. Graylog is:
Learn more about Fortinet FortiAnalyzer
Learn more about Graylog
|General Directorate of Information Technology||Blue Cross Blue Shield, eBay, Cisco, LinkedIn, SAP, King.com, Twilio, Deutsche Presse-Agentur|
Software R&D Company41%
Comms Service Provider17%
Software R&D Company35%
Comms Service Provider12%