My company evaluated several solutions before landing on Elastic Security.

My company ended up with Elastic Security over other solutions since it provided us with the professional services needed to succeed. Elastic Security was easily integrated into the systems in our company. Elastic Security could also provide us support in our company's endeavor and provide that level of hands-on experience with the product. Elastic Security was the one my company ended up with over other tools. My company didn't have in-house expertise in the area concerning the tool, so if we had tried it ourselves without the help from Elastic Security, then we would have failed.

Before choosing Elastic Security, we evaluated Microsoft Sentinel.

I was not in this company when this was chosen.

We evaluated several options, including Monster SIEM, Splunk, and Wazuh.

We also have Graylog, for Graylog we're using it in parallel for a similar solution. At the moment, we're basically just comparing the two and see which one is preferred.

I have personally worked with Splunk in the past, but here at this company, they only use Elastic. I believe that one of the major differences between these two is the pricing model. With Splunk, it depends on how much data we are ingesting. For us, it is approximately 500 GB per day. Elastic has a different pricing system that is ultimately cheaper.

One of the advantages of Splunk is that they offer extensive training that is free of cost.

We tried Graylog and a few other things, but I found Elastic Security is easier to understand. There's a lot of documentation available, and their forums are great. Another advantage is greater scalability. 

The solution does not work as well as Splunk.

Our client provided us with this option after they had already been through a selection process.

We did not evaluate other options before choosing this solution.

We are currently evaluating other solutions to replace this one, such as Datadogs and New Relic. Datadog has a UI that this solution is lacking.

Until now, we have not evaluated the Elastic cloud version, which is the fast kind of solution. But we have deployed the on-premise as well as the AWS options.

I have expertise with Dell and I moved from it to Elastic because I had different projects and this was a natural extension.