We changed our name from IT Central Station: Here's why

Fortinet FortiAnalyzer vs Graylog comparison

Cancel
You must select at least 2 products to compare!
Devo Logo
Read 13 Devo reviews.
12,001 views|4,605 comparisons
Fortinet FortiAnalyzer Logo
9,992 views|6,765 comparisons
Graylog Logo
13,405 views|10,799 comparisons
Featured Review
Find out what your peers are saying about Fortinet FortiAnalyzer vs. Graylog and other solutions. Updated: January 2022.
564,143 professionals have used our research since 2012.
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"It's very, very versatile.""The ability to have high performance, high-speed search capability is incredibly important for us. When it comes to doing security analysis, you don't want to be doing is sitting around waiting to get data back while an attacker is sitting on a network, actively attacking it. You need to be able to answer questions quickly. If I see an indicator of attack, I need to be able to rapidly pivot and find data, then analyze it and find more data to answer more questions. You need to be able to do that quickly. If I'm sitting around just waiting to get my first response, then it ends up moving too slow to keep up with the attacker. Devo's speed and performance allows us to query in real-time and keep up with what is actually happening on the network, then respond effectively to events.""Devo provides a multi-tenant, cloud-native architecture. This is critical for managed service provider environments or multinational organizations who may have subsidiaries globally. It gives organizations a way to consolidate their data in a single accessible location, yet keep the data separate. This allows for global views and/or isolated views restricted by access controls by company or business unit.""Those 400 days of hot data mean that people can look for trends and at what happened in the past. And they can not only do so from a security point of view, but even for operational use cases. In the past, our operational norm was to keep live data for only 30 days. Our users were constantly asking us for at least 90 days, and we really couldn't even do that. That's one reason that having 400 days of live data is pretty huge. As our users start to use it and adopt this system, we expect people to be able to do those long-term analytics.""The strength of Devo is not only in that it is pretty intuitive, but it gives you the flexibility and creativity to merge feeds. The prime examples would be using the synthesis or union tables that give you phenomenal capabilities... The ability to use a synthesis or union table to combine all those feeds and make heads or tails of what's going on, and link it to go down a thread, is functionality that I hadn't seen before.""The user experience [is] well thought out and the workflows are logical. The dashboards are intuitive and highly customizable.""One of the biggest features of the UI is that you see the actual code of what you're doing in the graphical user interface, in a little window on the side. Whatever you're doing, you see the code, what's happening. And you can really quickly switch between using the GUI and using the code. That's really useful.""In traditional BI solutions, you need to wait a lot of time to have the ability to create visualizations with the data and to do searches. With this kind of platform, you have that information in real-time."

More Devo Pros →

"The scalability is good. It is also good in the cluster nodes. You can make multiple FortiAnalyzer clusters groups, and you can distribute the logs between these FortiAnalyzer nodes. In other words, you can expand the scale.""The solution does what it is supposed to. I want it to do reports for Fortinet and it does it well.""I have found incident management and also identifying new threats, analyzing the network traffic, and finding out the issues with the network traffic such as any security issues to be valuable. I also like the compliance reports.""The initial setup is straightforward.""FortiAnalyzer has a robust ability to find a compromised host on your network, and when you identify a compromised host, you can address it.""Its robust security and performance are the two main features. We also use the log reporting feature.""The log analysis and reporting are both quite good.""Initial setup is ok."

More Fortinet FortiAnalyzer Pros →

"I like the correlation and the alerting.""Graylog's search functionality, alerting functionality, user management, and dashboards are useful.""Open source and user friendly."

More Graylog Pros →

Cons
"Technical support could be better.""The Activeboards feature is not as mature regarding the look and feel. Its functionality is mature, but the look and feel is not there. For example, if you have some data sets and are trying to get some graphics, you cannot change anything. There's just one format for the graphics. You cannot change the size of the font, the font itself, etc.""One major area for improvement for Devo... is to provide more capabilities around pre-built monitoring. They're working on integrations with different types of systems, but that integration needs to go beyond just onboarding to the platform. It needs to include applications, out-of-the-box, that immediately help people to start monitoring their systems. Such applications would include dashboards and alerts, and then people could customize them for their own needs so that they aren't starting from a blank slate.""Some third-parties don't have specific API connectors built, so we had to work with Devo to get the logs and parse the data using custom parsers, rather than an out-of-the-box solution.""Devo has a lot of cloud connectors, but they need to do a little bit of work there. They've got good integrations with the public cloud, but there are a lot of cloud SaaS systems that they still need to work with on integrations, such as Salesforce and other SaaS providers where we need to get access logs.""There is room for improvement in the ability to parse different log types. I would go as far as to say the product is deficient in its ability to parse multiple, different log types, including logs from major vendors that are supported by competitors. Additionally, the time that it takes to turn around a supported parser for customers and common log source types, which are generally accepted standards in the industry, is not acceptable. This has impacted customer onboarding and customer relationships for us on multiple fronts.""From our experience, the Devo agent needs some work. They built it on top of OS Query's open-source framework. It seems like it wasn't tuned properly to handle a large volume of Windows event logs. In our experience, there would definitely be some room for improvement. A lot of SIEMs on the market have their own agent infrastructure. I think Devo's working towards that, but I think that it needs some improvement as far as keeping up with high-volume environments.""An admin who is trying to audit user activity usually cannot go beyond a day in the UI. I would like to have access to pages and pages of that data, going back as far as the storage we have, so I could look at every command or search or deletion or anything that a user has run. As an admin, that would really help. Going back just a day in the UI is not going to help, and that means I have to find a different way to do that."

More Devo Cons →

"One of the main disadvantages is not having a direct link to the security policy when you see something in the log.""The FortiAnalyzer is not good at managing multi-version environments. If all your FortiGate are at different versions in the field, that's difficult. The one thing we didn't like is the fact you have to have 100% of your environment at the same release, which is not pleasant, to have it fully functional. You can have a different release, but to have it fully functional 100% of your environment has to be the same release.""From my point of view, at this time, the solution isn't lacking any features or functionalities.""The solution lacks business intelligence features. It's much too basic.""They can include integration with devices, such as firewalls, endpoints, from other vendors. They can include graphic monitoring of everything in the network, not just Fortinet products. It would also be good to include customizable reports and customizable views of the reports.""In future releases, we'd like to see more granular reporting. The reports on offer right now are pretty short.""Fortinet FortiAnalyzer cannot receive any queries. They should add this feature in the future to help manage solutions.""The support could be better for Fortinet FortiAnalyzer here in Mexico."

More Fortinet FortiAnalyzer Cons →

"Lacks sufficient documentation.""Graylog can improve the index rotation as it's quite a complex solution.""I would like to see some kind of visualization included in Graylog."

More Graylog Cons →

Pricing and Cost Advice
  • "We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."
  • "I'm not involved in the financial aspect, but I think the licensing costs are similar to other solutions. If all the solutions have a similar cost, Devo provides more for the money."
  • "Devo is definitely cheaper than Splunk. There's no doubt about that. The value from Devo is good. It's definitely more valuable to me than QRadar or LogRhythm or any of the old, traditional SIEMs."
  • "[Devo was] in the ballpark with at least a couple of the other front-runners that we were looking at. Devo is a good value and, given the quality of the product, I would expect to pay more."
  • "Be cautious of metadata inclusion for log types in pricing, as there are some "gotchas" with that."
  • "Devo was very cost-competitive... Devo did come with that 400 days of hot data, and that was not the case with other products."
  • "Our licensing fees are billed annually and per terabyte."
  • "I like the pricing very much. They keep it simple. It is a single price based on data ingested, and they do it on an average. If you get a spike of data that flows in, they will not stick it to you or charge you for that. They are very fair about that."
  • More Devo Pricing and Cost Advice →

  • "When comparing with other solutions such as Checkpoint and Cisco, Fortinet is priced well."
  • "It is not very expensive when customers understand the value of this product and the importance of the information that it provides for security."
  • "Its price is okay for us. Fortinet products are cheaper than other solutions."
  • "When you compare with other firewall vendors, FortiAnalyzer is quite competitive in pricing."
  • "In the local market sometimes people are being charged more than other solutions. Although the market is competitive, legitimate suppliers do not receive a large enough discount to pass onto the customers."
  • "I believe that these devices were procured with a five-year maintenance and support license up front. I work at a university, so the vendor provides a considerable higher ed discount."
  • "We found the price of Fortinet FortiAnalyzer to be reasonable."
  • More Fortinet FortiAnalyzer Pricing and Cost Advice →

  • "It's an open-source solution that can be used free of charge."
  • More Graylog Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Log Management solutions are best for your needs.
    564,143 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: 
    It's very, very versatile.
    Top Answer: 
    Devo, like other vendors, doesn't charge extra for playbooks and automation. That way, you are only paying for the side… more »
    Top Answer: 
    I need more empowerment in reporting. For example, when I'm using Qlik or Power BI in terms of reporting for the… more »
    Top Answer: 
    I have found incident management and also identifying new threats, analyzing the network traffic, and finding out the… more »
    Top Answer: 
    When you compare with other firewall vendors, FortiAnalyzer is quite competitive in pricing. They are very aggressive as… more »
    Top Answer: 
    One thing we struggled with FortiAnalyzer was integration with SIEM. We also had issues with the new threats and APTs… more »
    Top Answer: 
    I like the correlation and the alerting.
    Top Answer: 
    It's an open-source solution that can be used free of charge.
    Top Answer: 
    I would like to see some kind of visualization included in Graylog. The report is plain, they could be improved.
    Comparisons
    Also Known As
    Graylog2
    Learn More
    Overview

    Devo is the only cloud-native logging and security analytics platform that releases the full potential of all your data to empower bold, confident action when it matters most. Only the Devo platform delivers the powerful combination of real-time visibility, high-performance analytics, scalability, multitenancy, and low TCO crucial for monitoring and securing business operations as enterprises accelerate their shift to the cloud.

    FortiAnalyzer Network Security Logging, Analysis, and Reporting Appliances securely aggregate log data from Fortinet Security Appliances. A comprehensive suite of easily customable reports allows you to quickly analyze and visualize network threats, inefficiencies and usage. FortiAnalyzer is one of several versatile Fortinet Management Products that provide a diversity of deployment types, growth flexibility, advanced customization through APIs and simple licensing.

    Graylog is purpose-built to deliver the best log collection, storage, enrichment, and analysis. Graylog is:

    • Considerably faster analysis speeds.
    • More robust and easier-to-use analysis platform.
    • Simpler administration and infrastructure management.
    • Lower cost than alternatives.
    • Full-scale customer service.
    • No expensive training or tool experts required.
    Offer
    See Devo in Action

    See how Devo allows you to free yourself from data management, and make machine data and insights accessible.

    Learn more about Fortinet FortiAnalyzer
    Learn more about Graylog
    Sample Customers
    United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel
    General Directorate of Information Technology
    Blue Cross Blue Shield, eBay, Cisco, LinkedIn, SAP, King.com, Twilio, Deutsche Presse-Agentur
    Top Industries
    REVIEWERS
    Computer Software Company57%
    Comms Service Provider14%
    Retailer14%
    Insurance Company14%
    VISITORS READING REVIEWS
    Computer Software Company27%
    Comms Service Provider20%
    Government7%
    Financial Services Firm7%
    REVIEWERS
    Comms Service Provider25%
    Financial Services Firm19%
    Government13%
    Healthcare Company6%
    VISITORS READING REVIEWS
    Comms Service Provider33%
    Computer Software Company24%
    Government7%
    Manufacturing Company4%
    VISITORS READING REVIEWS
    Comms Service Provider30%
    Computer Software Company21%
    Government8%
    Financial Services Firm5%
    Company Size
    REVIEWERS
    Small Business14%
    Midsize Enterprise14%
    Large Enterprise71%
    VISITORS READING REVIEWS
    Small Business48%
    Midsize Enterprise15%
    Large Enterprise36%
    REVIEWERS
    Small Business51%
    Midsize Enterprise27%
    Large Enterprise22%
    REVIEWERS
    Small Business43%
    Large Enterprise57%
    Find out what your peers are saying about Fortinet FortiAnalyzer vs. Graylog and other solutions. Updated: January 2022.
    564,143 professionals have used our research since 2012.

    Fortinet FortiAnalyzer is ranked 8th in Log Management with 22 reviews while Graylog is ranked 14th in Log Management with 3 reviews. Fortinet FortiAnalyzer is rated 8.2, while Graylog is rated 8.6. The top reviewer of Fortinet FortiAnalyzer writes "Great dashboard with customizable reporting and excellent logs". On the other hand, the top reviewer of Graylog writes "Stable, scalable, easy to install and maintain". Fortinet FortiAnalyzer is most compared with Splunk, ELK Logstash, Wazuh, LogRhythm NextGen SIEM and ManageEngine EventLog Analyzer, whereas Graylog is most compared with Splunk, ELK Logstash, Wazuh, syslog-ng and LogRhythm NextGen SIEM. See our Fortinet FortiAnalyzer vs. Graylog report.

    See our list of best Log Management vendors.

    We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.