Elastic Agent
ElasticReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
21 reviews
from
External reviews are not included in the AWS star rating for the product.
Essential for Our Linux Security
What do you like best about the product?
I really appreciate that Elastic Security provides great insight into our system. We can perform good analyses because we run a SOC without direct access to the machines, and for that, the defend function is very useful. Also, the initial installation of Elastic Security was very simple and straightforward. All in all, I am very satisfied and would definitely give Elastic Security a score of 10 as a recommendation to a friend or colleague.
What do you dislike about the product?
Inventory of the machine which patches are installed
What problems is the product solving and how is that benefiting you?
I use Elastic Security to monitor our Linux environment, which provides EDR and log analysis of network and processes. It offers insight into the system, allowing us to perform a good analysis even without direct access to machines.
I would highly recommend it
What do you like best about the product?
New features and updates. Security in Cloud sharing
What do you dislike about the product?
No major Cons to report at this moment .
What problems is the product solving and how is that benefiting you?
Improve cloud security posture
Elastic security review
What do you like best about the product?
Elastic security provides key analytics of various hosts in a distributed architecture. It helps diagnose any anomalies or threats, allowing you to act fast and minimize potential loss.
What do you dislike about the product?
It could be pricier, so you might want to choose the appropriate hosts where the threat is more such as those in the edge layer of your network.
What problems is the product solving and how is that benefiting you?
Elastic security provides quick insights and analytics on the hosts in your network and alerts you in case any action is required to keep your hosts secure.
Very Reliable. Easy set up. Good Security
What do you like best about the product?
Very reliable software to protect sensitive data. Easy to setup as well!
What do you dislike about the product?
Nothing really. Occasion loop depending on the network. Sometimes requires a clearing of cache and cookies to workaround the loop
What problems is the product solving and how is that benefiting you?
Protecting sensitive emails regarding software builds. Conversations internally
Fast and easiest SIEM solution for small companies and startups
What do you like best about the product?
ELK is the best solution if you are a startup or a small company. it's blazingly fast and cost effective.
What do you dislike about the product?
Creating notifications out of the box can be a challenge to begin with, the watchers can be simplified.
What problems is the product solving and how is that benefiting you?
Threat hunting, SIEM solution for SOC team
Fully functional Logs Suite
What do you like best about the product?
Logstash provide a fully logs collection, the best configuration is use them with Kibana and Elastic Search as an Elk suite
What do you dislike about the product?
Not so easy to set up, necessary a specialized partner
What problems is the product solving and how is that benefiting you?
Log compliance and monitoring
Recommendations to others considering the product:
Consider to get helped by a expert partner
I used Logstash as a Filter to aggregate the data coming from Beats,
What do you like best about the product?
Logstash provide so many plugins and also work as a Filter which is used to collect the data and than filter in the same way in which we want. Also Logstash is an open source tool so it also solve the costing problem.
What do you dislike about the product?
Till now everything is good , I like it very much.
What problems is the product solving and how is that benefiting you?
I used logstash to create pipelines which gave me filtered data coming from Beats. And than it also provide me an output section where I can mention my output to be transfered there for example Elastic Search .
Performance of logstash is very good also as it is open source tool which is cost effective for me.
Performance of logstash is very good also as it is open source tool which is cost effective for me.
Simple to configure. Works realiably. Simplest tool in ETL
What do you like best about the product?
The simplicity of defining the configuration for an ETL job and numerous plugins available.
What do you dislike about the product?
Not so friendly way to scale the tool for huge amounts of input.
What problems is the product solving and how is that benefiting you?
Extract Transform Load workloads especially for access logs.
Recommendations to others considering the product:
Definitely, try it out. It's the best tool for small to medium workloads.
Default grok patterns can be quite tricky. Suggestion: use CSV filter if feasible.
Default grok patterns can be quite tricky. Suggestion: use CSV filter if feasible.
Logstash Review
What do you like best about the product?
It logs the activities from all the servers and aggregates them into one source of truth for visualization and researching.
What do you dislike about the product?
The logs take a while to understand for non-technical person at the beginning
What problems is the product solving and how is that benefiting you?
To keep logs and be able to track back to see what activities were performed by what users
Versatile log processor with ample community support and rapid updates
What do you like best about the product?
The thing I like the most about logstash is the ability to adjust it to whatever you are doing. If it is your own custom project, or a standard input source it will bend to your needs.
What do you dislike about the product?
Setting up logstash took a while when I had no idea how to get it working. What I am trying to say is the learning curve was a little higher than I thought. That and GROK is horrible.
What problems is the product solving and how is that benefiting you?
Analyzing windows and Linux log files for common use, and miss use of computers. Being able to see in one central location how all of the systems and clients are behaving is wonderful.
Recommendations to others considering the product:
Learn to use Grok. Find a Grok parser online and then look for a LOT of guides on how to write grok. There are plenty of them out there.
When you have found your guide, test out your code. Set up a CI / CD environment, even if it is a simple one to test out your changes to your logstash configuration files.
Make sure you setup all your inputs and outputs as separate files, it makes for a LOT easier debugs.
Use a version control system like git, it makes finding problems with your configuration changes a LOT easier
Basically what I am saying is follow the principals of DevOps, logstash is trouble
When you have found your guide, test out your code. Set up a CI / CD environment, even if it is a simple one to test out your changes to your logstash configuration files.
Make sure you setup all your inputs and outputs as separate files, it makes for a LOT easier debugs.
Use a version control system like git, it makes finding problems with your configuration changes a LOT easier
Basically what I am saying is follow the principals of DevOps, logstash is trouble
showing 11 - 20