Flexibility, Speed and Centralized visibility. Review collected by and hosted on G2.com.
Nothing like that I can dislike in elastik Review collected by and hosted on G2.com.
Flexibility, Speed and Centralized visibility. Review collected by and hosted on G2.com.
Nothing like that I can dislike in elastik Review collected by and hosted on G2.com.
I really appreciate that Elastic Security provides great insight into our system. We can perform good analyses because we run a SOC without direct access to the machines, and for that, the defend function is very useful. Also, the initial installation of Elastic Security was very simple and straightforward. All in all, I am very satisfied and would definitely give Elastic Security a score of 10 as a recommendation to a friend or colleague. Review collected by and hosted on G2.com.
Inventory of the machine which patches are installed Review collected by and hosted on G2.com.

I like using Elastic Security for security monitoring. The central logs and ECS features are incredibly useful for me. I appreciate the powerful tools like timeline and cases, which make handling security details much more efficient. The initial setup of Elastic Security was fairly easy, which I found really convenient. Review collected by and hosted on G2.com.
In timeline you can’t move columns by sliding, you need to right-click and “move to the left” multiple times sometimes. Review collected by and hosted on G2.com.

I appreciate the ability to visualize data and turn it into actionable intelligence with Elastic Security. We use it to create dashboards that monitor our security posture, attack surface, and threat landscape. The integration with our incident management system is seamless, and the setup was simple and straightforward. Elastic Security has allowed our team to conduct investigations more efficiently. Review collected by and hosted on G2.com.
I find building sequencing rules where multiple events must occur in order over a given time challenging. Review collected by and hosted on G2.com.
You can manage the alerts in an easy way. From alerts panel you can have all the information needed for a security investigation. Also, with the cases feature, you can create your own database of alerts Review collected by and hosted on G2.com.
Sometimes, charging is slow, and it's difficult to copy fileds and values from timelines Review collected by and hosted on G2.com.
I like its flexibility, the preconfigured rules, and the integrated case management for sharing information. Review collected by and hosted on G2.com.
It feels a bit complex at first. It’s a large, heavy, and fairly complex infrastructure to maintain on-prem. Review collected by and hosted on G2.com.

Elastic xpack secqurity is great for connecting with multipule domain controller or various authentication methord Review collected by and hosted on G2.com.
its still have some drawback like anonymous login ,sepratly need to disable otherwise it will be vernable Review collected by and hosted on G2.com.
EDR Capability and K8 support along with SIEM Review collected by and hosted on G2.com.
Elastic agent issues, some times seems unhealthy or blocking bussiness actions Review collected by and hosted on G2.com.
Most helpful, which was one of the reason for choosing Elastic Security is pre-build security use-cases ready to use. Review collected by and hosted on G2.com.
Upside is, when you migrate from different tool, to learn specifics, eg. IP address stored in multiple fileds for ability to search either by text or regex. Review collected by and hosted on G2.com.
Elastic security provides key analytics of various hosts in a distributed architecture. It helps diagnose any anomalies or threats, allowing you to act fast and minimize potential loss. Review collected by and hosted on G2.com.
It could be pricier, so you might want to choose the appropriate hosts where the threat is more such as those in the edge layer of your network. Review collected by and hosted on G2.com.
Pricing provided by Elastic Security.