1. SIEM in-house (no cloud) - Windows Event Log Aggregation (as well as syslog, custom logs)

2. Configurable Email Alerts on specific criteria in logs (event id's, text strings contained in events, about anything you could want)

3. The team at netikus is small and focused on security. I can tell they love their product. If you have a question, they get back to you the same day.

4. one-time perpetual license cost + affordable yearly ongoing maintenance Review collected by and hosted on G2.com.

There is nothing I really dislike about EventSentry at this time. You have to know going into it that it is an on-premise SIEM that you must configure to your tastes. In the beginning, there were some noisy Windows Events Logs that needed to be suppressed. You need to invest some time going through the documentation and youtube tutorials if you want to understand how it functions and tailor it to your environment. But that's the benefit, you can do so many things with it. I learned quite a bit about windows event logs by setting up everything. I continue to learn. Don't be scared though, the experts at Netikus can help you with onboarding and setting up the most important elements quickly. It just has so much to offer that I haven't began to touch the other cool things the software offers. Review collected by and hosted on G2.com.

I really like ADMonitor and the Security & Compliance features in EventSentry. ADMonitor lets me monitor changes to anything within our Active Directory environment, including Group Policy, which I appreciate a lot. The Validation Scripts checking for compliance and whether certain requirements are set in place yet or still incomplete is a major boost to monitoring our compliance with certain security requirements for our company. There is also a Registry monitor area that watches for changes made to it and notifies administration, overall its been a great help. Review collected by and hosted on G2.com.

One downside I’ve run into is that, without the proper knowledge of how to use the system, it isn’t easy to create our own custom packages to monitor specific apps or custom systems within our devices. I would like if there was a way to Exclude in the filter section when reviewing things (e.g. logs) in ES Web Reports. For Example, if I select two items to put in the filter it will insert something like "computer:PC-01 AND type: Workstation" but when I go into deeper filters like for logs it gets hard adding exclusions to it. Review collected by and hosted on G2.com.

I think the cost is the biggest factor, especially for small businesses. It has unlimited connections for a small fee and doesn’t cost an arm and a leg like other cloud-based solutions. The price is very transparent, which I really appreciate. Also, the initial setup was pretty easy; it was a simple install on a standalone computer and took us less than half an hour to get it going. Setting up the controls, audit, and alerts took another couple of hours, but we were all set in that time. We were able to get perfect 110 Score for a federal customer on their CMMC Level 2 assessment. Review collected by and hosted on G2.com.

I think it's missing two-factor authentication for logging in, so we had to find a way around it. However, that was a small thing, it wasn't really a big roadblock for us. And the other thing could be that there's a slight learning curve, but that's the case for any solution out there. Review collected by and hosted on G2.com.

EventSentry is very feature rich and customizable. It covers all the bases of a SIEM and has numerous add-on features to make it even more useful. All this at a great price point. Review collected by and hosted on G2.com.

Nothing really. You want to have some foundational IT knowledge to implement and use EventSentry. Their support is great, but I would recommend having true IT resources available to implement. Review collected by and hosted on G2.com.

The local endpoint agent is easily my favorite part of the platform. It’s genuinely hard to find monitoring software that offers such a granular, comprehensive view into what’s happening on a local machine—covering everything from deep security auditing to everyday system behavior and overall hardware health. Review collected by and hosted on G2.com.

The initial configuration is definitely on the complex side, especially when trying to fine-tune granular machine audit policies. We’ve also run into occasional stability hiccups and some maintenance headaches with the database backend when using the bundled PostgreSQL option. Review collected by and hosted on G2.com.

The log management and monitoring tools are exceptionally strong, particularly in how seamlessly they connect our on-premise infrastructure with our cloud data sources. The built-in data visualization also makes it easy to interpret complex log entries quickly, which has noticeably improved our incident response during active security events. Review collected by and hosted on G2.com.

The official documentation can sometimes feel a bit thin, or simply hard to navigate, especially when I’m trying to configure more advanced workflows. I’ve also run into cases where the first level of customer support struggled with deeper, highly technical product questions, which meant a bit of extra back-and-forth before I could get the right answer. Review collected by and hosted on G2.com.

It delivers strong results at a fraction of the cost of most typical platforms. It handles standard log aggregation well, but where it really shines is in tackling specific, niche monitoring tasks when you put it to that use. Review collected by and hosted on G2.com.

There’s definitely an initial learning curve when it comes to mastering the configuration logic. You also need to stay on top of ongoing maintenance, such as regularly backing up your policies and rolling out agent updates. Review collected by and hosted on G2.com.

The sheer amount of detail it reveals about the domain and the network. All easy to find and the default dashboard shows how the network is running at a glance. Review collected by and hosted on G2.com.

It lacks a NIST 800-171 panel in contrast to its CMMC2 capability Review collected by and hosted on G2.com.

EventSentry is a complete log file aggregator. It easily lets me receive alerts that are important to me and not receive ones that are not. I have been using this product for 18 years. It simply cannot be beat for the price and performance. In addition, their support is world-class! When you call their support, something is about to get fixed! Implementation is simple. The product does not require a huge amount of resources. In fact, I use a recently decommissioned server to host the product. It is easy to deploy the agent from the central console with one or two clicks. I have a large display in my office that watch throughout the day. The display shows me metrics that are important to me so that I may stay aware of what is happening on my network. Review collected by and hosted on G2.com.

Honestly, there is nothing not to like about this product! Review collected by and hosted on G2.com.

The setup process is straightforward, and it offers an impressive range of possibilities for monitoring our servers and desktops. Review collected by and hosted on G2.com.

Sometimes it requires a bit of trial and error to achieve what you’re trying to accomplish. Review collected by and hosted on G2.com.