getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categoriesBlog & researchAbout us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

SIEM Software for Linux

Last updated: March 2026

1 filter applied

Features

Integrated with

Pricing model

Devices supported

Organization types

User rating

35 software options

Datadog logo

Cloud-Scale Monitoring Platform For Dev, Sec, and Ops teams.

learn more
Secure your tech stack with Datadog Security Monitoring's real-time threat detection. Set up key security integrations in minutes; apply OOTB Detection Rules without a query language; and correlate security signals to investigate suspicious activity.

Read more about Datadog

Users also considered
Splunk Enterprise logo

Machine data management and analytics

learn more
Splunk Enterprise is a cloud-based platform designed to assist businesses with big data management and analysis of machine data. Key features include data visualization, performance metrics, data collection, real-time search, indexing, KPI tracking, reporting, and monitoring.

Read more about Splunk Enterprise

Users also considered
Elastic Stack logo

Distributed search and analytics solution

learn more
Reliably and securely take data from any source, in any format, then search, analyze, and visualize it in real time.

Read more about Elastic Stack

Users also considered
ConnectWise SIEM logo

Threat detection and response management software

learn more
ConnectWise SIEM is a threat detection and response management software designed to help enterprises create, launch, and manage cybersecurity programs. The platform enables organizations to identify potential threats and malicious activities across networks & connected devices via a unified portal.

Read more about ConnectWise SIEM

Users also considered
EventSentry logo

Real-time log & event log hybrid SIEM monitoring solution

learn more
EventSentry is a hybrid SIEM (security information & event management) solution which offers a range of tools including event log monitoring, reporting, health monitoring, compliance management, network monitoring, environment tracking, data consolidation, Active Directory integration & more

Read more about EventSentry

Users also considered
Graylog logo

Log Management | SIEM | API Security

learn more
Graylog is an open, AI-powered SIEM that helps security and IT teams detect threats faster, reduce alert noise, and control security data costs across cloud and on-prem environments.

Read more about Graylog

Users also considered
Logz.io logo

Machine data analytics based on ELK and Grafana

learn more
Unified platform for monitoring, troubleshooting and security based on ELK and Grafana.

Read more about Logz.io

Users also considered
ManageEngine Log360 logo

Comprehensive SIEM solution

learn more
ManageEngine Log360 is a log management and SIEM (security information and event management) platform which helps businesses to monitor and manage network security, audit Active Directory changes, log devices, and gain visibility into cloud infrastructures.

Read more about ManageEngine Log360

Users also considered
Logsign Unified SO Platform logo

Logsign Unified Security Operations Platform

learn more
Logsign Unified SO Platform delivers comprehensive threat detection, investigation, and response (TDIR) through integrated next-gen SIEM, threat intelligence, UEBA, and SOAR capabilities.

Read more about Logsign Unified SO Platform

Users also considered
Logmanager logo

Log management platform enhanced with SIEM capabilities

learn more
Tap into enterprise-grade security without drowning in complexity. Logmanager is a lightweight SIEM solution that offers essential features, effortless management, and flexibility, simplifying IT observability, security, and compliance.

Read more about Logmanager

Users also considered
Blumira logo

Automated SIEM + XDR for IT Teams

learn more
Blumira’s cloud SIEM can be deployed in hours with broad integration coverage across cloud, endpoint protection, firewall and identity providers including Office 365, G Suite, Crowdstrike, Okta, Palo Alto, Cisco FTD and many others.

Read more about Blumira

Users also considered
Elastic Security logo

Security at the speed of Elastic

learn more
Unify SIEM, endpoint security, and cloud security
Elastic Security modernizes security operations

Read more about Elastic Security

Users also considered
ALog Series logo

Server access log solution for finance and manufacturing

learn more
ALog ConVerter is a server logging solution from AMIYA Corporation, promising a new standard in server access monitoring and management for every industry

Read more about ALog Series

Users also considered
LogPoint logo

Accelerate threat detection and response with SIEM and UEBA

learn more
LogPoint's SIEM platform helps businesses secure data from threats & respond to cyberattacks in compliance with regulatory norms.

Read more about LogPoint

Users also considered
BusinessLOG logo

AI-powered log management, SIEM, compliance, DLP, and asset

learn more
Powerful network control and management features make Business LOG AI a next-generation log management and cybersecurity platform.

Read more about BusinessLOG

Users also considered
USM Anywhere logo

Threat detection and response software for IT security teams

learn more
USM Anywhere is a cloud-based threat detection and response software designed to help IT professionals automatically collect and analyze data across cloud, on-premise, and hybrid environments. Powered by Alien Labs, the platform lets security teams leverage data from leverages from the Open Threat Exchange (OTX) to gain threat intelligence.

Read more about USM Anywhere

Users also considered
FortiSIEM logo

SIEM platform with user and entity behavior analytics (UEBA)

learn more
FortiSIEM is a security Information and event management (SIEM) platform with user and entity behavior analytics (UEBA), which helps businesses prevent breaches, identify anomalies, aggregate security events, detect threats, and more through automated response and remediation. Supervisors can configure dashboards in real-time and track key performance indicators (KPIs) by scrolling through slideshows.

Read more about FortiSIEM

Users also considered
Security Event Manager logo

SIEM solution for small to large organizations

learn more
Security Event Manager is a security information and event management (SIEM) solution, which assists small to large organizations with threat detection and response management. Key features include event log forwarding, reporting, file integrity, and device monitoring.

Read more about Security Event Manager

Users also considered
Enginsight logo

ALL-IN-ONE SECURITY PLATFORM for SMEs

learn more
The Enginsight SIEM offers you real-time protection and comprehensive security information across all data sources. All software components work together and automatically enrich the SIEM with information from attack detection. Proactive protection instead of reactive logging.

Read more about Enginsight

Users also considered
Netsurion logo

Complete Cybersecurity Confidence

learn more
Complete managed security service and platform to predict, prevent, detect, and respond to threats across your entire business.

Avoid SIEM "shelfware" with a robust co-managed SIEM and 24/7 SOC.

Read more about Netsurion

Users also considered
ServicePilot logo

Continuous measurement of IT performance and security

learn more
ServicePilot is a high-performance monitoring software solution providing full-stack observability via metrics, traces, and logs. Businesses can collect data from IT infrastructure, networks, applications, and security services to streamline issue resolution.

Read more about ServicePilot

Users also considered
ManageEngine EventLog Analyzer logo

Web-Based SIEM & Log Management Solution. Affordable Prices.

learn more
EventLog Analyzer is a web-based security information and event management (SIEM) solution, which assists small to large organizations with the monitoring of network devices, servers and applications. Key features include auditing, traffic analysis, threat detection, and compliance management.

Read more about ManageEngine EventLog Analyzer

Users also considered
Quadrant XDR logo

Around-the-clock threat detection and response

learn more
Quadrant XDR is a cloud-based security analytics platform developed by Quadrant Managed Detection and Response. It is designed to provide businesses with around-the-clock threat detection and response, curated by the highest quality Security Analysts in the industry.

Read more about Quadrant XDR

Users also considered
Reveelium logo

Detection and response solution

learn more
Reveelium helps users reduce the impact of incidents by responding quickly to threats with behavioral analysis, threat Intelligence, correlation and alert prioritization.

Read more about Reveelium

Users also considered
MixMode logo

Self-learning Platform to Defend Against Cyber Attacks

learn more
MixMode is a dynamic attack detection solution purpose-built on patented AI to detect known and novel attacks in real-time, at scale. The MixMode Platform autonomously ingests and analyzes data at scale to cut through the noise, surface critical threats, and improve overall defense.

Read more about MixMode

Users also considered