What commercial and open source competitors are there to Splunk?

Question

It's difficult to find any. Please, no answers like scp + perl + duct tape. I need a complete solution.

Answer 1

The Google search appliance comes to mind.

Answer 2

Well, I don't there are any competitors right now with all the features of Splunk. However, for smaller feature sets, you could go with:

1. Chainsaw
2. Log Parser (Microsoft)

Answer 3

Something better than perl+scp+duct tape but that, sadly, still needs some development effort on your part, would be a generic text indexing + searching solution like Lucene + solr.

Answer 4

• LogLogic
• LogRhythm

[aside] Why do you want an alternative? I know some people at splunk. I'm sure they would like to hear the feedback.

Answer 5

Me too please!

Splunk is simply too expensive for me. We have 1 100 servers. They definitely generate more than 1 meg of log data per day each. Since our currency is about R7 to the dollar, a license would set me back the equivalent of a senior sysadmin's yearly salary.

Answer 6

how about paglo

Answer 7

Take a look at Octopussy (my project)

Answer 8

we have been trialing Logscape from Liquidlabs - its much cheaper than splunk, is really easy to use and has some unique features (use it for app dev and support on a grid app).

Answer 9

Check out Logscape from Liquidlabs

Answer 10

XpoLog if far better http://www.xpolog.com

Answer 11

On the commercial side, there is sawmill. On the opensource side, there is clarity, which is simple and, as the author says 'Remotely related to splunk' :).

Answer 12

Depending on what sort of functionality you're looking for, ArcSight Logger might work.

Answer 13

XpoLog as an alternative to splunk? Well, but not if you look at the pricing: The sell licenses by "CPU core generating data". And the prices for a single core start at 500$.