Best Log Management Software in China
View:
Compare the Top Log Management Software in China as of July 2025
Sort By:
What is Log Management Software in China?
Log management software is an efficient way to help organizations keep track of their data and ensure that it remains secure. Logs are a record of activities, such as access attempts, system configuration changes, and security-related events. By monitoring these logs, organizations can detect malicious activity and take corrective action more quickly. Log management software helps companies store log data in a centralized repository for easier analysis, thus reducing the time required to investigate and respond to incidents. Additionally, log management systems provide advanced analytics capabilities that allow users to easily identify trends or suspicious patterns across multiple sources of data. Compare and read user reviews of the best Log Management software in China currently available using the table below. This list is updated regularly.
-
1
ConnectWise SIEM
ConnectWise
ConnectWise SIEM (formerly Perch) offers threat detection and response backed by an in-house Security Operations Center (SOC). Defend against business email compromise, account takeovers, and see beyond your network traffic. Our team of threat analysts does all the tedium for you, eliminating the noise and sending only identified and verified treats to action on. Built with multi-tenancy, ConnectWise SIEM helps you keep clients safe with the best threat intel on the market.Starting Price: $10 per month -
2
ManageEngine EventLog Analyzer
ManageEngine
ManageEngine EventLog Analyzer is an on-premise log management solution designed for businesses of all sizes across various industries such as information technology, health, retail, finance, education and more. The solution provides users with both agent based and agentless log collection, log parsing capabilities, a powerful log search engine and log archiving options. With network device auditing functionality, it enables users to monitor their end-user devices, firewalls, routers, switches and more in real time. The solution displays analyzed data in the form of graphs and intuitive reports. EventLog Analyzer's incident detection mechanisms such as event log correlation, threat intelligence, MITRE ATT&CK framework implementation, advanced threat analytics, and more, helps spot security threats as soon as they occur. The real-time alert system alerts users about suspicious activities, so they can prioritize high-risk security threats.Starting Price: $595 -
3
Site24x7
ManageEngine
ManageEngine Site24x7 is a comprehensive observability and monitoring solution designed to help organizations effectively manage their IT environments. It offers monitoring for back-end IT infrastructure deployed on-premises, in the cloud, in containers, and on virtual machines. It ensures a superior digital experience for end users by tracking application performance and providing synthetic and real user insights. It also analyzes network performance, traffic flow, and configuration changes, troubleshoots application and server performance issues through log analysis, offers custom plugins for the entire tech stack, and evaluates real user usage. Whether you're an MSP or a business aiming to elevate performance, Site24x7 provides enhanced visibility, optimization of hybrid workloads, and proactive monitoring to preemptively identify workflow issues using AI-powered insights. Monitoring the end-user experience is done from more than 130 locations worldwide.Starting Price: $9.00/month -
4
groundcover
groundcover
Cloud-native Log Management Stream, store and query your logs at any scale, for a fixed cost. Scale high Our Log Management solution is built for high scale and fast query performance so you can analyze logs quickly and effectively from all across your cloud environment. Gain context Each log data is enriched with actionable context and correlated with relevant metrics and traces in one single view so you can find what you’re looking for and troubleshoot, faster. Centralize to maximize groundcover is a centralized log management that lets you log without limits. Store everything, and pay the same - regardless of the volumes of logs you store or query. Your data, your call.Starting Price: $20/month/node -
5
ManageEngine Log360
Zoho
Log360 is a one-stop solution for all your log management and network security challenges. This tightly-integrated solution combines the capabilities of ADAudit Plus, EventLog Analyzer, O365 Manager Plus, Exchange Reporter Plus, and Cloud Security Plus. With a versatile combination like this, you'll gain complete control over your network; you'll be able to audit Active Directory changes, network device logs, Microsoft Exchange Servers, Microsoft Exchange Online, Azure Active Directory, and your public cloud infrastructure all from a single console. Monitor and audit critical Active Directory changes in real time. Meet stringent requirements of regulatory mandates such as PCI DSS, FISMA, HIPAA, SOX, GLBA, GPG 13, and the GDPR by means of readily available reports. Receive exhaustive information in the form of audit reports on critical events in Azure Active Directory and Exchange Online. -
6
Netwrix Auditor
Netwrix
Netwrix Auditor is a visibility platform that enables control over changes, configurations and access in hybrid IT environments and eliminates the stress of your next compliance audit. Monitor all changes across your on-prem and cloud systems, including AD, Windows Server, file storage, databases, Exchange, VMware and more. Simplify your reporting and inventory routines. Regularly review your identity and access configurations, and easily verify that they match a known good state. -
7
ManageEngine Firewall Analyzer
ManageEngine
Firewall Analyzer helps manage and optimize firewall policies, automates firewall rule administration, tracks configuration, rule changes, helps schedule configuration backup, executes regular compliance audit checks, performs periodic security audits, generates real-time alerts for security events, tracks VPN usage, generates VPN reports, displays the current security status of firewalls, tracks employee internet usage, monitors to generate live, historical bandwidth reports, alerts when bandwidth is exceeded, collects, consolidates, and analyzes firewall logs to generate security, bandwidth reports.Starting Price: $395 -
8
New Relic
New Relic
There are an estimated 25 million engineers in the world across dozens of distinct functions. As every company becomes a software company, engineers are using New Relic to gather real-time insights and trending data about the performance of their software so they can be more resilient and deliver exceptional customer experiences. Only New Relic provides an all-in-one platform that is built and sold as a unified experience. With New Relic, customers get access to a secure telemetry cloud for all metrics, events, logs, and traces; powerful full-stack analysis tools; and simple, transparent usage-based pricing with only 2 key metrics. New Relic has also curated one of the industry’s largest ecosystems of open source integrations, making it easy for every engineer to get started with observability and use New Relic alongside their other favorite applications.Starting Price: Free -
9
Datadog
Datadog
Datadog is the monitoring, security and analytics platform for developers, IT operations teams, security engineers and business users in the cloud age. Our SaaS platform integrates and automates infrastructure monitoring, application performance monitoring and log management to provide unified, real-time observability of our customers' entire technology stack. Datadog is used by organizations of all sizes and across a wide range of industries to enable digital transformation and cloud migration, drive collaboration among development, operations, security and business teams, accelerate time to market for applications, reduce time to problem resolution, secure applications and infrastructure, understand user behavior and track key business metrics.Starting Price: $15.00/host/month -
10
Query Inside
Queryinside
queryinside – All-in-One AI-Powered Analytics Platform Overview: queryinside is a powerful AI-powered business analytics platform that helps you monitor, track, and analyze user behavior across your websites, web apps, or internal datasets. It’s designed to make data easy to search, understand, and act on—without needing technical skills or writing complex queries. With queryinside, you get real-time insights into user activity, search trends, page views, clicks, and custom events—all from a simple, user-friendly dashboard. It’s a perfect solution for businesses, developers, marketers, and analysts looking to make smarter, data-driven decisions. Main Features: 🔍 AI-Powered Search Analytics: Understand what your users are searching for in real time. Get metrics like total queries, top search terms, average daily queries, click-through rates, and more. 📊 Page Analytics: Track visitor behavior across different pages. See page views, engagement, and traffic trends withStarting Price: $10 -
11
Graylog
Graylog
Built on the Graylog Platform, Graylog Security is the industry’s best-of-breed threat detection, investigation, and response (TDIR) solution. It simplifies analysts’ day-to-day cybersecurity activities with an unmatched workflow and user experience while simultaneously providing short- and long-term budget flexibility in the form of low total cost of ownership (TCO) that CISOs covet. With Graylog Security, security analysts can: 1. Decrease risk and metrics like mean time to detect (MTTD) by aligning threat detection coverage to meet your security objectives 2. Reduce TCO with native data routing and data tiering functionality 3. Reduce key metrics like mean time to respond (MTTR) by quickly resolving the alerts that matter. Graylog Security is a robust, scalable solution that empowers analysts to detect and respond to cybersecurity threats efficiently. With integrated SOAR functionality, it automates repetitive tasks, orchestrates workflows, and accelerates incident response.Starting Price: $1550/month (10GB per day) -
12
ELM Enterprise Manager
Fire Mountain Software
Server Monitoring and Event Log Management for enterprise operations. ELM is a proven, premise based solution in high security industries and environments such as DOD, DOE, PSAPs, Finance and Healthcare. Real-time monitoring, alerting, and reporting is what we do. Smart Monitoring Software. Endless Possibilities.Starting Price: $155/server -
13
Edge Delta
Edge Delta
Edge Delta is a new way to do observability that helps developers and operations teams monitor datasets and create telemetry pipelines. We process your log data as it's created and give you the freedom to route it anywhere. Our primary differentiator is our distributed architecture. We are the only observability provider that pushes data processing upstream to the infrastructure level, enabling users to process their logs and metrics as soon as they’re created at the source. We combine our distributed approach with a column-oriented backend to help users store and analyze massive data volumes without impacting performance or cost. By using Edge Delta, customers can reduce observability costs without sacrificing visibility. Additionally, they can surface insights and trigger alerts before data leaves their environment.Starting Price: $0.20 per GB -
14
Vector by Datadog
Datadog
Collect, transform, and route all your logs and metrics with one simple tool. Built in Rust, Vector is blistering fast, memory efficient, and designed to handle the most demanding workloads. Vector strives to be the only tool you need to get observability data from A to B, deploying as a daemon, sidecar, or aggregator. Vector supports logs and metrics, making it easy to collect and process all your observability data. Vector doesn’t favor any specific vendor platforms and fosters a fair, open ecosystem with your best interests in mind. Lock-in free and future proof. Vector’s highly configurable transforms give you the full power of programmable runtimes. Handle complex use cases without limitation. Guarantees matter, and Vector is clear on which guarantees it provides, helping you make the appropriate trade-offs for your use case.Starting Price: Free -
15
ALog SMASH
AMIYA
ALog SMASH is a server access log product that records "when, who, and what" for Windows servers. Since it is installed directly on the file server, there is no need for a manager server dedicated to log management. With ALog SMASH, compact log management can be achieved quickly. The database and report/alert functions are all standard equipment. There is no additional cost. With 1-year of maintenance support. Everything from log search/report to system settings can be operated on the browser. Also equipped with a log translation function unique to the ALog series. You no longer have to spend time decrypting the event log. You can flexibly search the collected logs with an intuitive GUI. Designed for long-term log storage. Logs are automatically compressed up to about 1/4000. You can rest assured that you have ALog SMASH.Starting Price: $1740.00/one-time/user -
16
Blesk
Prival
blësk is the only all in one solution available on the market that performs all aspects of network monitoring from a single machine. The solution provides fast, scalable deployments and a high ROI. It’s the industry’s first monitoring application to integrate major Open Source monitoring technologies that are used throughout the world in a single and very easy-to-use application. blësk layers are added on top bringing enhanced features and a uniform graphical interface. Identify and resolve issues that cause applications to be down for your users. Quick detection of network failures, protocol failures, service failures, process and batch tasks, and alerts on SNMP traps. Trace serial data such as CPU load or bandwidth usage. Collect, analyze, and measure performance data for SNMP compliant devices in near real-time. Prediction of saturation, classification of the interface ports by use and calculation of the losses and latencies of different equipment.Starting Price: $1300.00/year -
17
Atatus
NamLabs Technologies
NamLabs Technologies is an Indian software company that publishes a software suite called Atatus. Atatus is a SaaS software & a full stack observability platform. It provides a wide range of monitoring capabilities including Application Performance Monitoring, Real-User Monitoring/ End User Monitoring/ Browser Monitoring, Synthetic Monitoring, Infrastructure Monitoring, Logs Monitoring, and API Analytics. Analyze the performance of your application for performance issues such as slow transactions, database queries, website availability, uptime, latency, response time, and throughput, much more. 24x7 customer support is guaranteed.Starting Price: $49.00/month -
18
SolarWinds Security Event Manager
SolarWinds
Improve your security posture and quickly demonstrate compliance with a lightweight, ready-to-use, and affordable security information and event management solution. Security Event Manager (SEM) will be another pair of eyes watching 24/7 for suspicious activity and responding in real time to reduce its impact. Virtual appliance deployment, intuitive UI, and out-of-the-box content means you can start getting valuable data from your logs with minimal expertise and time. Minimize the time it takes to prepare and demonstrate compliance with audit proven reports and tools for HIPAA, PCI DSS, SOX, and more. Our licensing is based on the number of log-emitting sources, not log volume, so you won’t need to be selective about the logs you gather to keep costs down.Starting Price: $3800 one-time fee -
19
CruzLog
Dorado Software
Next-gen log collection, analysis and visualization for improved troubleshooting, managing compliance, and IT security. CruzLog is a set of integrated, and flexible tools for IT administrators and operators to collect, filter, analyze, visualize, and manage network, server and application logs for issue tracking, auditing, and compliance. CruzLog adds comprehensive log collection, data management, and detailed visualization to Cruz Operations Center's (CruzOC) expansive suite of IT resource management features. Together, they provide a single console management product for managing datacenter and network operations of today's converging infrastructures. Fully integrated with Cruz Operations Center (CruzOC), infrastructure management for IT/IOT resources, results in comprehensive and automated problem resolution from a single pane-of-glass. Store, analyze, and visualize resource management data with log management to improve troubleshooting, IT security, and compliance.Starting Price: $1350 -
20
Fortra Event Manager
Fortra
Real-time cybersecurity insight and response platform. As threats grow more sophisticated, speed is essential. Risks need to be identified and addressed before damage can occur. Fortra's SIEM software, Event Manager, prioritizes security risks in real time. Automated escalation and streamlined incident response with security event management fast-tracks your response time and resolution. Organizations today collect more security data than ever. Many security events require little to no attention, but serious issues require a rapid response. In that sea of security data, it's easy for important information to be overlooked. Event Manager reduces alert fatigue by identifying and escalating critical security events, enabling security analysts to respond quickly and effectively. In addition to default settings filtering out insignificant information or benign threats, users can fine tune the data they see, and add inclusion/exclusion rules about what exactly should be processed. -
21
Humio
Humio
Log everything, answer anything in real-time. Modern log management with streaming observability and affordable Unlimited Plans. Humio is built to ingest and retain streaming data as quickly as it arrives, regardless of volume. Alerts, scripts, and dashboards are updated in real-time, and live tail and retained data searches have virtually no latency. Humio is index-free, and it works with any structured or unstructured data format. Because you don’t need to define fields upfront, you can ask any question with live or archived data, and experience blazing-fast response. Humio offers affordable licenses and industry-leading Unlimited Plans. Its advanced compression and use of bucket storage saves up to 70% on compute and storage costs. And Humio deploys in minutes and requires little maintenance. Humio ingests unlimited data at any throughput to provide the full data set needed to detect and respond to any incident. -
22
CybrHawk SIEM XDR
CybrHawk
CybrHawk is a leading provider of information security-driven risk intelligence solutions focused solely on protecting clients from cyber-attacks. We also pioneered an integrated approach that provides a wide range of cyber security solutions for organizations of varying size and complexity. Our solutions enable organizations to define their cyber defences to prevent security breaches, detect real-time malicious activity, prioritize and respond quickly to security breaches, and predict emerging threats. CybrHawk XDR provides all the critical tools: IDS, intelligence risk, behavior, machine learning & cloud info. The goal is to provide the entire enterprise with full and total control systems. -
23
IIS Inspector
IIS Inspector
Capture detailed information for every request without the need for log files. IIS Inspector does not use log files, it uses ETW instead. Capture both execution time and flush time (the time it takes to send a response to the client) for each request. Capture CPU, memory, .NET exceptions, app pool recycles, bandwidth, and much more. Understand the performance of any website hosted in IIS, including ASP.NET and PHP. IIS Inspector reports Microsoft IIS KPIs to Elasticsearch, which is visualized by Kibana. IIS Inspector comes with default visualizations, but you can easily create your own. Thanks to the power of Kibana, you can quickly Discover and Visualize verbose request information captured from Microsoft IIS by IIS Inspector. You can also create your own custom alerts using Elasticsearch's watcher. IIS Inspector comes with several default watch definitions to make it easy to get started. IIS Inspector gives you the detailed output of what Microsoft IIS is caching and compressing.Starting Price: $15.98 one-time payment -
24
Syslog-ng
Balabit
Syslog-ng is a reliable, scalable, secure central log management solution. With syslog-ng, IT teams can collect and centralize log data in regards to user activity, performance metrics, network traffic, and more. This helps remove data silos and lets teams gain full-stack visibility in to their log data. Syslog-ng features secure transfer and storage of data, scalable architecture, flexible log routing, real time transformation, and more. The platform is available in open source and enterprise editions. -
25
Gravwell
Gravwell
Gravwell is an all-you-can-ingest data fusion analytics platform that enables complete context and root cause analytics for security and business data. Gravwell was founded to bring the benefits of usable machine data to all customers: large or small, text or binary, security or operational. When experienced hackers and big data experts team-up you get an analytics platform capable of things never seen before. Gravwell enables security analytics that go well beyond log data into industrial processes, vehicle fleets, IT infrastructure, or everything combined. Need to hunt down a suspected access breach? Gravwell can correlate building access logs and run facial recognition machine learning against camera data to isolate multiple subjects entering a facility with a single badge-in. We exist to provide analytics capabilities to people who need more than just text log searching and need it sooner rather than later at a price they can afford. -
26
CRYPTOLOG
Crypttech
One of the major needs of businesses is a convenient log management system that collects logs of the IT systems in the organization and analyzes them to meet legal regulations and industry standards. CRYPTOLOG complies with public & sectoral requirements and offers unified and easy-to-use search, analysis, correlation options that can be customized to the needs and size of the IT systems. CRYPTOLOG makes it easy to identify potential security threats from log data to conduct forensic investigations. CRYPTOLOG is a cost-effective integrated log management system that helps you meet regulatory compliance on the one hand, while reducing your security risks in a variety of IT environments. With its fast and powerful engines, CRYPTOLOG brings together a wide range of log and events to give you a comprehensive view of all your network activities on a customizable panel.
- Previous
- You're on page 1
- Next