Amazon GuardDuty vs Kibana

Need advice about which tool to choose?Ask the StackShare community!

Amazon GuardDuty

64
59
+ 1
2
Kibana

20.5K
16.2K
+ 1
262
Add tool

Amazon GuardDuty vs Kibana: What are the differences?

What is Amazon GuardDuty? Continuous Security Monitoring and Threat Detection. It is a managed threat detection service that continuously monitors for malicious or unauthorized behavior to help you protect your AWS accounts and workloads. It monitors for activity such as unusual API calls or potentially unauthorized deployments that indicate a possible account compromise. It also detects potentially compromised instances or reconnaissance by attackers.

What is Kibana? Explore & Visualize Your Data. Kibana is an open source (Apache Licensed), browser based analytics and search dashboard for Elasticsearch. Kibana is a snap to setup and start using. Kibana strives to be easy to get started with, while also being flexible and powerful, just like Elasticsearch.

Amazon GuardDuty and Kibana can be primarily classified as "Monitoring" tools.

Some of the features offered by Amazon GuardDuty are:

  • Accurate, account-level threat detection
  • Continuous monitoring across AWS accounts without added cost and complexity
  • Threat detections developed and optimized for the cloud

On the other hand, Kibana provides the following key features:

  • Flexible analytics and visualization platform
  • Real-time summary and charting of streaming data
  • Intuitive interface for a variety of users

Kibana is an open source tool with 12.6K GitHub stars and 4.89K GitHub forks. Here's a link to Kibana's open source repository on GitHub.

Advice on Amazon GuardDuty and Kibana
Needs advice
on
GrafanaGrafana
and
KibanaKibana

From a StackShare Community member: “We need better analytics & insights into our Elasticsearch cluster. Grafana, which ships with advanced support for Elasticsearch, looks great but isn’t officially supported/endorsed by Elastic. Kibana, on the other hand, is made and supported by Elastic. I’m wondering what people suggest in this situation."

See more
Replies (7)
Recommends
on
GrafanaGrafana
at

For our Predictive Analytics platform, we have used both Grafana and Kibana

Kibana has predictions and ML algorithms support, so if you need them, you may be better off with Kibana . The multi-variate analysis features it provide are very unique (not available in Grafana).

For everything else, definitely Grafana . Especially the number of supported data sources, and plugins clearly makes Grafana a winner (in just visualization and reporting sense). Creating your own plugin is also very easy. The top pros of Grafana (which it does better than Kibana ) are:

  • Creating and organizing visualization panels
  • Templating the panels on dashboards for repetetive tasks
  • Realtime monitoring, filtering of charts based on conditions and variables
  • Export / Import in JSON format (that allows you to version and save your dashboard as part of git)
See more
Recommends
on
KibanaKibana

I use both Kibana and Grafana on my workplace: Kibana for logging and Grafana for monitoring. Since you already work with Elasticsearch, I think Kibana is the safest choice in terms of ease of use and variety of messages it can manage, while Grafana has still (in my opinion) a strong link to metrics

See more
Bram Verdonck
Recommends
on
GrafanaGrafana
at

After looking for a way to monitor or at least get a better overview of our infrastructure, we found out that Grafana (which I previously only used in ELK stacks) has a plugin available to fully integrate with Amazon CloudWatch . Which makes it way better for our use-case than the offer of the different competitors (most of them are even paid). There is also a CloudFlare plugin available, the platform we use to serve our DNS requests. Although we are a big fan of https://smashing.github.io/ (previously dashing), for now we are starting with Grafana .

See more
Recommends
on
KibanaKibana

I use Kibana because it ships with the ELK stack. I don't find it as powerful as Splunk however it is light years above grepping through log files. We previously used Grafana but found it to be annoying to maintain a separate tool outside of the ELK stack. We were able to get everything we needed from Kibana.

See more
Recommends
on
KibanaKibana

Kibana should be sufficient in this architecture for decent analytics, if stronger metrics is needed then combine with Grafana. Datadog also offers nice overview but there's no need for it in this case unless you need more monitoring and alerting (and more technicalities).

See more
Recommends
on
GrafanaGrafana

I use Grafana because it is without a doubt the best way to visualize metrics

See more
Povilas Brilius
PHP Web Developer at GroundIn Software · | 0 upvotes · 634.4K views
Recommends
on
KibanaKibana
at

@Kibana, of course, because @Grafana looks like amateur sort of solution, crammed with query builder grouping aggregates, but in essence, as recommended by CERN - KIbana is the corporate (startup vectored) decision.

Furthermore, @Kibana comes with complexity adhering ELK stack, whereas @InfluxDB + @Grafana & co. recently have become sophisticated development conglomerate instead of advancing towards a understandable installation step by step inheritance.

See more
Manage your open source components, licenses, and vulnerabilities
Learn More
Pros of Amazon GuardDuty
Pros of Kibana
  • 2
    Easy setup
  • 88
    Easy to setup
  • 65
    Free
  • 45
    Can search text
  • 21
    Has pie chart
  • 13
    X-axis is not restricted to timestamp
  • 9
    Easy queries and is a good way to view logs
  • 6
    Supports Plugins
  • 4
    Dev Tools
  • 3
    More "user-friendly"
  • 3
    Can build dashboards
  • 2
    Out-of-Box Dashboards/Analytics for Metrics/Heartbeat
  • 2
    Easy to drill-down
  • 1
    Up and running

Sign up to add or upvote prosMake informed product decisions

Cons of Amazon GuardDuty
Cons of Kibana
    Be the first to leave a con
    • 7
      Unintuituve
    • 4
      Works on top of elastic only
    • 4
      Elasticsearch is huge
    • 3
      Hardweight UI

    Sign up to add or upvote consMake informed product decisions

    - No public GitHub repository available -

    What is Amazon GuardDuty?

    It is a managed threat detection service that continuously monitors for malicious or unauthorized behavior to help you protect your AWS accounts and workloads. It monitors for activity such as unusual API calls or potentially unauthorized deployments that indicate a possible account compromise. It also detects potentially compromised instances or reconnaissance by attackers.

    What is Kibana?

    Kibana is an open source (Apache Licensed), browser based analytics and search dashboard for Elasticsearch. Kibana is a snap to setup and start using. Kibana strives to be easy to get started with, while also being flexible and powerful, just like Elasticsearch.

    Need advice about which tool to choose?Ask the StackShare community!

    Jobs that mention Amazon GuardDuty and Kibana as a desired skillset
    Postman
    San Francisco, United States
    What companies use Amazon GuardDuty?
    What companies use Kibana?
    Manage your open source components, licenses, and vulnerabilities
    Learn More

    Sign up to get full access to all the companiesMake informed product decisions

    What tools integrate with Amazon GuardDuty?
    What tools integrate with Kibana?

    Sign up to get full access to all the tool integrationsMake informed product decisions

    Blog Posts

    May 21 2019 at 12:20AM

    Elastic

    ElasticsearchKibanaLogstash+4
    12
    5305
    GitHubPythonReact+42
    49
    40945
    GitGitHubPython+22
    17
    14287
    GitHubMySQLSlack+44
    109
    50777
    What are some alternatives to Amazon GuardDuty and Kibana?
    CloudFlare
    Cloudflare speeds up and protects millions of websites, APIs, SaaS services, and other properties connected to the Internet.
    Amazon Macie
    Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data in AWS. Amazon Macie recognizes sensitive data such as personally identifiable information (PII) or intellectual property, and provides you with dashboards and alerts that give visibility into how this data is being accessed or moved.
    New Relic
    The world’s best software and DevOps teams rely on New Relic to move faster, make better decisions and create best-in-class digital experiences. If you run software, you need to run New Relic. More than 50% of the Fortune 100 do too.
    Grafana
    Grafana is a general purpose dashboard and graph composer. It's focused on providing rich ways to visualize time series metrics, mainly though graphs but supports other ways to visualize data through a pluggable panel architecture. It currently has rich support for for Graphite, InfluxDB and OpenTSDB. But supports other data sources via plugins.
    Sentry
    Sentry’s Application Monitoring platform helps developers see performance issues, fix errors faster, and optimize their code health.
    See all alternatives