Marg Unomaly

Unomaly offers great support both technically and with product success. They really put a lot of effort into helping us get value from the system.

We feel quite confident about adding lots of sources into Unomaly without needing to worry that this will result in a large increase of false positives. Even extremely spammy logs are quite fine to add to Unomaly.

We get alerted on Slack so it's pretty quick to monitor the alerts.

We found it difficult to integrate into our existing processes. Unomaly does have some linkages to external stuff, but we didn't have any proactive anomaly detection process in place.

Consider how you will bring its reports into your existing support processes.

We have a product that is built from several interlinking systems. Problems reported by users are not always directly attributable to a particular service. Unomaly helps to aggregate logging and detect potential problems.

It's also been useful with security stuff because irregular actions are also flagged up.

Makes finding anomalies in systems (logs look very easy, pretty much does all the work for you, and can be taught new stuff easily on the run. Can go through large amounts of data with no problems. Software is updated regularly, and user feedback is taken seriously.

Not many downsides to really mention, actually can't think of any at the moment... It's not free?

Give it a try, it's easy to set up.

Don't have to set up complex rules for log monitoring, or spending hours going through log files manually.

Excellent tool when you don't really know what you are looking for.

A bit strange with the different systems showing up.

To find situations that don't comply with the normal operations.

The best thing is the overview enabling us to act before things become an issue.

Setting up the system and adding nodes are done in minutes.

Should you ever run into an issue the Unomaly support will literally help you within minutes.

The updating of the server could be a bit smoother, from the web interface for instance.

If you try it, be prepared to buy it.

We get an overview of our systems that is not possible without this system.

Users reaching quotas, services not running are some of the things we pick up on very fast.

That it filters out the noise and shows what is relevant

A bit expensive but if it helps us prevent an attack it's worth it.

It is an extra layer of security. New events that are important are communicated and compliance with existing routines is checked. We are also using it to monitor scheduled jobs and audit logs.