Performance of ELK stack and commercial system in security log analysis

To utilize commercial security log analysis system, small or medium size companies meet big burden in pricing because the price is decided based on data volume to be processed in daily basis. And to build its own system with primitive Hadoop and MongoDB, etc. is too much complex and resource taking of time and man in the initial period. This paper suggests open source stack for the negotiation of these difficulties. We tested performance feasibility comparing with the 1^st market share commercial software. It shows reasonable performance in experiments.