Security Analysts Discuss SIEM’s – ElasticSearch/Logstash/Kibana vs ArcSight, Splunk, and more | Ski

+1 to Sam’s points. Right on target. One caveat to note is that Splunk in it’s current maturity (especially with the Enterprise Security app) is a lot closer to being “ready to go” out of the box. Since time is an issue, you may want to seriously consider

skizzlesec.com