When comparing Rocana vs logFaces, the Slant community recommends Rocana for most people. In the question“What are the best log management, aggregation & monitoring tools?” Rocana is ranked 15th while logFaces is ranked 34th. The most important reason people chose Rocana is:
Beyond simple rules-based alerting, Rocana Ops creates statistical models for each of the metrics you want to track and evaluates as data streams in to provide nearly instantaneous feedback on how your systems are performing. Unique WARN (Weighted Analytic Risk Notifications) Scores indicate components that are trending to the good or bad. Users can create custom metrics, which get evaluated just the same as "out-of-the-box" metrics.
Ranked in these QuestionsQuestion Ranking
Pros
Pro Great "out-of-the-box" analytics
Beyond simple rules-based alerting, Rocana Ops creates statistical models for each of the metrics you want to track and evaluates as data streams in to provide nearly instantaneous feedback on how your systems are performing. Unique WARN (Weighted Analytic Risk Notifications) Scores indicate components that are trending to the good or bad. Users can create custom metrics, which get evaluated just the same as "out-of-the-box" metrics.
Pro Highly scalable
Collect and analyze multiple TBs of data per day, built on Hadoop components Rocana Ops is a highly-distributed system offering massive scalability using commodity hardware. Rocana has customers collecting 10+ TBs of log data per day.
Rocana One free option provides up to 1TB of daily data volume for free.
Pro Comes with its own very rich desktop application
Pro Fast support
Been using it for years. Never had a problem that could not be solved with a quick email. Support very fast and to the point.
Pro Own your log data
Logs never leave your premises unless you want them to.
Pro Allows extremely fast and flexible queries
Cons
Con Expensive
Appears to be an expensive solution.
Con Doesn't run on a laptop
Well, maybe you can squeeze Rocana Ops on a laptop, but it is designed as a highly-distributed, fault-tolerant system and requires a Hadoop distro as the underlying platform.