When comparing Rocana vs Rsyslog, the Slant community recommends Rsyslog for most people. In the question“What are the best log management, aggregation & monitoring tools?” Rsyslog is ranked 9th while Rocana is ranked 15th. The most important reason people chose Rsyslog is:
Rsyslog is a free and open source tool.
Specs
Ranked in these QuestionsQuestion Ranking
Pros
Pro Great "out-of-the-box" analytics
Beyond simple rules-based alerting, Rocana Ops creates statistical models for each of the metrics you want to track and evaluates as data streams in to provide nearly instantaneous feedback on how your systems are performing. Unique WARN (Weighted Analytic Risk Notifications) Scores indicate components that are trending to the good or bad. Users can create custom metrics, which get evaluated just the same as "out-of-the-box" metrics.
Pro Highly scalable
Collect and analyze multiple TBs of data per day, built on Hadoop components Rocana Ops is a highly-distributed system offering massive scalability using commodity hardware. Rocana has customers collecting 10+ TBs of log data per day.
Rocana One free option provides up to 1TB of daily data volume for free.
Pro Free and Open Source
Rsyslog is a free and open source tool.
Cons
Con Expensive
Appears to be an expensive solution.
Con Doesn't run on a laptop
Well, maybe you can squeeze Rocana Ops on a laptop, but it is designed as a highly-distributed, fault-tolerant system and requires a Hadoop distro as the underlying platform.
Con Difficult to configure
The config is not user friendly at all compared to syslog-ng
Con Not spread to many platforms
Rsyslog is only available for Linux and Solaris.