Telegraf vs Tenzir
Telegraf
influxdata.com
Tenzir
tenzir.comSide by side
| Figure | Telegraf | Tenzir |
|---|---|---|
| Price from | $1,500/mo | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 4 | 3 |
| Spec score · Telemetry Pipeline Software | 8.7 (#3) | 7.4 (#22) |
| Deployment | Telegraf Controller is self-hosted as a single binary and runs on macOS, Linux, and Windows. | Tenzir nodes run in the customer's environment, while the Community and Enterprise platforms are hosted by Tenzir in AWS in Europe; Sovereign allows platform self-hosting. |
| Intended users | The open source edition is described as optimal for personal, small, and simple data pipelines. | The pricing page describes Community for home labbers, researchers, and curious data hackers, Enterprise for enterprises and service partners, and Sovereign for on-premises needs and service providers. |
| Maker | Telegraf is built by InfluxData, which says it was founded in 2012. | The maker is Tenzir GmbH, registered in Hamburg, Germany. |
| Support | Enterprise Support offers Gold-level SLAs, expert troubleshooting for Telegraf Controller and official plugins, and guaranteed response times. | Community includes community support, Enterprise includes 24x7 support and SLAs, and Sovereign includes dedicated support. |
| What it does | Telegraf is an open-source agent that collects infrastructure, application and device metrics and sends them to destinations through plugins. | Tenzir is a data pipeline engine for security teams to collect, transform, enrich, and route security telemetry. |
Plans
Telegraf
- Telegraf (open source)Free
- Telegraf OSSFree
- Telegraf Enterprise$18,000 a year
- Telegraf Enterprise$18,000 a year
In their own words
Tenzir
Tenzir is a data pipeline engine for security teams collecting, transforming, enriching, and routing telemetry. Its stages cover collection, parsing, shaping, normalization, optimization, protection, enrichment, analysis, detection, storage, search, routing, and replay. Vendor fields can be mapped to OCSF, ASIM, ECS, CIM, UDM, or a custom schema. Pipelines may drop unqueried data and deduplicate repeated events to reduce storage and analyst noise. Protect supports encryption, pseudonymization, anonymization, masking, salted hashes, redaction, and field dropping. The integrations directory lists 173 integrations, including Amazon S3, Amazon Security Lake, Amazon SQS, Azure Blob Storage, Azure Event Hubs, and ArcSight. Nodes run in the customer environment; Community and Enterprise platforms are hosted by Tenzir in AWS in Europe. Sovereign supports self-hosting and fully air-gapped deployments. Community costs nothing.