Comparison of log analysis products and APM products

The application performance management system APM (Application Performance Management) and the network performance management system NPM (Network Performance Management) both belong to ITOA (IT Operation Analytics).
APM monitors the performance and availability of specific software systems. Traditional APM obtains agent data (Agent Data) by embedding agents in the code, or uses probe data (Probe Data) to monitor and detect exceptions to analyze application performance; NPM analyzes application performance through the network Wire Data monitors system performance. As mentioned earlier, each of these data sources has pros and cons.
The value of logs is that they are everywhere: applications, operating systems , databases, and even hardware generate logs. The log analysis product does not need to embed plug-ins in these systems, and only needs to collect the logs of these systems for analysis, which is very convenient. APM or NPM systems also need to rely on log analysis to obtain more comprehensive system information. The log analysis platform can be used as a supplement to APM or NPM systems to provide more comprehensive and accurate application performance monitoring and network performance monitoring.
At present, the mainstream massive log analysis tools: ELK is open source, and paid: foreign ones include Splunk and Sumologic. There are logbooks in China.