compare
OpenObserve vs Security Onion
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | OpenObserve | Security Onion |
|---|---|---|
| Language | TypeScript | Shell |
| Licence | AGPL-3.0 | Other |
| Stars | 22k | 4.9k |
| Latest | v1.1.0-rc1 | 3.3.0-20260911 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 3 days between releases | about 24 days between releases |
| Active contributors | 43+ commit authors on the default branch in the last 90 days | 8 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Splunk. Alternatives to Splunk →
PartialOpenObserveLog search, dashboards and alerts.
PartialSecurity OnionNetwork and host security monitoring with alerting, hunting and case management, not general log analytics.
OpenObserve
- v1.1.0-rc12026-09-30Release v1.1.0-rc1
- v1.0.42026-09-24Release v1.0.4
- v1.0.32026-09-18Release v1.0.3
- v1.0.22026-09-17Release v1.0.2
- v1.0.12026-09-16Release v1.0.1
Security Onion
- 3.3.0-202609112026-09-11Add x86-64-v3 CPU pre-flight check to soup
- 3.3.0-202609082026-09-08Bump version from 3.2.0 to 3.3.0
- 3.2.0-202607292026-07-29Bump version from 3.1.0 to 3.2.0
- 3.1.0-202605282026-05-28Add version number to HOTFIX file
- 3.1.0-202605212026-05-21Version Bump
OpenObserve
unsigned The latest release, v1.1.0-rc1, carries no signature GitHub could verify.
Loading the security report
Security Onion
✓ signed The latest release, 3.3.0-20260911, carries a signature GitHub verified.
Loading the security report