--- title: LogRhythm SIEM Reviews meta\_title: 'LogRhythm SIEM Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 152 reviews by the users' company size, role or industry to find out how LogRhythm SIEM works for a business like yours. aggregate\_rating: rating\_value: 4.2 review\_count: 152 scale: '5' date\_modified: '2026-08-09' parent\_category: name: System Security url: https://www.g2.com/categories/system-security --- # LogRhythm SIEM Reviews & Product Details Claimed ###### Profile Status This profile is currently managed by LogRhythm SIEM but has limited features. Are you part of the LogRhythm SIEM team? [Upgrade your plan](https://sell.g2.com) to enhance your branding and engage with visitors to your profile! Rapidly deploy LogRhythm SIEM, the leading self-hosted SIEM, to secure your organization with powerful detections, synchronized threat intelligence, automated workflows, and achieve faster, more accurate threat detection, investigation, and response (TDIR). * * * Seller [Exabeam](https://www.g2.com/sellers/exabeam) Discussions [LogRhythm SIEM Community](https://www.g2.com/products/exabeam-logrhythm-siem/discuss) Languages Supported English Solution Type All-in-One Overview by Ianni Le Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 18 months [ View More Pricing Information ](https://www.g2.com/products/exabeam-logrhythm-siem/pricing) ## Top-Rated Alternatives [ ![Sumo Logic](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sumo Logic") Sumo Logic 4.3/5(404) ](https://www.g2.com/products/sumo-logic/reviews) [ ![IBM QRadar SIEM](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "IBM QRadar SIEM") IBM QRadar SIEM 4.4/5(338) ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) [ ![Microsoft Sentinel](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Microsoft Sentinel") Microsoft Sentinel 4.4/5(297) ](https://www.g2.com/products/microsoft-sentinel/reviews) [ View All Alternatives ](https://www.g2.com/products/exabeam-logrhythm-siem/competitors/alternatives) ## User Insights Average based on 152 real user reviews. Implementation Time 2 months Perceived Cost $$$$$ [Log in to unlock pricing and user insights](/login) ![Mark S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Mark S.") MS Mark S. Infrastructure Engineer Mid-Market (51-1000 emp.) 4/23/2020 "LogRhythm is a worthwhile investment to get detailed analytics of your network" 4.5/5 What do you like best about LogRhythm SIEM? LogRhythm is very flexible, you can either run it virtually, on your own hardware or using an Appliance. It is straightforward to set up exactly how you want it, whether you are an IT department or a stand-alone SOC. Review collected by and hosted on G2.com. What do you dislike about LogRhythm SIEM? Its power and flexibility can be overwhelming at times, but this is the nature of a mature SIEM solution, and therer is always LogRhythm Support or 3rd party implementation services available to assist with any query. Review collected by and hosted on G2.com. What problems is LogRhythm SIEM solving and how is that benefiting you? We were looking to align our network monitoring with the requirements for UK GPG13 and needed a centralised platform for monitoring. As we were a department of 7, it needed to be set and "forget" with little hands-on work other than reviewing alerts. As a test, we wanted to capture users logging onto the system, so we set a filter up for usernames longer than 4 characters and found users were accidentally typing passwords into the username field. We educated users to be careful when logging in and the number of instances were reduced. We also had actionable reports on alerts from the systems and we were then able to confirm whether or not the reports required actioning. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Jiban Jyoti R.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Jiban Jyoti R.") JR Jiban Jyoti R. Information Security Analyst Enterprise (\> 1000 emp.) 4/17/2020 "User friendly & one of the good SIEM product" 4/5 What do you like best about LogRhythm SIEM? As an Analyst, I liked the WEB-UI of LogRhythm. Dashboards are very useful in investigating an alert. You can also create custom dashboard with some awesome widgets. Quick drill-down log search. Case management is also an advanced feature to track-down incidents & escalation. The AIE alarm rule is very useful in defining the complex use-cases to detect various attack methods. The product architecture & components are very well designed to adapt all varieties of business needs. Review collected by and hosted on G2.com. What do you dislike about LogRhythm SIEM? The product was not stable, I have seen several component failure randomly, due to the capacity & log processing. I have seen frequent upgrades to fix issues. May be it was the capacity limitation in my organisation. Review collected by and hosted on G2.com. Recommendations to others considering LogRhythm SIEM: LogRhythm SIEM is one of the best product, can be used to achieve high fidelity security context. Review collected by and hosted on G2.com. What problems is LogRhythm SIEM solving and how is that benefiting you? I have used LogRhythm to investigate security alerts & troubleshoot silent log sources. LogRhythm community has some good documents to help you troubleshoot issue. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Chetan G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Chetan G.") CG Chetan G. Team Lead - Security Architect Mid-Market (51-1000 emp.) 6/18/2020 "Just another SIEM with fancy Dashboards" 3/5 What do you like best about LogRhythm SIEM? - Logrhythm is very easy to deploy - Log source monitoring and administration is very flexible and easy to configure. - Huge Library of OOB connectors - Endpoint Forensic collection is very easy through its System Monitor Agents - Log visualization and threat hunting is very easy and flexible. - Logrhythm community is very good resource for customers, partners and administrators Review collected by and hosted on G2.com. What do you dislike about LogRhythm SIEM? - frequent SIEM breakdowns, Stability issues. - Rule based correlation heavily dependent on Analyst skills. - Performance impact if large set of data is visualized on WebUI. Review collected by and hosted on G2.com. Recommendations to others considering LogRhythm SIEM: Logrhythm has excellent integration and visualization capabilities, but lack on advance correlation, machine learning analytics and UEBA capabilities. Review collected by and hosted on G2.com. What problems is LogRhythm SIEM solving and how is that benefiting you? Compliance regulations Forensic Investigation Benefits - Provides complete visibility to Security Operations team Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite TR Thivaharan R. Mid-Market (51-1000 emp.) 7/15/2020 "LogRythm is a good addition to an organizations security infrastructure" 5/5 What do you like best about LogRhythm SIEM? LogRythm NextGen SIEM is a very useful addition to the security infrastructure. Through LogRythm it is possible to monitor all the devices within the network and get real-time alerts regarding security incidents. Investigating a security incident through LogRythm is very easy because the tool grabs the necessary information and provides it to the user. The suggested response increases the speed of the response. LogRythm also has very interactive interfaces which make it easy to use. Review collected by and hosted on G2.com. What do you dislike about LogRhythm SIEM? There is nothing bad to say about this product. Review collected by and hosted on G2.com. Recommendations to others considering LogRhythm SIEM: I would recommend LogRythm for use in an organizational enviornment. Review collected by and hosted on G2.com. What problems is LogRhythm SIEM solving and how is that benefiting you? LogRythm allows us to easily monitor, track and resolve security incidents. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Girish V.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Girish V.") GV Girish V. Architect - Cloud Services Mid-Market (51-1000 emp.) 4/23/2020 "In the world of AI, helping customer provide security and correlation." 5/5 What do you like best about LogRhythm SIEM? Their simple to us interface and AI building blocks are something that we helps companies focus on their security threat vector. The other thing is they keep on innovating themselves. I love their work from TAC. They provide a good support from their team with expert but it’s for US TAC only. Review collected by and hosted on G2.com. What do you dislike about LogRhythm SIEM? The challenge on keeping their products updated along with complex design architecture is some thing that is challenging. However, this is not a blocker as this makes their design scalable. But i also don’t like the approach of documentation as it is clear on how to get things done easily. Review collected by and hosted on G2.com. Recommendations to others considering LogRhythm SIEM: I would recommend this product only when you think you can develop sufficient expertise both on its software and have an in house SQL guy who can help you maintain database performance. Review collected by and hosted on G2.com. What problems is LogRhythm SIEM solving and how is that benefiting you? Correlation. Threat Vector Identification as well as automation. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Valon J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Valon J.") VJ Valon J. Mid-Market (51-1000 emp.) 3/24/2020 "Spinning Its Own Wheels" 3.5/5 What do you like best about LogRhythm SIEM? The UI is sleek and program runs smoothly. It's a great program when it comes to providing actionable events to respond to. It helps demystify logs and makes them easier to digest. Review collected by and hosted on G2.com. What do you dislike about LogRhythm SIEM? Too many false positives paired with not as many needed options to reduce spamming alarms. As a user, without the input of an administrator, there is nothing you can do if you enviornment is going crazy and you still want to effectively meet SLAs. Mass closing and mass commenting are not sufficent when alarms generate in large number in short, timed intervals. IE: 50 alarms every thirty seconds. This is not something manageable when a security analyst is likely managing several environments at once. More suppression methods need to be available to users. Review collected by and hosted on G2.com. Recommendations to others considering LogRhythm SIEM: If you can, opt to receive the LogRhythm Analyst and Admin training as soon as possible. Review collected by and hosted on G2.com. What problems is LogRhythm SIEM solving and how is that benefiting you? I am sometimes able to spot legitimate security events and report on them through LogRhythm. The information the SIEM provides gives a good indication of how reporting should take place. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Chirantha A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Chirantha A.") CA Chirantha A. Information Security Analyst Mid-Market (51-1000 emp.) 4/21/2020 "2+ years experience with 4 different Siems, LogR get my number 01" 4/5 What do you like best about LogRhythm SIEM? I worked with LogR SIEM for 2+ years and same time I used another two SIEMs and now I’m using open source version of SIEM. When go to the case creating , filtering , LogR backend it’s superb and it’s easy to use and when we updating user cases it’s simple than others for me. And reporting also good. Alarms and eps count also in good. I guess for large and medium organizations LogR is the best product as SIEM. Oh correlation I love this part Review collected by and hosted on G2.com. What do you dislike about LogRhythm SIEM? Actually the cost , it’s too high ane others all good. Review collected by and hosted on G2.com. Recommendations to others considering LogRhythm SIEM: It’s good for medium and large companies. Support also good. implimentation good. Review collected by and hosted on G2.com. What problems is LogRhythm SIEM solving and how is that benefiting you? We are generating firewall logs , waf logs OSSEC logs and etc. So we can monitor all the logs in one place according to the user cases Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Commercial Real Estate](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Commercial Real Estate") AC Verified User in Commercial Real Estate Enterprise (\> 1000 emp.) 2/27/2020 "Its been a decent experience." 4.5/5 What do you like best about LogRhythm SIEM? The professional service guys are great. They always seem to be up for a challenge. We've had some interesting items pop-up where those guys will dig right in to attempt to get what we need via an alarm, dashboard, or report. Review collected by and hosted on G2.com. What do you dislike about LogRhythm SIEM? The support desk really stinks. Getting someone to address issues is a task, and cumbersome. Typically you will not get first call resolution with these folks. They will log your request, and you might hear back from someone that day, you might not. Once you have agreed upon a time to meet to discuss your issue, you could be 2 or 3 days into an outage. I went for over a week a few times with issues. You are better off contacting the professional service guys or you sales account rep to get any kind of traction on an issue. Review collected by and hosted on G2.com. Recommendations to others considering LogRhythm SIEM: It's a good siem out of the box. The guys who help you set things up are great. Support is lacking though. Review collected by and hosted on G2.com. What problems is LogRhythm SIEM solving and how is that benefiting you? We are looking to alarm on malicious issues that arise across the network. We are currently in our infancy, building out dashboards, elevation of privilege alarms, software uninstall alarms. We hope to get the MITRE ATT&CK Framework built out across the platform to alarm on those types of issues. We are also looking at monitoring group changes, access to specific platforms, etc. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller ![Joe L.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Joe L.") JL Joe L. Cyber Security Deputy Manager / Cyber Engineer Enterprise (\> 1000 emp.) 3/22/2020 "The most configurable SIEM" 5/5 What do you like best about LogRhythm SIEM? In comparison to other SIEM products Logrhythm provides enhanced configuration options, allowing for easier tailoring of information you which to see. The ability to create correlation rules, allows full TTP's to be protected against in comparison to other SIEMs allowing focus on only a single aspect. From an administrator point of view, the separation between the FAT console and Web view allows for both a 'customer friendly' type view in the form of the web console and a more serious view in the form of the console, to allow tasks to be completed efficiently. Review collected by and hosted on G2.com. What do you dislike about LogRhythm SIEM? The costing of Log rhythm is the primary downside moving from a large single client to an MSP offering SOC to many smaller companies, they simply cannot afford the product Review collected by and hosted on G2.com. What problems is LogRhythm SIEM solving and how is that benefiting you? Full TTP protection, UEBA Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Leisure, Travel & Tourism](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Leisure, Travel & Tourism") AL Verified User in Leisure, Travel & Tourism Enterprise (\> 1000 emp.) 3/28/2020 "If you need a SiEM real bad, there are worse options" 2.5/5 What do you like best about LogRhythm SIEM? The "Logrhythm method" is fairly consistent, once you get the hang of that, it is easier to work with. The browser front end is fairly intuative for use Review collected by and hosted on G2.com. What do you dislike about LogRhythm SIEM? The Web UI likes to "grow" screens from the sides, which will happen more often than you want it to. The Thick client should be going away soon, but not soon enough. The more any given server does, the more logs it makes, the more memory the LR agent needs.. on a server that already needs those resources. Get comfortable with real expressions, you will need them. Case management is primitive, manage tickets elsewhere. Reporting is both large, robust, and unhelpful. Review collected by and hosted on G2.com. Recommendations to others considering LogRhythm SIEM: Honestly, a medium sized business, if it \*knows\* the network and machines to monitor, can do a lot worse than Logrhythm. Do not use this in hopes of asset discovery Review collected by and hosted on G2.com. What problems is LogRhythm SIEM solving and how is that benefiting you? It stored logs and allows us to search them. As a searchable database, it is massively more useful than the alarming system Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ## Questions about LogRhythm SIEM? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about LogRhythm SIEM ](https://www.g2.com/products/exabeam-logrhythm-siem/discussions/new) ![Bharatraj H.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Bharatraj H.") BH Bharatraj Hegde • Last activity over 6 years ago Is there anyway to get more than 5000 search results at a time? 1 Upvote 1 [ Join the conversation ](https://www.g2.com/discussions/25920-is-there-anyway-to-get-more-than-5000-search-results-at-a-time) EG Eleazar Guzman • Last activity about 5 years ago How do you edit templates? 2 Upvotes 5 [ Join the conversation ](https://www.g2.com/discussions/12429-how-do-you-edit-templates) [ View all Discussions ](https://www.g2.com/products/exabeam-logrhythm-siem/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 18 months ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/exabeam-logrhythm-siem/pricing) LogRhythm SIEM Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_91bcb2c063fcfb0a82dfedcf1a6463d1/splunk-enterprise-security.jpg "Product Avatar Image") Splunk 4.3/5(248) [ Compare Now ](https://www.g2.com/compare/exabeam-logrhythm-siem-vs-splunk-enterprise-security) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1616bb8054a8f27102d8ba094c99bab5/ibm-ibm-qradar-siem.png "Product Avatar Image") IBM QRadar SIEM 4.4/5(338) [ Compare Now ](https://www.g2.com/compare/ibm-ibm-qradar-siem-vs-exabeam-logrhythm-siem) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4e2b08dd17397bdc99a5658447cbc589/microsoft-sentinel.jpg "Product Avatar Image") Microsoft Sentinel 4.4/5(297) [ Compare Now ](https://www.g2.com/compare/exabeam-logrhythm-siem-vs-microsoft-sentinel) ##### ##### LogRhythm SIEM Features Response Threat Intelligence Records Incident Logs Incident Reports Management Incident Alerts Incident Case Management Network Management Activity Monitoring Asset Management Log Management [ View More Features ](https://www.g2.com/products/exabeam-logrhythm-siem/features) ##### Categories on G2 [Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Security Information and Event Management (SIEM)](https://www.g2.com/categories/security-information-and-event-management-siem)[Incident Response](https://www.g2.com/categories/incident-response) ##### Explore More [What is the best earned wage access software for a mid-size company that wants fast employee payouts without waiting for a full payroll cycle to close?](https://www.g2.com/discussions/what-is-the-best-earned-wage-access-software-for-a-mid-size-company-that-wants-fast-employee-payouts-without-waiting-for-a-full-payroll-cycle-to-close)[What are the highest rated Autodesk Construction Cloud integration partners for firms needing seamless BIM coordination without internet dependency issues?](https://www.g2.com/discussions/what-are-the-highest-rated-autodesk-construction-cloud-integration-partners-for-firms-needing-seamless-bim-coordination-without-internet-dependency-issues)[Which financial fraud prevention tools have intuitive dashboards for investigating linked accounts and device patterns?](https://www.g2.com/discussions/which-financial-fraud-prevention-tools-have-intuitive-dashboards-for-investigating-linked-accounts-and-device-patterns) [Is a dedicated consumer insights platform worth it for a mid-market brand?](https://www.g2.com/discussions/is-a-dedicated-consumer-insights-platform-worth-it-for-a-mid-market-brand%20)[Which integration platforms reduce interface implementation time by up to five times compared to manual coding?](https://www.g2.com/discussions/which-integration-platforms-reduce-interface-implementation-time-by-up-to-five-times-compared-to-manual-coding)[Is MedTrainer worth it as a provider data management platform for mid-size healthcare organisations, or does a lighter credentialing tool cover the same ground at lower cost?](https://www.g2.com/discussions/is-medtrainer-worth-it-as-a-provider-data-management-platform-for-mid-size-healthcare-organisations-or-does-a-lighter-credentialing-tool-cover-the-same-ground-at-lower-cost) [Show MoreShow Less](javascript:void(0);)