AI

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

6/6/2021

"Great Application to use"

4/5

What do you like best about LogRhythm SIEM?

Best siem platform to use. Threat hunting Review collected by and hosted on G2.com.

What do you dislike about LogRhythm SIEM?

None, beacause most of the services are great to use. Review collected by and hosted on G2.com.

CF

Verified User in Financial Services

Enterprise (> 1000 emp.)

6/7/2021

Business partner of the seller or seller's competitor, not included in G2 scores.

"Reliable and simple"

4.5/5

What do you like best about LogRhythm SIEM?

The features are good and perform well as expected Review collected by and hosted on G2.com.

What do you dislike about LogRhythm SIEM?

Setup is quite rigid and complex, Need training and materials for users Review collected by and hosted on G2.com.

Recommendations to others considering LogRhythm SIEM:

It's a good all in one tool for your siem needs , can consider for larger setup and also for mid size setups Review collected by and hosted on G2.com.

What problems is LogRhythm SIEM solving and how is that benefiting you?

The platform helps to share in-depth details of logs and events in the organisation Review collected by and hosted on G2.com.

DD

Dave D.

Information Security Manager

Enterprise (> 1000 emp.)

9/16/2020

"LogRhythm- Great SIEM"

4.5/5

What do you like best about LogRhythm SIEM?

LogRhythm, like any other SIEM, can be a complicated platform. Having used two other SIEM platforms, LogRhythm has one of the most streamlined configurations and overall usability. The SIEM comes with both a thick-client and web interface. The thick-client is comprehensive, while the web interface features the most common features such as dashboards, and SOAR. Review collected by and hosted on G2.com.

What do you dislike about LogRhythm SIEM?

LogRhythm relies heavily on the thick-client for most of the configuration, which has traditionally been the case with most SIEM platforms. The web interface is not as comprehensive as I would like. Some of the flat-file ingestion of logs, such as for an email gateway (Mimecast) integration is less than stellar as their is no direct integration with the Mimecast platform. Review collected by and hosted on G2.com.

Recommendations to others considering LogRhythm SIEM:

If you are looking for a streamlined SIEM, LogRhythm is the platform for you. LogRhythm, with the release of 7.5, appears to be incorporating more features into the web interface, which is definitely a step in the right direction. Review collected by and hosted on G2.com.

What problems is LogRhythm SIEM solving and how is that benefiting you?

Using a robust platform, such as LogRhythm allows us to ingest logs from across the enterprise, including infrastructure, servers, and end-user workstations, allow for aggregation and correlation across all logs. This allows us a single pane of glass to review security logs and potential incidents. Review collected by and hosted on G2.com.

CI

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

6/5/2021

"Easy to learn and Handel and it’s utilise less CPU & memory"

4.5/5

What do you like best about LogRhythm SIEM?

Have experience with logrythem tool

Easy to configure and administrate.

specific use cases and helps to Handel faster Review collected by and hosted on G2.com.

What do you dislike about LogRhythm SIEM?

Haven't face any issue so far .. going on smooth Review collected by and hosted on G2.com.

PP

Parth P.

Consultant

Small-Business (50 or fewer emp.)

11/30/2020

"One of the Best SIEM Tools"

4/5

What do you like best about LogRhythm SIEM?

LogRhythm provides powerful Rule Creation & Integration APIs that can collect logs from various devices at once. It can process millions of logs every second - very powerful. Review collected by and hosted on G2.com.

What do you dislike about LogRhythm SIEM?

Drill down on Multiple Alarms through LR Console is not possible. they really need to add this feature. ArcSight has this feature. Review collected by and hosted on G2.com.

MB

Mohammed B.

Sr. Linux System Administrator

Enterprise (> 1000 emp.)

9/14/2020

"LogRhythm NextGen SIEM"

4.5/5

What do you like best about LogRhythm SIEM?

This particular solution is primarily used by our staff also as by firewall administrators. We put it to use to aggregate logs, correlate functions and automate firewall protection policies. The main purpose of its is actually updating the security policy depending on the changing threat vectors of the Internet of ours. Review collected by and hosted on G2.com.

What do you dislike about LogRhythm SIEM?

The administrator management panel is quite unintuitive and some functions are hard to find Review collected by and hosted on G2.com.

Recommendations to others considering LogRhythm SIEM:

LogRhythm is actually perfect for management logs from systems that are different, correlating events and giving a worldwide view of the ecosystem. One of the main advantages of its is actually the control board, information mining, search as well as alarm continuity. Review collected by and hosted on G2.com.

What problems is LogRhythm SIEM solving and how is that benefiting you?

Major issues in multi-platform hunting and threat detection. We also have to communicate the maturity of ours and security potential much more accurately. Review collected by and hosted on G2.com.

JP

Jose P.

Cyber Security Analyst II

Small-Business (50 or fewer emp.)

2/27/2020

"Logrhythym Information"

5/5

What do you like best about LogRhythm SIEM?

How logrhythm offers appliance, cloud and software install. This helps when you depend on a data center to provide infrastructure to spin up VM's. Also how we can customize dashboards for different teams. Restrict what other teams can see. How can we remove unwanted logs from being captured thus making appliance faster. Integration with Microsoft, such Azure and O365, specially the security components. Review collected by and hosted on G2.com.

What do you dislike about LogRhythm SIEM?

Integration with not well known devices, such mikrotik. I could leverage API, but there are not much information on how to use API. This is not Logrhythm fault, but I would like to see more local groups that are using Logrhythm to collaborate so we can discuss issues or features that can benefit each other. Review collected by and hosted on G2.com.

Recommendations to others considering LogRhythm SIEM:

Logrhythm has integration with many software and appliances. Sometimes integrations are not easy, but once integration is done, Logrhythm can pretty much alert on anything. Review collected by and hosted on G2.com.

What problems is LogRhythm SIEM solving and how is that benefiting you?

Alerts, that's the core for us, data storage and plus nice dashboards that we can broadcast to upper management. Also how we can customize dashboards for different teams. Support is amazing. Incident response is great, Logrhythm community is amazing. Pro support is great too. It has helped spot attacks on web services, DMZ, web pages, network equipment ans users. Review collected by and hosted on G2.com.

UC

Verified User in Computer & Network Security

Mid-Market (51-1000 emp.)

4/13/2021

"All you need in a SIEM"

4/5

What do you like best about LogRhythm SIEM?

Great product. Handles enterprise software.

Can add on an artificial intelligence engine if necessary.

Network monitoring functionality added on. Review collected by and hosted on G2.com.

What do you dislike about LogRhythm SIEM?

Does not function in the cloud as seamlessly. Review collected by and hosted on G2.com.

SM

Sandun M.

Information Security Engineer

Mid-Market (51-1000 emp.)

3/19/2020

Business partner of the seller or seller's competitor, not included in G2 scores.

"LogRhythm Is the leading SIEM in the industry that provide more functionalities to the users."

4/5

What do you like best about LogRhythm SIEM?

LogRhythm AI engine rules and alarm system is very helpful to detects malicious activities quickly. Use-Cases can create with various functionalities that is very helpful while creating effective use cases.Another super feature is LR search option. we could run a log search with different type of filters for given time period. LR event search feature always helps to catch AI engine rules and also logs that became events.This feature very helpful while incident investigating. Review collected by and hosted on G2.com.

What do you dislike about LogRhythm SIEM?

Time zone for logs messages different on downloaded CSV. No option to change it.it is always GMT +0. functionality for log massage time zone change still seems to be not available with LR. need to check and provide soon, since lot of customers facing trouble to identify what is the exact time for the event.some time we have to manually change the log times times on CSV. Review collected by and hosted on G2.com.

Recommendations to others considering LogRhythm SIEM:

we need to find a way to generalize different type of log messages that collects from LR(most of the time security toos by adding more Fields like common events). Then it will be very easy to creates Usecases. Review collected by and hosted on G2.com.

What problems is LogRhythm SIEM solving and how is that benefiting you?

Do not want to wast time on monitoring LR dashboards, we could depend on alarms system after you have created good and effective use-cases. fine tuning alarm system is very easy with exclude and include functionality of LR.Very easy to create use cases and very easy to fine tune them. easy to check whether we have a use case to detect such attack with event search functionality. Review collected by and hosted on G2.com.

MS

Manoj s.

Mid-Market (51-1000 emp.)

5/26/2020

"LogRhythm is the main SIEM solution we are currently using in securing the enterprise environment."

5/5

What do you like best about LogRhythm SIEM?

LogRhythm is one of the best SIEM solutions i have used so far. it provide security analysts ability to perform quick drill down investigations and do deep analysis of the security incidents. It has a easy to use UI design and performing investigations on the LogRhythm is very easy. Quick filters in the investigations are also very helpful in investigations.

Ability to integrate all the major product and services logs, as well as support for all the one offs.

It has a user-friendly dashboard. Therefore, even a beginner can easily understand and monitor the dashboard. Also, I like to dark theme of the LogRhythm.

It was competitively priced compared to other SIEM solutions and they helped with the entire deployment so that was greatly appreciated.

The best part of the SIEM is the quick review of logs. Customer service responses quickly, and continues until the problem is resolved. Installation was not difficult, but configuration is the biggest challenge. Linux systems are simple to configure for log forwarding but the Windows side required some research and trial and error. There are some components in my network that had to be upgraded to integrate with the SIEM. Review collected by and hosted on G2.com.

What do you dislike about LogRhythm SIEM?

Actually, the correlation is a little bit difficult thing. So, you should have a good knowledge of that. Also, somewhat expensive when compared with other similar products.

Product implementation is somewhat difficult and we faced some log parsing issues when the logs were forwarded from Arcsight SIEM log forwarder to the LogRhythm log Collectors.

I don’t like the login screen. I just think it doesn’t fit well with a security management tool. Also, LogRhytm needs to improve with its documentation. There are too many tutorials written, but maybe adding video content with the most common issues could work better. Also, the information showed when an alarm rings should be configurable, in order to show only the priority data. Review collected by and hosted on G2.com.

Recommendations to others considering LogRhythm SIEM:

The professional service guys are great. They always seem to be up for a challenge. We've had some interesting items pop-up where those guys will dig right in to attempt to get what we need via an alarm, dashboard, or report. Review collected by and hosted on G2.com.

What problems is LogRhythm SIEM solving and how is that benefiting you?

LogRhythm AI engine rules and alarm system is very helpful to detects malicious activities quickly. Use-Cases can create with various functionalities that is very helpful while creating effective use cases.Another super feature is LR search option. we could run a log search with different type of filters for given time period. LR event search feature always helps to catch AI engine rules and also logs that became events.This feature very helpful while incident investigating.

LogRhythm is very flexible, you can either run it virtually, on your own hardware or using an Appliance. It is straightforward to set up exactly how you want it, whether you are an IT department or a stand-alone SOC. Review collected by and hosted on G2.com.