Falcon Next-Gen SIEM Reviews & Product Details

Falcon Next-Gen SIEM stops breaches by unifying data, threat intelligence, and workflow automation on one complete AI-native SOC platform. Built from the ground up around a modern security analyst experience, it amplifies the speed and efficiency of incident response. Your team can search up to 150x faster and scale to 1PB/day of data ingestion while achieving 80% cost savings compared to legacy SIEMs. CrowdStrike Falcon Next-Gen SIEM uncovers threats instantly with real-time threat detection, live dashboards and world-class intelligence. AI-assist features transform your entire team into experts by visualizing incidents in an elegant graph and automating manual investigation steps. For the first time ever, you can unify security on one platform to hunt down and eliminate fast-moving threats and achieve compliance.

Seller

CrowdStrike

Discussions

Falcon Next-Gen SIEM Community

Languages Supported

Danish, English, French, Japanese, Norwegian, Spanish, Swedish, Chinese (Simplified)

Solution Type

All-in-One

Overview by

Laura Naumann

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

Return on Investment

8 months

View More Pricing Information

Top-Rated Alternatives

Splunk Infrastructure Monitoring

4.3/5(49)

View All Alternatives

User Insights

Average based on 44 real user reviews.

Implementation Time

2 months

Falcon Next-Gen SIEM Integrations

(16)

Integration information sourced from real user reviews.

Show More Integrations

Nikitha S.

Cloud Engineer

Enterprise (> 1000 emp.)

5/12/2022

"Humio gives me the convenience to ingest our 1 TB of log volume on each node"

4/5

What do you like best about Falcon Next-Gen SIEM?

Humio provides superb data aggregation reports thanks to its well-rounded observability framework. Its relatively easy to explore, iterate and understand all our logs and also offers excellent compatibility for our hybrid cloud deployments. We can easily pinpoint security concerns in any environment and it makes it simple to perform RCA. Review collected by and hosted on G2.com.

What do you dislike about Falcon Next-Gen SIEM?

There's a dependency on ingest listeners while working with our Syslog data in Humio platform. Without these, Humio SaaS won't be able to accept logs from Syslog. Apart from this, we didn't encounter any hurdles while working with the Humio platform for container solutions. Review collected by and hosted on G2.com.

What problems is Falcon Next-Gen SIEM solving and how is that benefiting you?

Container visualization is beneficial for our security team using Humio we can easily observe health check routines, capacity thresholds and drifts from the expected outcomes. The compression algorithm effectively optimizes available data size in clusters and the ratio between disks & CPU resources. We are able to manage about 1 TB of ingest log volume per day on each node which is helpful for our production setup of clustered version as per our client's specifications. Its comprehensive border security features encompass all structured & unstructured data, making it easy to analyze and correlate data in our hybrid cloud infrastructure. Review collected by and hosted on G2.com.

Ogaday W.

Machine Learning Engineer

Mid-Market (51-1000 emp.)

1/28/2021

"Good log aggregation, slow UI"

3.5/5

What do you like best about Falcon Next-Gen SIEM?

Now that Humio has been set up up by our platform team, all logs from all further applications and deployments are being streamed to Humio without the need for any additional configuration at the application level, which is fantastic. We develop on top of Kubernetes, and as well as application logs, we get platform logs, so we can debug and monitor the whole stack. The handling of structured logs is also really nice. Humio automatically parses many formats, and you can write your own custom log parsing rules. Once your logs are being parsed correctly, you can filter and display specific fields from your logs, and save the results into persistent, live dashboards for your applications. Review collected by and hosted on G2.com.

What do you dislike about Falcon Next-Gen SIEM?

The only thing I dislike about Humio is the UI. Scrolling through your logs to find relevant messages can be tough unless you've set up quite a few filters. Each page of logs contains only contains 200 lines, which, for any significant application, is not much. I don't know if it's just my browser, but I find the pagination painfully slow! This aspect of the UI is the only downside. It can be mitigated by smart filtering, but I still find it a bit awkward to wait for the next page of logs to load. Review collected by and hosted on G2.com.

Recommendations to others considering Falcon Next-Gen SIEM:

Used structured logging to make the most of Humio. Review collected by and hosted on G2.com.

What problems is Falcon Next-Gen SIEM solving and how is that benefiting you?

I use Humio to debug my applications and view my application logs. On top of that, I use humio to take advantage of structured logging and build persistent dashboards for different projects, so I can monitor my the running of my applications over time. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Enterprise (> 1000 emp.)

1/21/2021

"Amazingly fast and superb documentation"

4/5

What do you like best about Falcon Next-Gen SIEM?

The easy integration with existing systems using raw syslog or elastic bulk ingest api and their Grafana plugin. And of course the price. Very cheap compared to other enterprise similar products. Review collected by and hosted on G2.com.

What do you dislike about Falcon Next-Gen SIEM?

While there is a very good and comprehensive online documentation for the entire product, it is also a lot to read up on just to be able to do somewhat basic searches and alerting. But once you get a hang of it, it is no problem at all. No pre-made parsers for syslog data, so you will most likely have to make a few parsers that breaks the log data down into individual searchable fields yourself. Review collected by and hosted on G2.com.

Craig H.

Software Engineer

Mid-Market (51-1000 emp.)

1/21/2021

Business partner of the seller or seller's competitor, not included in G2 scores.

"Great Service!"

4/5

What do you like best about Falcon Next-Gen SIEM?

Their query language is pretty solid and the data ingest performance is much more consistent than competing services. Review collected by and hosted on G2.com.

What do you dislike about Falcon Next-Gen SIEM?

The interface is sometimes a bit confusing, but it's understandable due to the complexity. Review collected by and hosted on G2.com.

Niklas E.

Software Engineer

Mid-Market (51-1000 emp.)

1/22/2021

"Powerful, customizable and user-friendly log management system"

5/5

What do you like best about Falcon Next-Gen SIEM?

The simplicity of the query language and the easy way to filter logs based on fields. The Humio Query Language lets me compose advanced queries that I need to analyze data in Humio. Review collected by and hosted on G2.com.

What do you dislike about Falcon Next-Gen SIEM?

I've been using Humio for about 6 months now and I can't come up with anything that I dislike. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

3/1/2021

"Quick and Easy Log Indexing"

5/5

What do you like best about Falcon Next-Gen SIEM?

Lower infra cost than other on-prem solutions. Search result speed. Review collected by and hosted on G2.com.

What do you dislike about Falcon Next-Gen SIEM?

The documentation could use some updates. Review collected by and hosted on G2.com.

Recommendations to others considering Falcon Next-Gen SIEM:

If you’re considering open source instead, be sure to dig into the difference between how much hardware for an ES cluster with similar performance will cost you. Review collected by and hosted on G2.com.

What problems is Falcon Next-Gen SIEM solving and how is that benefiting you?

Cloudtrail indexing and search Review collected by and hosted on G2.com.

Verified User in Insurance

Enterprise (> 1000 emp.)

3/2/2021

"Humio helped identify operational issues"

2.5/5

What do you like best about Falcon Next-Gen SIEM?

1. Speed of search is good

2. Speed of ingestion seems to be good. Review collected by and hosted on G2.com.

What do you dislike about Falcon Next-Gen SIEM?

1. UI interface is very basic

2. Dashboards need to be made more elegant.

3. Scripting challenged users may have a little difficulty creating queries or dashboards.

4. Dashboarding needs to be improved to professional grade UI look and feel Review collected by and hosted on G2.com.

Verified User in Financial Services

Enterprise (> 1000 emp.)

1/21/2021

"Solid Service for monitoring production applications"

4/5

What do you like best about Falcon Next-Gen SIEM?

Humio provides quick access to our system logs. Quick to get up and running as a user Review collected by and hosted on G2.com.

What do you dislike about Falcon Next-Gen SIEM?

Lack of customisation, in particular, custom views for log where some fields are more relevant than others Review collected by and hosted on G2.com.

Verified User in Newspapers

Mid-Market (51-1000 emp.)

1/22/2021

"Good tool for logging"

4.5/5

What do you like best about Falcon Next-Gen SIEM?

Like the parsing tool, it's really useful when it comes to debug some errors. Review collected by and hosted on G2.com.

What do you dislike about Falcon Next-Gen SIEM?

Hard to say, but maybe the one thing is to make some prompts when you type the application name or just some other params. Review collected by and hosted on G2.com.