Falcon Next-Gen SIEM Reviews & Product Details

What I like most is that everything is in one place. Before, we were constantly jumping between tools, and things would get missed. Now, logs and alerts from different sources come together in one view, and it actually makes sense when you look at it.

The correlation engine is honestly what sold me. It automatically picks up connected events—things our team would have spent hours trying to piece together manually. The search speed is no joke either: even with massive log volumes, you get results quickly, which makes a huge difference during a live incident.

Overall, it’s made our investigations faster and given the team much better visibility, without adding extra complexity to our workflow. Review collected by and hosted on G2.com.

The interface can feel like a lot when you are just getting started — it is not the most intuitive for newer team members and takes some getting used to. Detection rule setup and fine tuning took way longer than we expected, mostly trial and error in the beginning which ate into time we did not really have.

On the support and onboarding side, better guided walkthroughs would have saved us a lot of headaches early on. Pricing is also on the higher side which for smaller teams is worth thinking about before committing. The AI driven detections are impressive but honestly take some experience to fully understand and act on. Integrations work well overall but initial configuration is not always as plug and play as you would hope. Review collected by and hosted on G2.com.

Falcon Next-Gen SIEM works well with other Falcon Suite products and provides a unified platform, which makes it easy to detect and investigate events. Data onboarding and parsing are very straightforward, and event searching is extremely fast. The charlotte AI makes it easy to create detection rules. The pricing is very low compared to its competitors. UI/UX of falcon platform is very intuitive and CrowdStrike provides excellent support with fast response to any issues. Review collected by and hosted on G2.com.

The customizability of the product is very low and the documentation is not much detailed. Review collected by and hosted on G2.com.

I really appreciate how straightforward the setup and installation of Falcon Next-Gen SIEM is. Its functionality makes it easy to parse and understand the data. Also, having complete visibility of our entire network and endpoints with Falcon Complete is a huge plus. I also like how our Falcon Complete team has been really helpful throughout the setup process, assisting us every step of the way. Review collected by and hosted on G2.com.

I haven't run into many problems with Falcon Next-Gen SIEM. My Falcon Complete team takes really good care of us. If there's anything, maybe it could improve on better log filtering. Review collected by and hosted on G2.com.

I use Falcon Next-Gen SIEM to query our data that is ingested into Crowdstrike for a better understanding of what is going on in our environment. I like that it lets me examine the actual data ingested and not just what I can see in different portals or dashboards. I appreciate its robust documentation and integration throughout the platform, which helps me craft queries that get to the root of what I’m looking for. The use of connectors to ingest more third party data is a helpful feature. The initial setup was very easy and straightforward with the standard Crowdstrike setup. Review collected by and hosted on G2.com.

I wish there was more information on what logs are ingested or logs detection use so I can search for those logs easier. Review collected by and hosted on G2.com.

Falcon Next-Gen SIEM provides a comprehensive solution for managing and analyzing log data, enhancing security and operational efficiency. Review collected by and hosted on G2.com.

I like that Falcon Next-Gen SIEM solves the issue of having a variety of sources of information where you'd have to go to different platforms and have separate logins. Now, I can just query it in one spot without having to log in to all those different platforms. I appreciate its size and how much data we can store in there; it's huge and pretty fast compared to other SIEM products I've used. I also love its ability to hold much more data. The search functionality is something I value the most; it's pretty easy and the UI is fairly easy to figure out, allowing me to drill down to what I'm looking for without needing to be an expert in SQL or CQL. Review collected by and hosted on G2.com.

What I love about NGSIEM - the transition to Splunk was fast, the product feels modern, and is being continuously improved. Review collected by and hosted on G2.com.

I’d like to see more support notifications and faster resolutions to known bugs, we had a few UI bugs affecting our tenant that wasn’t proactively communicated. They were resolved quickly though Review collected by and hosted on G2.com.

I like that Falcon Next-Gen SIEM integrates threat detection and response by making AV, EDR, and SIEM all in one place, which simplifies correlations. I appreciate its native integration with all of our security tooling, making it valuable. It was the ease of integrations that made us switch from Splunk. The initial setup was very easy. Review collected by and hosted on G2.com.

It's great, just wish Charlotte was cheaper. Review collected by and hosted on G2.com.

NGSIEM basically has all of the capabilities that all other SIEMS brag about, but arent great at implementing. The UI is clean and easy to use, it integrates with multiple other products and feeds additional data to other third party integrations, the performance is unmatched, pricing isn't and issue since it comes standard for everyone! Crowdstrike has worldclass support and is always there to help you get up and running. Like with all of their products, you can use the built in, AI, Charlotte - to query the SIEM and get accurate and helpful results! Review collected by and hosted on G2.com.

Like with any Crowdstrike product, there's a lot of configuring to do. There is a learning curve. Review collected by and hosted on G2.com.

I really like how fast it is to search a and query things. Also if your data is normalized, it's really easy to search your whole environment for information. Review collected by and hosted on G2.com.

It's not so much about the siem itself, it's more the documentation and syntax. It's not the most readable documentation, but there are many examples on reddit for queries Review collected by and hosted on G2.com.

I appreciate Falcon Next-Gen SIEM for its comprehensive one console, which makes operations more convenient. The usability of graphics and dashboards provides good insights into data. The initial setup of Falcon Next-Gen SIEM was very easy, which I really liked. Review collected by and hosted on G2.com.

Nothing Review collected by and hosted on G2.com.