--- title: IBM QRadar SIEM Reviews meta_title: 'IBM QRadar SIEM Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 336 reviews by the users' company size, role or industry to find out how IBM QRadar SIEM works for a business like yours. aggregate_rating: rating_value: 4.4 review_count: 336 scale: '5' date_modified: '2026-06-30' parent_category: name: System Security url: https://www.g2.com/categories/system-security --- # IBM QRadar SIEM Reviews **Vendor:** IBM **Category:** [Security Information and Event Management (SIEM) Software](https://www.g2.com/categories/security-information-and-event-management-siem) **Average Rating:** 4.4/5.0 **Total Reviews:** 336 ## About IBM QRadar SIEM Outsmart threats with an end-to-end award-winning security suite; proven to prevent, endure and recover from both known & unknown IT hazards faced by SoCs in the modern-day. ## IBM QRadar SIEM Pros & Cons **What users like:** - Users find IBM QRadar SIEM to be **very user-friendly** , enhancing ease of implementation and integration with other platforms. (23 reviews) - Users value the **excellent integration capabilities** of IBM QRadar SIEM, enhancing log management and threat intelligence processing. (19 reviews) - Users value the **advanced threat detection and centralized log management** features of IBM QRadar SIEM for enhanced security. (18 reviews) - Users greatly appreciate the **easy integrations** of IBM QRadar SIEM, enhancing their security operations effectively. (15 reviews) - Users find the **user-friendly interface** of IBM QRadar SIEM ideal for simplified event and log analysis. (15 reviews) - Monitoring (14 reviews) - Insights (13 reviews) - Log Management (13 reviews) - Threat Detection (13 reviews) - Customer Support (10 reviews) **What users dislike:** - Users find the **UX improvement** in IBM QRadar SIEM lacking, impacting usability and overall efficiency. (11 reviews) - Users find the tool **expensive** , especially for small to mid-sized companies, impacting overall value. (9 reviews) - Users find the **high cost** of IBM QRadar SIEM challenging, particularly for smaller organizations needing budget-friendly options. (7 reviews) - Users are frustrated by the **dashboard issues** in IBM QRadar SIEM, limiting functionality and ease of use. (7 reviews) - Users find the **time-consuming log fetch** process frustrating, especially with complex search queries leading to inefficiencies. (7 reviews) - Complexity (6 reviews) - Limited Features (6 reviews) - Missing Features (6 reviews) - Poor Interface Design (6 reviews) - Poor Reporting (6 reviews) ## IBM QRadar SIEM Reviews ### 1. IBM Security QRadar **Rating:** 4.5/5.0 stars **Reviewed by:** Nitin K. | Technical Support engineer, Enterprise (> 1000 emp.) **Reviewed Date:** July 09, 2022 **What do you like best about IBM QRadar SIEM?** IBM Security QRadar is an SIEM tool by that we can monitor all the alerts generated by the tool. It is a centralized log collector of every security. **What do you dislike about IBM QRadar SIEM?** We need to install an event collector at every place by that we can send logs to the QRadar. **Recommendations to others considering IBM QRadar SIEM:** QRadar is monitor tool basically for the SOC team to monitor all the logs generated by the security tool. Every industry needs an SIEM tool to have visibility to the entire organization. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** We can analyze logs generated by security tools like firewalls, Switch, Email Security, DNS security etc. accordingly we can take action. ### 2. QRadar 'A Complete Solution for Security' **Rating:** 4.5/5.0 stars **Reviewed by:** Md F. | S, Enterprise (> 1000 emp.) **Reviewed Date:** April 19, 2022 **What do you like best about IBM QRadar SIEM?** All the features are good and easy to understand. Pulse dashboard give us complete view of offenses and events. Also user behavior analysis gives a clear look of risky user. Use case manager is also helps to analyse rules and building blocks. Log activity, network activity gives real time events and flows. **What do you dislike about IBM QRadar SIEM?** Every features are useful. I like all the features and app host. Also content extension helps to increase reference set. Report might include more features and easy to generate. **Recommendations to others considering IBM QRadar SIEM:** Useful tool for security. Very much recommended. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Collecting all logs and flows in qradar from all log sources. We detect bot connection in our system and mitigate the issue. It actually help to take action before any incident happen. Threat intelligence feed also help to know about threat ongoing in the globe. ### 3. It is easy to learn with good GUI experience. **Rating:** 5.0/5.0 stars **Reviewed by:** Nitin K. | Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** July 15, 2022 **What do you like best about IBM QRadar SIEM?** Its ability to write custom UDSM and integrate custom applications to cover the security in a broader way. Also the Pulse dashboard app that they provide is really good and customizable helps to have breif understanfing about whats going on in the environment. **What do you dislike about IBM QRadar SIEM?** Pricing for the license is a little bit higher as small firms that are not so big and developed have to think a lot before buying and implementing this SIEM solution. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It is providing our clients an overview of external and as well as of internal threats. Now a days ransomware attacks have risen drastically and this solution helps to track down the lateral movements as well if configured correctly. ### 4. One of the best SIEM tool in the market **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** October 20, 2022 **What do you like best about IBM QRadar SIEM?** QRadar UI is very user-friendly. It doesn't require query-based search like other leading SIEM tools in the market. Its graphs and reports also provide detailed information about your Infrastructure. **What do you dislike about IBM QRadar SIEM?** I don't find any downsides to QRadar. It might be because QRadar was the first SIEM tool I used in my career. Later I used other tools but found QRadar to be the best. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** With more than 40,000 computers and servers involved, it becomes difficult to track and prevent your infrastructure against security attacks. IBM QRadar makes soc teams' life easy by getting rid of false positives and providing detailed information about attacks. ### 5. Perfect SIEM solution to depend against threats. **Rating:** 5.0/5.0 stars **Reviewed by:** Ranesh K. | Software Engineer L2, Enterprise (> 1000 emp.) **Reviewed Date:** August 30, 2022 **What do you like best about IBM QRadar SIEM?** The flexibility that QRadar offers helps security team deduct, understand and prioritize threats to the environment. Also it performs in depth network forensics and store complete network logs. **What do you dislike about IBM QRadar SIEM?** It could be complicated for beginners, prior knowledge is required to operate. Threat analysis could be more simplified and also managing the database of threat reports is not easy. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It provides automative solution of threat protection. There are advanced search queries which are easy to understand which allows user to perform specific searches that really speed up the investigation. ### 6. SIEM IBM QRadar Review **Rating:** 4.0/5.0 stars **Reviewed by:** Mohammed K. | Senior Engineer -Cyber Security, Small-Business (50 or fewer emp.) **Reviewed Date:** June 25, 2022 **What do you like best about IBM QRadar SIEM?** QRadar Provides user friendly interface with easy searching method and returning the search results in both logs & Graphical view for better anlaysis. It provides distributed and standalone architecture and easy to deploy in any scale of orgnization. Also, it supports large set of device source types. **What do you dislike about IBM QRadar SIEM?** My observation is QRadar is bit weak in Parsing many of the supported devices running on latest version which could cause issues in correlation of events and reporting. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** QRadar takes input from various sources like logs from devices, packets from TAPs, flows from Firewall/switches, Endpoint data from Sysmon/EDR providing complete visibility over organization network and uncovering blind spots. Can correlate both logs/flows together to drill down to the source of the incident. ### 7. Qradar experience in last 4 years **Rating:** 4.0/5.0 stars **Reviewed by:** Itesh S. | Senior Security Manager, Enterprise (> 1000 emp.) **Reviewed Date:** July 14, 2022 **What do you like best about IBM QRadar SIEM?** The tool itself is pretty user-friendly, to begin with, on top of that, it is easily malleable, scalable and overall a good SIEM tool to get the results one would want. **What do you dislike about IBM QRadar SIEM?** DSM guide needs to be expanded for more tools and integrations and parsing steps need to be automated. **Recommendations to others considering IBM QRadar SIEM:** If you are looking to integrate a SIEM, I would suggest that this is the tool you'd wanna begin with **What problems is IBM QRadar SIEM solving and how is that benefiting you?** As the SIEM itself is providing us the logs from all the devices, making it easy for us to get the results we want and come to a conclusion regarding identification of a incident, and which category it falls in. ### 8. An SIEM with great UI, more flexible log management and explicit security use case creation process. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) **Reviewed Date:** July 06, 2022 **What do you like best about IBM QRadar SIEM?** - I have worked on various SIEM technologies. IBM Qradar is one of them. One thing I liked the most about it is, It has a great UI which makes it very easy to understand all functionalities. - IBM Qradar supports multiple types of log sources and devices that give us flexibility in integrating all kinds of necessary logs. - It has a very easy way to manage and process Threat Intelligence. - OEM support is great. - Great features such as UBA and Operations App for monitoring suspicious user activities and their impact on the system. Threat Intelligence App for fetching TI feeds, Usecase manager app to optimally configure rules for enhancing the detection mechanism and MITRE ATT&CK mapping. **What do you dislike about IBM QRadar SIEM?** - Many times the search queries get failed while fetching logs even for one week. Then we need to fetch logs by segregating the search for 3-3 days. That takes more time. - Faced data parsing issues sometimes. **Recommendations to others considering IBM QRadar SIEM:** - Overall IBM Qradar is a very well-organized platform and the support from the OEM is great. This tool will always be my first recommendation for any kind of small to large security operations centre management. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** - Qradar with SOAR integration automates many incident response processes such as Phishing Email investigation, Blocking of IOCs, and Responding to common malware alerts. This has helped to reduce the overall workload. ### 9. Provide good visibility to your network incidents, SIEM cases, network flows. **Rating:** 4.0/5.0 stars **Reviewed by:** Atish K. | Senior Security Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** June 29, 2022 **What do you like best about IBM QRadar SIEM?** The best thing I like about QRadar is its perfect integration with SOAR Resilient to have automated response/action. If you have good rules and a playbook, it will make your life a lot easier. **What do you dislike about IBM QRadar SIEM?** What I dislike about QRadar is not keeping pace with the new technologies/features that are now available in the market. Solutions like Elastic stack gave users a whole new level of options to play with and modify. **Recommendations to others considering IBM QRadar SIEM:** It is always a good SIEM tool but the cost is the factor here. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** On an enterprise level, QRadar SIEM with Resilient is reducing the workload by automating different types of use cases that previously need human intervention every time a case is triggered. ### 10. Overall experience was really good using the tool. **Rating:** 5.0/5.0 stars **Reviewed by:** Samiksha S. | Marketing Scientist, Enterprise (> 1000 emp.) **Reviewed Date:** July 24, 2022 **What do you like best about IBM QRadar SIEM?** Integration of almost all the types of different devices makes it a very useful and very capable tool for monitoring the infrastructure. Availability of the documentation also helps in resolving any kind of issue. **What do you dislike about IBM QRadar SIEM?** Upgrading to a newer version is a little bit hectic task. This is the one thing that I don't like about this tool. Apart from that everything is good and smooth. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It gives a wide picture of cyber threats which are external and internal. The more devices you integrate the broader picture you get of your system. Various use cases and building blocks are just cherries on top. ### 11. A good product to begin with **Rating:** 4.0/5.0 stars **Reviewed by:** Aar A. | Senior Security Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** July 13, 2022 **What do you like best about IBM QRadar SIEM?** The thing I like the best about Qradar is user friendliness. It's easy to use, pretty malleable and efficient. On the top of it, it can handle any kind of logs and give us appropriate results. **What do you dislike about IBM QRadar SIEM?** The biggest gripe with QRadar is data ingest is super cumbersome and unnecessarily complicated. Hardware requirements are also expensive with Qradar to begin with. **Recommendations to others considering IBM QRadar SIEM:** IBM Qradar is just the tool you need, and you would need. It's easy to use, and scalable. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It's providing us the logs from all the security devices; helping us in analysing them and prevent security breaches by the means of Incident Response and Threat Hunting. ### 12. A SIEM solution to fit all your needs **Rating:** 4.5/5.0 stars **Reviewed by:** Gaurav S. | Senior Security Risk Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** July 14, 2022 **What do you like best about IBM QRadar SIEM?** The GUI of Qradar is easy to use, we can add dashboards as per our requirements, check the health status of our devices and even go through all the admin tabs in such a way that is easy to understand. **What do you dislike about IBM QRadar SIEM?** The price to deploy Qradar on a big level is very high as compared to the competition, which offers much more malleability at a low price point. **Recommendations to others considering IBM QRadar SIEM:** For every SOC center, we need a SIEM, and Qradar is probably the best SIEM to go with. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Qradar is providing live data feeds, which helps us in identifying and mitigating various security risks, & attacks. ### 13. I am manager soc in askaribank and also managing qradar since 5 years **Rating:** 4.5/5.0 stars **Reviewed by:** zeeshan a. | Manager Security Operations Center , Enterprise (> 1000 emp.) **Reviewed Date:** April 09, 2022 **What do you like best about IBM QRadar SIEM?** User friendly interface Easy to use Provide simple interface and easily can integrate with other infrastructure Local and international support is easily available **What do you dislike about IBM QRadar SIEM?** Parsing is not good in qradra, Most of fields are not parsed by qradar. Integration woth other products are dependant on verisons and in most cases latest versions are not supported **Recommendations to others considering IBM QRadar SIEM:** It is a good software for middel level organization, and also for those companies which are going to establish their SOC It is easy to deploy and easy to integrate. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** We are securing our envioronment with qradar and also uses it as a major copmonent of SOC, we are also using it to fulfill our compliance requirements. ### 14. Nice tool for getting an overview of daily cyber attacks. **Rating:** 5.0/5.0 stars **Reviewed by:** Nitin C. | C, Enterprise (> 1000 emp.) **Reviewed Date:** July 16, 2022 **What do you like best about IBM QRadar SIEM?** Easy to use, compatible, and scalability according to your use and the size of the infrastructure that you currently have. And the customizable dashboards give a nice touch to it. **What do you dislike about IBM QRadar SIEM?** The need for a continuous upgrade because of the app's support issue. This gets a hectic task as we might face issues if we have a huge environment with multiple components. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It helps to get a clear picture of daily cyber-attacks that are being done against your organization and UBA also helps to detect insider threats which give an upper hand in this changing digital world. ### 15. In-depth network forensics and integration with other tools **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** August 30, 2022 **What do you like best about IBM QRadar SIEM?** It helps in threat detection and response solution to remediate the threat. It has open architecture to deploy on premises, on cloud or as a service. We can integrate EDR, SIEM, SOAR and other threat intelligence while leaving data where it is for to complete the XDR approach. **What do you dislike about IBM QRadar SIEM?** The EPS cap limits the amount of logs that can be integrated in Qradar can generate many false positives. Not a much user friendly, a bit difficult to set the rules. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It is a good solution to monitor,investigate detect and respond to threats on devices and endpoints of the environment. Logs retention capability is good. It collate large amount of data from the cloud and on-site sources. ### 16. One of the best and effective SIEM Solution **Rating:** 4.5/5.0 stars **Reviewed by:** Rajesh M. | Cyber Security Analyst (SOC Lead), Mid-Market (51-1000 emp.) **Reviewed Date:** April 04, 2022 **What do you like best about IBM QRadar SIEM?** The product helps to identify threats or vulnerabilities hiding in the system and to find a quick solution to them. The rules and offenses can be used to work on threat secure policy. The IBM app for integration of many SIEM tools to gather logs and work on them is top-notch. **What do you dislike about IBM QRadar SIEM?** Some of the queries fail while searching for data. This happens more frequently when we like depending on the timespan/amount of data returned from the search. Rerunning the queries might work or I've had to edit the query to a shorter period/more restrictive. Generally, our searches are broad to be specific, so if the first search fails then we are unable to view the data in order to see how to make it more restrictive, which can get annoying. **Recommendations to others considering IBM QRadar SIEM:** The overall experience with the Qradar SIEM tool is good. The IBM support team is always reachable and approachable whenever in need and the support provided by them is apt and on time. The support team ensures to prioritize the issues raised by us and ensure to get them resolved as soon as possible. Overall experience with IBM is real good **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Whenever you feel like enlarging your structure, you can add new physical or virtual devices in IBM QRadar. Also, if you are going to get your logs from a different city then it is always nice to be able to set up an event collector there and transfer it over that device. ### 17. Qradar Easy to use **Rating:** 4.5/5.0 stars **Reviewed by:** Iqbal W. | Technical Consultant Analyst, Small-Business (50 or fewer emp.) **Reviewed Date:** June 25, 2022 **What do you like best about IBM QRadar SIEM?** Easy to use, very helpful for Security Monitoring and Investigations with single dashboard including many plugins dashboard, such as fortigate dashboard plugins. **What do you dislike about IBM QRadar SIEM?** On latest version, everytime to view log source list Qradar pop up to open mew tabs, i hope its can stay on single tab back again like oldest version. Soon SOAR is can be bundle on Qradar. **Recommendations to others considering IBM QRadar SIEM:** Stay on single dashboard, no need to open new tab when click something. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Ticket respond from support is always satisfied, because every cases can be solved by remote session, this is amazing since another SIEM tools need subscription to solve problem with their Proffesional Support team. ### 18. One of the leading SIEM Tools for enterprise settings for threat analysis and correlation **Rating:** 4.5/5.0 stars **Reviewed by:** Bilal A. | Senior Associate Security Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** May 04, 2022 **What do you like best about IBM QRadar SIEM?** It is helping security teams to reduce manual workload by automating all security monitoring processes by implementing the Zero Trust security model and it also supports multiple protocols to ingest logs and events from multiple endpoints to make it more diverse in terms of device vendor support. **What do you dislike about IBM QRadar SIEM?** IBM QRadar is somehow hard to configure compared to other vendors and onboarding log sources or assets can sometimes prove to be a hectic process **Recommendations to others considering IBM QRadar SIEM:** An organization should first consider the business requirements as this tool might prove to be costly and it will only make business sense if ROI is acceptable there should be skilled administrators and analysts to operate this tool to get the best out of it **What problems is IBM QRadar SIEM solving and how is that benefiting you?** We used QRadar as a Security Operations Monitoring tool in our SOC ### 19. Excellent Product in line with Business Requirement and Compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Darshan C. | C, Enterprise (> 1000 emp.) **Reviewed Date:** March 14, 2022 **What do you like best about IBM QRadar SIEM?** The tool is fabulous and works well to manage the changing business requirements. Its a tool that helps you in your day to day risk assessments and scalability. With other tools like splunk and logrhythm it is all about data and more the data to injest the better it will be. Qradar can be deployed quickly and start working from day one. I would say immediately it is a very easy to setup and work with sort of a tool. **What do you dislike about IBM QRadar SIEM?** The major issue is with connectors of legacy applications. It needs to work at par with the competition or excel as it is found wanting the soar platform or what you may call as next generation soc. I also felt it was wanting in the data management domain be with structured or unstructured data. Cost wise as well it is a huge overhead **Recommendations to others considering IBM QRadar SIEM:** This is a good tool if you dont plan to invest in manpower. I would recommend outsource the operations and sit tight. This tool will do your monitoring job at the backend but if you have plans for onsite soc go for something like splunk. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It is a no brainer and easy to implement sort of solution so you can achieve immediate compliance with your KPI's. We have found the solution extremely scalable and much easy to work with. If you understand the solution the day to day monitoring and reporting activity can save a lot of man hours. The connectors for known applications are easy to integrate with and hence works wonders. The threat hunting activity is an added bonus. ### 20. One stop SIEM solution **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** August 30, 2022 **What do you like best about IBM QRadar SIEM?** QRadar can be a one stop SIEM someone with its capabilities to integrate with TI feeds and UEBA. Is very easy to use and takes the focus off of the tool to help focus on what's important- Security. **What do you dislike about IBM QRadar SIEM?** The UI looks pretty outdated and boring and could be worked upon. Compared to its rivals like Splunk and other MDR tools that are now taking over the market, QRadar looks very bland. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Helps deliver accurate and timely security alerts to our clients. Can also be used to perform proactive threat hunts to make sure that the clients are safe from security threats. ### 21. IBM Security QRadar is very friendly to Analysis **Rating:** 5.0/5.0 stars **Reviewed by:** VIKAS P. | Senior Delivery Lead ( Sr.Cloud Security Architect), Enterprise (> 1000 emp.) **Reviewed Date:** June 28, 2022 **What do you like best about IBM QRadar SIEM?** IBM Security QRadar is very friendly and it's a great use to our organization for Analysis of our security postures and it's very fast and analysis friendly as compared to other SIEM **What do you dislike about IBM QRadar SIEM?** There are very few Dislikes but one thing that i would like to point out is that we should have more integration of this with other tools i.e more interoperability **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It's showings as the Gap and Loopholes in our current environment and help us to resolve them on time with proper incident response and planning and well coorealted with Security frameworks. ### 22. IBM QRadar - Designing, Deploying and day 2 day operations. **Rating:** 2.5/5.0 stars **Reviewed by:** Mohammed W. | Freelance Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** March 17, 2022 **What do you like best about IBM QRadar SIEM?** IBM QRadar is a pretty decent tool in my view, it is quick and easy to install, has a simple architecture, easy to ingest logs, console/dashboard is simple and comprehensive, has good out-of-the-box integration capabilities. **What do you dislike about IBM QRadar SIEM?** Based on our experience some of the issues we encountored were integration capabilities with custom, less known or homegrown applications. Other area's when compared to next generation SIEM's - inhernt capabilities and advantages of data lake, data management, SOAR platform benefits and reporting and searching capabilities are basic and limited. Cost of ownership is also on higher side which i belive can be simplified, at times it is difficult to get right support from OEM. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** QRadar is our single source to ingest important security audit logs from our estate, helps us do log correlation, perform key analysis on security incident management, address compliance local and international compliance requirements. ### 23. Protect your networks with this intelligent platform - IBM Security Radar **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** May 17, 2022 **What do you like best about IBM QRadar SIEM?** Real-time monitoring: This tool provides you with the capability to scan your network in real-time. Incidents can be identified and captured based on live network traffic and by using IBM's intelligence service which is backing this tool, it sends out notifications which can help prevent malicious activities, before they even happen. Simple Implementation: The deployment of this platform in your company's environment is very easy and on top of that it has a Cloud-based offering as well, which can easily be integrated with your company's network services and you need not worry about the platforms updates and maintenance activities as well. Logs retention capacity: is huge. Years of logs can easily be stored within the tool for compliance purposes. **What do you dislike about IBM QRadar SIEM?** The initial collection so logs can be slow with older versions of operating systems. This can be fixed by using better algorithms under the hood. For example: If integration happens with Windows XP or equivalent, the logs will be pulled in a lot longer time as compared to the latest versions of Windows. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** This tool is being used as a network security perimeter within our organisation. All the network traffic, to and fro from companies' assets is being monitored by dedicated teams via this tool. ### 24. Qradar is the best SIEM solution **Rating:** 5.0/5.0 stars **Reviewed by:** Moises P. | Cyber ​​Security Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** April 19, 2022 **What do you like best about IBM QRadar SIEM?** is very friendly with the users, easy to understand and easy to use and the most important thing is that is easy to add more technologies. **What do you dislike about IBM QRadar SIEM?** sometimes the tool is slow to use but the biggest problem is the correct creation of rules that allow the analysis of events **Recommendations to others considering IBM QRadar SIEM:** It is a complete solution that can last for many years without major inconveniences. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** We have resolved the collection, analysis and subsequent resolution of security incidents from the logs that we have been able to integrate with the tool. ### 25. One of the best siem tool **Rating:** 4.5/5.0 stars **Reviewed by:** Mohammad K. | Cybersecurity consultant, Enterprise (> 1000 emp.) **Reviewed Date:** July 06, 2022 **What do you like best about IBM QRadar SIEM?** Qradar is a one of the great tool for siem, if you want to monitor real time logs and also prevent any cyber attacks. There customer service is great in the industry, if you want to upgrade qradar with latest version and you stuck in between you can connect with there team and they will help you to do that.. **What do you dislike about IBM QRadar SIEM?** None. Everything is perfect as of my point of view **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Cyber attacks, helping do to threat hunting activity,real time monitoring, true postive n false positive ### 26. QRadar Review **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Banking | Mid-Market (51-1000 emp.) **Reviewed Date:** June 09, 2022 **What do you like best about IBM QRadar SIEM?** The most helpful thing is that the talent pool that can manage QRadar is quite sizable. Most analysts are familiar with it and easy to get. With diverse deployment and implementations available, this becomes a big contender for compliance & audit heavy organizations. **What do you dislike about IBM QRadar SIEM?** The interface is still quite old-fashioned. With steep pricing, learning curve, slow query executions, it sometimes becomes quite a hefty task to just manage the overall system well. Comparative to the new SIEMs & SOARs that are usually plug & play, QRadar still requires much hands on knowledge on the analyst side to make it effective, IMHO **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It helps us operate SOC operations at several big institutions and meet their security needs in a better way. With correlation, threat intelligence and possibility to integrate with SOAR, it becomes quite an attractive option. ### 27. For OWASP security standard it is excellent tool to use of SIEM **Rating:** 4.5/5.0 stars **Reviewed by:** Prasad M. | IT Analyst (Cloud Infrastructure, Platform Migration & Security), Small-Business (50 or fewer emp.) **Reviewed Date:** June 25, 2022 **What do you like best about IBM QRadar SIEM?** By using it's to handling best security practice and it's event management. Also, incidence handling by to OWASP standards in our application is highly provided by us. **What do you dislike about IBM QRadar SIEM?** Overall need to upgrade it every month to newly genrated events that may use daily in our applications and infrastructure to possible new genrated to get dffrent type of event handling. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** For better security and business contueneous improvement we have best practicess following by using it. As compare to other SIEM tool it is fast forword to grow up. ### 28. very versatile and convenient program **Rating:** 4.5/5.0 stars **Reviewed by:** Ravshan Y. | Head of Engineering Infrastructure Support Department, Mid-Market (51-1000 emp.) **Reviewed Date:** May 02, 2022 **What do you like best about IBM QRadar SIEM?** The program is very powerful and versatile. we were able to set up integration on it with our various equipment and servers (Juniper. Aix. Unix. Oracle) **What do you dislike about IBM QRadar SIEM?** it's a bit difficult to write parsers, but if you have experience in programming, then it's possible **Recommendations to others considering IBM QRadar SIEM:** Universality, you can write your own parser without much programming skills, solves many problems **What problems is IBM QRadar SIEM solving and how is that benefiting you?** it became more convenient to respond to incidents and it became easier to recognize hacking attempt ### 29. Have 7 years for deployment and operation IBM Qradar **Rating:** 5.0/5.0 stars **Reviewed by:** Dung L. | Security Operations, Small-Business (50 or fewer emp.) **Reviewed Date:** July 19, 2022 **What do you like best about IBM QRadar SIEM?** Friendly GUI and helpful rules, help me monitor overall **What do you dislike about IBM QRadar SIEM?** Sometimes GUI responds slowly and some rule is not helpful **What problems is IBM QRadar SIEM solving and how is that benefiting you?** IBM Qradar has large communication and have more rules for security ### 30. Can't prefer QRadar alone but prefer to use with SOAR concepts **Rating:** 2.5/5.0 stars **Reviewed by:** Bhagath Singh G. | Senior Cyber Security Advisor, Enterprise (> 1000 emp.) **Reviewed Date:** August 15, 2022 **What do you like best about IBM QRadar SIEM?** It has variety of searches that you can easily do and correlation queries can be easily altered **What do you dislike about IBM QRadar SIEM?** I am not a fan of Qradar View. when I see it I feel that's a pretty outdated view. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** When it is connected with XSOAR the user experience is better as alerts are directly linked and synced. ### 31. Q- radar review **Rating:** 5.0/5.0 stars **Reviewed by:** Vaibhav T. | Risk Advisory, Enterprise (> 1000 emp.) **Reviewed Date:** July 13, 2022 **What do you like best about IBM QRadar SIEM?** The thing i like the most about q radar is we can customise everything according to ourself **What do you dislike about IBM QRadar SIEM?** As the q radar on which i am working is deployed on cloud so it gets slow when multiple instances are opened . **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Whenever something malicious is happening in our environment we get the alerts for that if someone is communicating with malicious IP , some malicious hash is captured on EDR . ### 32. More than 3 years of working experience with IBM QRadar **Rating:** 4.0/5.0 stars **Reviewed by:** Muhamad W. | Sr. Consultant InfoSec Technologies, Enterprise (> 1000 emp.) **Reviewed Date:** April 27, 2022 **What do you like best about IBM QRadar SIEM?** Easy to use. It has the best features like UBA, USE Case Manager, Watson Advisory etc. Mapping to MITRE attacks, IBM Thread Intelligence is among very useful tools security guys use on a daily bases. **What do you dislike about IBM QRadar SIEM?** The default dashboard should be well designed. Also, I have some issues with the integration of Huawei customized devices but the issue was not at the QRadar end. **Recommendations to others considering IBM QRadar SIEM:** Have working experience with other SIEM solutions as well and I have found this tool easy to deploy and configure. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Monitoring network security posture, Threat Hunting, type of communication, violations of user access rights, device misuse, and violations of configured rules. ### 33. 14 years of IT experience **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Semiconductors | Enterprise (> 1000 emp.) **Reviewed Date:** July 05, 2022 **What do you like best about IBM QRadar SIEM?** Easy to setup and scalable faster result good price compared to other tools like splunk **What do you dislike about IBM QRadar SIEM?** Lack some features in SAP monitoring High Cost of AI and ML features Can be more improved in terms of securing and integrity **Recommendations to others considering IBM QRadar SIEM:** it is a best tool interm of cost and easy to setup **What problems is IBM QRadar SIEM solving and how is that benefiting you?** We use QRadar to collect logs and monitor user activity and traffic from one site to other site. The SOC team monitor the traffic from the logs. All internet activity and the output of every device is configured to send a log to QRADER. we can view live internet traffice and all other network traffice. ### 34. Easy to setup and Use **Rating:** 4.5/5.0 stars **Reviewed by:** Kailash B. | Security Researcher, Mid-Market (51-1000 emp.) **Reviewed Date:** June 20, 2022 **What do you like best about IBM QRadar SIEM?** I found IBM Security QRadar very easy to set up and use in comparison to other SIEM solutions. **What do you dislike about IBM QRadar SIEM?** Log collection and analysis part seems easy but setting up custom correlation rules is hard for me. I wish there could be an easy guide on setting up correlation rules. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It is helping us to analyze chunks of logs in an easily visualized way, alerting security teams to the possible weak area to mitigate security threats. ### 35. IBM Security Qradar Genuine Review **Rating:** 4.5/5.0 stars **Reviewed by:** BHABESH K. | Penetrations Tester, Small-Business (50 or fewer emp.) **Reviewed Date:** May 11, 2022 **What do you like best about IBM QRadar SIEM?** Easy to use with all GUI pre design tool **What do you dislike about IBM QRadar SIEM?** I didn't find deep scanner that is very very important for vulnerability assessment. You need to focus deep scanner and more AI features specially cloud security **Recommendations to others considering IBM QRadar SIEM:** Those who wants to use a best security tools, I think this tools I'll recomend to use. Your work load will reduce and you can do other security works. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** I found multiple security tools in one platform that is very impressive and for VA and SoC Analyst. Analyst can easily to use this tool, nothing too much complex. ### 36. IBM Security QRadar is a very good SIEM solution **Rating:** 5.0/5.0 stars **Reviewed by:** Nam T. | Senior Information Security Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** May 17, 2022 **What do you like best about IBM QRadar SIEM?** First, it has enough functions of a standard, modern SIEM. Second, its interface is rather intuitive for use. Third, IBM offers free learning from its academy if you want to have deep knowledge of its solution. Last but not least, its support team offer great service. **What do you dislike about IBM QRadar SIEM?** Its User Behavior Analytics and automated investigation (offenses) look great, but in reality it is difficult to correspond the findings to the real context. **Recommendations to others considering IBM QRadar SIEM:** You should buy it. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** To comply with the regulations and to have a good solution for incident response. ### 37. IBM Qradar Review **Rating:** 4.5/5.0 stars **Reviewed by:** Manzar A. | Software Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** March 29, 2022 **What do you like best about IBM QRadar SIEM?** It provides an excellent UI where we can do a lot of things related to analysis and administration along with CLI and AQL query language. Other SIEM tools are completely based on query languages which makes it difficult to quickly onboard new team members. **What do you dislike about IBM QRadar SIEM?** QRadar has some performance issues related to slowness of UI and query processing. It's query processing engine is not as powerful as other SIEM tools like Splunk. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** IBM QRadar is a SIEM tools where we can ingest logs from different security and non security tools and write query to fetch insights also we can create detection rules for proactive detection of cyber malicious activities. ### 38. It was good **Rating:** 5.0/5.0 stars **Reviewed by:** Ganesh S. | System Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** May 03, 2022 **What do you like best about IBM QRadar SIEM?** The content of the course is good. It has good practical hands-on exercises that helps to understand and grasp the concepts. **What do you dislike about IBM QRadar SIEM?** The content could have had more sessions on analysis of alerts. **Recommendations to others considering IBM QRadar SIEM:** IBM Qradar had an edge on other siem tools. It is very user friendly and anyone can learn so easily. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** I started off with Qradar architecture. But it had more in-depth concepts and made us to understand the core concepts of Qradar. ### 39. It is good experience working with IBM QRadar for the last 4 years **Rating:** 4.5/5.0 stars **Reviewed by:** satish kumar k. | Deputy Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** May 26, 2022 **What do you like best about IBM QRadar SIEM?** choice of log collection from different protocols and narrow down the searches adding field like domain, log source type . I like to work more on Redhat Linux. **What do you dislike about IBM QRadar SIEM?** Sometimes delay in response from support when having issue with product. Also no detailed note on the case how the issue got resolved. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Data can be corelate with different data, can be parsed some custom fields of our own. Also creating custom DSM when it is not supported. ### 40. One of best SIEM Tool in the market. **Rating:** 4.5/5.0 stars **Reviewed by:** Yugandhar S. | SOC CONSULTANT, Small-Business (50 or fewer emp.) **Reviewed Date:** July 10, 2022 **What do you like best about IBM QRadar SIEM?** Multi ways deployment for smallest to largest organization. Offenses and logs handling. Reports generation **What do you dislike about IBM QRadar SIEM?** Too much of manual task. UI is bit lagging. **Recommendations to others considering IBM QRadar SIEM:** Best SIEM Tool in market and affordable. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Real time monitoring keeps tabs on what is happening in our environment at one place rather than checking each and every log source. ### 41. IBM QRadar is quite convenient SIEM **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** July 20, 2022 **What do you like best about IBM QRadar SIEM?** It is easy to deploy, user-friendly interface, informative manuals, responsive and helpful technical support. **What do you dislike about IBM QRadar SIEM?** Integrating ESET logs are still in progress. I think it is a matter of time and technical support will resolve this issue soon. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It collects logs from different sources and detects potential threats. ### 42. Top notch protection mechanism **Rating:** 4.5/5.0 stars **Reviewed by:** Syed Jan Muhammad Z. | Sr. Pentesting Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** June 20, 2022 **What do you like best about IBM QRadar SIEM?** The best thing about IBM QRadar is it's monitoring dashboard. I like the way how I can see summarized threats **What do you dislike about IBM QRadar SIEM?** Well, I guess there is not any missing thing in this product. However, being the giant in SIEM world they should lower the license prices **What problems is IBM QRadar SIEM solving and how is that benefiting you?** With IBM Security QRadar I can monitor all my organizational security events and manage those events accordingly ### 43. I am working on qradar siem since 3 years and it was great to work on Qradar siem **Rating:** 4.0/5.0 stars **Reviewed by:** Itesh K. | Senior Security Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** July 14, 2022 **What do you like best about IBM QRadar SIEM?** Security and capabilities of use case creation **What do you dislike about IBM QRadar SIEM?** Gui is slow many times And the cost of deployment is high compared to competitors **Recommendations to others considering IBM QRadar SIEM:** It's a good SIEM to begin with and is easy to deploy and scale further. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Log visibility is very easy , qdi makes health status visible ### 44. IBM QRadar- A Complete SIEM Solution **Rating:** 3.5/5.0 stars **Reviewed by:** Arunkumar K. | Information Security Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** April 11, 2020 **What do you like best about IBM QRadar SIEM?** I like the reliability of Qradar and the quick log retrievals. **What do you dislike about IBM QRadar SIEM?** The longer wait time when we really want to connect with the QRadar support techies, that really needs improvement. **Recommendations to others considering IBM QRadar SIEM:** IBM Security QRadar will be the best choice if you want to reduce the noise and concentrate more on legitimate threats. One bad thing is the vendor support. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** We have received may alerts from multiple network devices which primarily helped us hardening security of the perimeter systems. ### 45. Best in analysis but bad support **Rating:** 2.5/5.0 stars **Reviewed by:** Ninad C. | Incident Response Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** May 06, 2022 **What do you like best about IBM QRadar SIEM?** Good for analysis. Group by function is really good. UEBA feature is really good. **What do you dislike about IBM QRadar SIEM?** UEBA machine learning function not working since years and support not bale to solve issues. Use creation not so easy. Option should be provided to add new condition. Regex feature should be added in reference set. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Analysis is very easy compared to other siem tools. Historical correlation feature not seen with other siems. Resilient not so good when it comes to work with qradar. ### 46. Easy to use and Alert monitoring **Rating:** 4.5/5.0 stars **Reviewed by:** Vishal G. | Senior System Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** April 02, 2022 **What do you like best about IBM QRadar SIEM?** The dashboard is most helpful to understand summary of alerts and summary of EPS,etc. IBM resilient, Demisto and internal portals. IBM Qradar is best ever in SOC monitoring. **What do you dislike about IBM QRadar SIEM?** Not able to monitor CCTV, Printers and scanner machines. The Asset tab is not working properly. Add dark mode for eye visibility and graphical statistics to the dashboard. **What problems is IBM QRadar SIEM solving and how is that benefiting you?** To find the attempt on the network and help to mitigate the attacks before compromised. Using this we can see other activities related to the attacks. Obviously , the security of data is the best component of Business. ### 47. One of the best SIEM Tool **Rating:** 5.0/5.0 stars **Reviewed by:** Yug S. | Senior Security Consultant, Mid-Market (51-1000 emp.) **Reviewed Date:** July 13, 2022 **What do you like best about IBM QRadar SIEM?** Report creation, alerts and log monitoring **What do you dislike about IBM QRadar SIEM?** Too much manual work. GUI seems lagging. **Recommendations to others considering IBM QRadar SIEM:** One of the best SIEM Tools out there. Easy to use **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Real time log monitoring, report generation. It helps to keep eye on the environment for any malicious activity. ### 48. Very powerfull tools if configured in a correct way **Rating:** 4.0/5.0 stars **Reviewed by:** Roy c. | L2 SOC ANALYST, Mid-Market (51-1000 emp.) **Reviewed Date:** March 27, 2022 **What do you like best about IBM QRadar SIEM?** How easy you can perform query and perform searches. Easy to creat use case and there is a lot of built in use case. Very powerfull user analytics. **What do you dislike about IBM QRadar SIEM?** Some aql query cannot be shared betwwn users **What problems is IBM QRadar SIEM solving and how is that benefiting you?** I perform incident forensic with qradar because it contains network/ operating system and all other security tools which can be corroletade ### 49. Best SIEM for small to medium organizations **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Construction | Enterprise (> 1000 emp.) **Reviewed Date:** July 28, 2022 **What do you like best about IBM QRadar SIEM?** Easy to integrate with other tools, availability of extentions, simple rule creation, good customer support, large community to discuss queries, able to trigger alertsin real time **What do you dislike about IBM QRadar SIEM?** Tool is very bulky due to this problems occurs during upgrading, search is slow if data is High, some time refrence set cause problem **What problems is IBM QRadar SIEM solving and how is that benefiting you?** It is event management system, Central console to collect all events, you can build rules to trigger alerts for anomalies ### 50. Best SIEM product in the market. Easy to integrate new devices and other security technologies. **Rating:** 4.0/5.0 stars **Reviewed by:** kunal a. | SOC administrator, Enterprise (> 1000 emp.) **Reviewed Date:** July 26, 2022 **What do you like best about IBM QRadar SIEM?** Simple GUI and ease to configure rules, dashboards, reports and searches **What do you dislike about IBM QRadar SIEM?** There are issues related to the wincollect agent wherein the services stops automatically and log reception stops **What problems is IBM QRadar SIEM solving and how is that benefiting you?** Compliance security visibility Threat intelligence ## IBM QRadar SIEM Discussions - [What are the challenges you are facing in further improvement of the technology?](https://www.g2.com/discussions/what-are-the-challenges-you-are-facing-in-further-improvement-of-the-technology) - 1 upvote - [Need to know is there any way out to stop unsyncing of devices](https://www.g2.com/discussions/52041-need-to-know-is-there-any-way-out-to-stop-unsyncing-of-devices) - 1 upvote - [How do you compare it with Splunk?](https://www.g2.com/discussions/30589-how-do-you-compare-it-with-splunk) - [How to make qreadar portable](https://www.g2.com/discussions/30181-how-to-make-qreadar-portable) - [can this product integrate with endpoint security.](https://www.g2.com/discussions/29480-can-this-product-integrate-with-endpoint-security) - [View IBM QRadar SIEM pricing details and edition comparison](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-07-03+10%3A31%3A10+-0500&secure%5Bsession_id%5D=30e19cda-b175-4fc6-b770-1b32b475dab2&secure%5Btoken%5D=409b99579c9c0cecb2624040f052b753ad89e18aa2d0a99ab13a85eaf44fa7f5&format=llm_user) ## IBM QRadar SIEM Features **Automation** - Metadata Management - Artificial Intelligence & Machine Learning - Response Automation - Continuous Analysis **Analysis** - File Analysis - Memory Analysis - Registry Analysis - Email Analysis - Linux Analysis **Activity Monitoring** - Usage Monitoring - Database Monitoring - API Monitoring - Activity Monitoring **Agentic AI - User and Entity Behavior Analytics (UEBA)** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Response** - Resolution Automation - Resolution Guidance - System Isolation - Threat Intelligence - Incident Investigation **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Network Management** - Activity Monitoring - Asset Management - Log Management **Functionality** - Multi-Network Capability - Anomaly Detection - Network Visibility - Scalability **Functionality** - Incident Alerts - Anomaly Detection - Continuous Analysis - Decryption **Analysis** - Continuous Analysis - Behavioral Analysis - Data Context - Activity Logging **Security** - Compliance Monitoring - Risk Analysis - Reporting **Records** - Incident Logs - Incident Reports **Security** - Data Security - Data loss Prevention - Security Auditing **Incident Management** - Event Management - Automated Response - Incident Reporting **Incident Management** - Incident Logs - Incident Alerts - Incident Reporting **Remediation** - Incident Reports - Remediation Suggestions - Response Automation **Detection** - Anomaly Detection - Incident Alerts - Activity Monitoring **Administration** - Security Automation - Security Integration - Multicloud Visibility **Management** - Incident Alerts - Incident Case Management - Workflow Management **Identity** - SSO - Governance - User Analytics **Security Intelligence** - Threat Intelligence - Vulnerability Assessment - Advanced Analytics - Data Examination **Generative AI** - AI Text Generation - AI Text Summarization **Agentic AI - Security Information and Event Management (SIEM)** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Agentic AI - Cloud Security Monitoring and Analytics** - Autonomous Task Execution - Proactive Assistance - Decision Making **Generative AI** - AI Text Generation - AI Text Summarization ## Top IBM QRadar SIEM Alternatives - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) - 4.3/5.0 (391 reviews) - [Rapid7 Next-Gen SIEM](https://www.g2.com/products/rapid7-next-gen-siem/reviews) - 4.4/5.0 (67 reviews) - [Datadog](https://www.g2.com/products/datadog/reviews) - 4.4/5.0 (709 reviews)