G2

Darshan C.

Enterprise (> 1000 emp.)

3/14/2022

"Excellent Product in line with Business Requirement and Compliance"

5/5

What do you like best about IBM QRadar SIEM?

The tool is fabulous and works well to manage the changing business requirements. It's a tool that helps you in your day-to-day risk assessments and scalability. With other tools like Splunk and LogRhythm, it's all about data, and the more data to ingest, the better it will be. QRadar can be deployed quickly and start working from day one. I would say immediately it is a very easy to set up and work with sort of a tool. Review collected by and hosted on G2.com.

What do you dislike about IBM QRadar SIEM?

The major issue is with connectors of legacy applications. It needs to work at par with the competition or excel as it is found wanting in the SOAR platform or what you may call as next-generation SOC. I also felt it was wanting in the data management domain, be it with structured or unstructured data. Cost-wise as well, it is a huge overhead. Review collected by and hosted on G2.com.

Recommendations to others considering IBM QRadar SIEM:

This is a good tool if you don't plan to invest in manpower. I would recommend outsourcing the operations and sitting tight. This tool will do your monitoring job at the backend, but if you have plans for onsite SOC, go for something like Splunk. Review collected by and hosted on G2.com.

What problems is IBM QRadar SIEM solving and how is that benefiting you?

It is a no-brainer and easy to implement sort of solution so you can achieve immediate compliance with your KPIs. We have found the solution extremely scalable and much easier to work with. If you understand the solution, the day-to-day monitoring and reporting activity can save a lot of man-hours. The connectors for known applications are easy to integrate with and hence work wonders. The threat hunting activity is an added bonus. Review collected by and hosted on G2.com.