G2

Rajesh M.

Cyber Security Analyst (SOC Lead)

Mid-Market (51-1000 emp.)

4/4/2022

"One of the best and effective SIEM Solution"

4.5/5

What do you like best about IBM QRadar SIEM?

The product helps to identify threats or vulnerabilities hiding in the system and to find a quick solution to them. The rules and offenses can be used to work on threat secure policy. The IBM app for integration of many SIEM tools to gather logs and work on them is top-notch. Review collected by and hosted on G2.com.

What do you dislike about IBM QRadar SIEM?

Some of the queries fail while searching for data. This happens more frequently when we like depending on the timespan/amount of data returned from the search. Rerunning the queries might work or I've had to edit the query to a shorter period/more restrictive. Generally, our searches are broad to be specific, so if the first search fails then we are unable to view the data in order to see how to make it more restrictive, which can get annoying. Review collected by and hosted on G2.com.

Recommendations to others considering IBM QRadar SIEM:

The overall experience with the Qradar SIEM tool is good. The IBM support team is always reachable and approachable whenever in need and the support provided by them is apt and on time. The support team ensures to prioritize the issues raised by us and ensure to get them resolved as soon as possible. Overall experience with IBM is real good Review collected by and hosted on G2.com.

What problems is IBM QRadar SIEM solving and how is that benefiting you?

Whenever you feel like enlarging your structure, you can add new physical or virtual devices in IBM QRadar. Also, if you are going to get your logs from a different city then it is always nice to be able to set up an event collector there and transfer it over that device. Review collected by and hosted on G2.com.