Rapid 7 SIEM has a intuitive UI/UX and straightforeard integrations with various third party vwendors which is crucial for a SIEM solution. rapid7 also has very good support and the perfomance of the SIEM in terms of log ingestion, correlation and detection is top nothc. Rapid 7 SIEM is also cost effectivr espocilly for SMB customers. Their in buit AI is also very helpfiu;l during query complex log data Review collected by and hosted on G2.com.

What I dislike is the lack of vendor support. Even though they have many options available, it still falls short compared to a few other SIEM solutions. Review collected by and hosted on G2.com.

I love the queries a lot, especially the AI feature where you can write your query in plain text and it converts it into LEQL is very cool. Also, it does not take long to load up. It integrates really well with SentinelOne too and the interface is very easy to use. Review collected by and hosted on G2.com.

So far it has been a bit of. learning curve, nothing is wrong with it at all. Review collected by and hosted on G2.com.

In my experience, this is the easiest SIEM tool to implement. Another advantage is that, unlike many competitors, its pricing is not based on log ingestion. It has many pre-built integrations making it very easy to integrate with many 3rd party tools. Review collected by and hosted on G2.com.

This tool may feel somewhat limited when compared to some of the larger competitors in the industry. Review collected by and hosted on G2.com.

It allows us to view and search the log sets generated across our estate with ease, and it produces clear, easy-to-understand alerts based on them. Review collected by and hosted on G2.com.

Honestly, there’s nothing to dislike. It really lifted the lid on our environments and helped us see what was going on more clearly. Review collected by and hosted on G2.com.

I highly value its seamless integration of UEBA and deception tools to detect lateral movement across the network. Review collected by and hosted on G2.com.

The platform lacks deep customization for complex correlation rules and can become quite expensive as log volume increases. Review collected by and hosted on G2.com.

It maps detections to MITRE ATT&CK, which helps a lot during investigations. So it makes the processes faster Review collected by and hosted on G2.com.

It's too limited. It's becomes difficult to create alerts and set up pattern based alerts do to the timing Review collected by and hosted on G2.com.

Insight IDR provides a detailed look at any event that might occur in your environment. It's flexible enough to plug into just about any situation and has the ability to monitor a number of 3rd party sources giving you a single view into your entire environment without having to go to multiple dashboards. Review collected by and hosted on G2.com.

There can be a lot of overhead and some of the integrations and monitoring especially for Windows devices can be a little clunky. Additional collector servers will be needed to gather the logs and these can be costly if you're running them in the cloud. Review collected by and hosted on G2.com.

The visibility and threat detection that InsightIDR offers for our organization's network is vital, making it a crucial component of our defence against cyberattacks. It is also very easy to use. Review collected by and hosted on G2.com.

Pricing: Although InsightIDR offers outstanding value for the services it delivers, smaller organisations with tighter budgets could discover its pricing to be on the expensive side. Review collected by and hosted on G2.com.

We are now monitoring all logs from various security solutions sent to IDR and it helps our operations in correlating all these findings easily. Saves time in logging in to different UI and we now have a single console of correlation and source of alerts and notifications Review collected by and hosted on G2.com.

Not all solutions can be integrated out of the box. We need to learn all parsings and eliminate all false positives. It takes time for the solution to learn network traffic Review collected by and hosted on G2.com.

Its have features of integrated with active directory to check user details in detailed It's very easy to approach Review collected by and hosted on G2.com.

No option to export daily alerts It's should be very recommended for organisation to help for their approach of business possibilities Review collected by and hosted on G2.com.