IBM Security QRadar SIEM v7.4.3 (BYOL)
IBM Security | IBM Security QRadar SIEM v7.4.3 (BYOL)Linux/Unix, Red Hat Enterprise Linux RHEL-7.7 - 64-bit Amazon Machine Image (AMI)
Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
IBM Security QRadar
What do you like best about the product?
I like this software it collects user log data from an enterprise, monitors user activity the tool is awesome easy to use on the front end and back end and the design is fantastic.
What do you dislike about the product?
I dislike this software it bad supports, is very complicated, then things get stuck up at times and ultimately it leads to the cancellation of respective searches and it does not offer anything different.
What problems is the product solving and how is that benefiting you?
Exploit vulnerabilities & timely monitor suspicious activities.
Recommendations to others considering the product:
I recommend to others using this software which is fast and easy to use software to exploit and maintain logs.
- Leave a Comment |
- Mark review as helpful
Excellent Product in line with Business Requirement and Compliance
What do you like best about the product?
The tool is fabulous and works well to manage the changing business requirements. Its a tool that helps you in your day to day risk assessments and scalability.
With other tools like splunk and logrhythm it is all about data and more the data to injest the better it will be. Qradar can be deployed quickly and start working from day one. I would say immediately it is a very easy to setup and work with sort of a tool.
With other tools like splunk and logrhythm it is all about data and more the data to injest the better it will be. Qradar can be deployed quickly and start working from day one. I would say immediately it is a very easy to setup and work with sort of a tool.
What do you dislike about the product?
The major issue is with connectors of legacy applications. It needs to work at par with the competition or excel as it is found wanting the soar platform or what you may call as next generation soc. I also felt it was wanting in the data management domain be with structured or unstructured data. Cost wise as well it is a huge overhead
What problems is the product solving and how is that benefiting you?
It is a no brainer and easy to implement sort of solution so you can achieve immediate compliance with your KPI's. We have found the solution extremely scalable and much easy to work with. If you understand the solution the day to day monitoring and reporting activity can save a lot of man hours. The connectors for known applications are easy to integrate with and hence works wonders. The threat hunting activity is an added bonus.
Recommendations to others considering the product:
This is a good tool if you dont plan to invest in manpower. I would recommend outsource the operations and sit tight. This tool will do your monitoring job at the backend but if you have plans for onsite soc go for something like splunk.
An all in one SIEM Solution! Kudos!
What do you like best about the product?
An excellent SIEM Solution in the market which for network devices, host assets, operating systems, applications, vulnerabilities, and user activities and behaviors monitoring!
What do you dislike about the product?
None as of now. Thank you IBM Security QRadar!
What problems is the product solving and how is that benefiting you?
SIEM Solution for log collection and analysis in order to detect threat and vulnerabilities.
Recommendations to others considering the product:
Go without a doubt thought if you actually want to secure your assets with absolute zero compromise!
Great experience with ibm qradar
What do you like best about the product?
I loved all features it helps in monitoring all offense very efficiently . It helps to magiticate and investigate the offense very efficiently
What do you dislike about the product?
Its searches are very difficult to build sometimes it takes alot of time
What problems is the product solving and how is that benefiting you?
Monitoring got easy and investigation got very much and need to more simply things
User friendly, easy to filter and extraction of data,
What do you like best about the product?
Use case management, customized dashboards, AQL filters , user account management and ease of integrations with available documentation.
What do you dislike about the product?
Sometimes performance degradation issues occur in older versions.
What problems is the product solving and how is that benefiting you?
Threat Hunting
Logs storage
Automation of playbooks by integrating it with SOAR platforms.
Logs storage
Automation of playbooks by integrating it with SOAR platforms.
Best Security Monitoring tool
What do you like best about the product?
It has easy to use interface as compared to tools like Splunk, easy to write correlation rules which helps in giving insights across environments and help in detecting threats and act on it immediately.
IBM threat feed support is great and also you get benifit of adding open source threat feeds like STIIX AND TAXII.
Solution supports almost all of the data sources and great support for custom devices
IBM threat feed support is great and also you get benifit of adding open source threat feeds like STIIX AND TAXII.
Solution supports almost all of the data sources and great support for custom devices
What do you dislike about the product?
sometimes it gets difficult to parse unknown data. It takes times. Asset management is also a pain.
What problems is the product solving and how is that benefiting you?
We have been using ibm qradar for compliance issues in multiple bank projects. it's affordable.
D.Director of Application Operations Center
What do you like best about the product?
Dashboard of QRadar very helpful for end-user to using
What do you dislike about the product?
Log Collector some time can not integration with all device
What problems is the product solving and how is that benefiting you?
IBM need to review the log connector and enhancement
Recommendations to others considering the product:
Enhance core system to run the application as lightweight, faster and smooth
QRadar - Scalable SIEM tool
What do you like best about the product?
The most attractive feature of QRadar is the scalability options it provides for all the type of network environments. The all-in-one appliance is capable of managing all the activities of a logger, collector and processor in a limited environment.
What do you dislike about the product?
The limited DSM modules available for different security products is one such thing that I dislike. If some more DSM modules are created for the upcoming new security devices in the market for parsing.
What problems is the product solving and how is that benefiting you?
IBM Security QRadar is used in our organization as a SIEM tool for soc operations and for the fast searching capabilities of the tool. Performance wise yes the business has gotten a boost.
Recommendations to others considering the product:
Anyone who doesn't want to invest a lot of money on SIEM tool should definitely go for QRadar.
Advanced SIEM Tool IBM QRadar
What do you like best about the product?
GUI is very user friendly... Tabs provided to nevigate is very easy to work with. Easy to integrate multiple network devices. Creating custom rules are user friendly. Putting filter for perfirming search is also very easy.
What do you dislike about the product?
Not much i came through till now... QRadar is best SIEM tool in the market currently.
What problems is the product solving and how is that benefiting you?
I am working on QRadar for analysing real time attack in client environment. Also creating custom dashboard to monitor unusual traffic. Also creating manual and automatic reports to be shared with client. All in one tool.
Very wide range of features, but it is complicated
What do you like best about the product?
Very wide range of features, alot of inigration with other IBM security products, truely it is a do covery the needs in correlation, very fat system, specially in logs retrieval
What do you dislike about the product?
Very complicated product, hard to Manage, bad support, to much issues, requires alot of resources
What problems is the product solving and how is that benefiting you?
Is is cover siem solution and provide good correlation rules in addyion to network configuration analysis
Recommendations to others considering the product:
Make sure to get professional services from IBM directly, or at least make sure local vendor have enough experience to implement the solution
Make aure you need all the features in the system, if not go with other solution which may cover your requirements and have less issue and easier in support and implementation
Make aure you need all the features in the system, if not go with other solution which may cover your requirements and have less issue and easier in support and implementation
showing 151 - 160