IBM Security QRadar SIEM v7.4.3 (BYOL)
IBM Security | IBM Security QRadar SIEM v7.4.3 (BYOL)Linux/Unix, Red Hat Enterprise Linux RHEL-7.7 - 64-bit Amazon Machine Image (AMI)
Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
In a sea of SIEM solutions, Qradar stands out for its minimalist yet effective attributes
What do you like best about the product?
The strength of Qradar is its ease of use. Even a novice user with a little idea of what rules he wants to create, can just select the rule conditions from drop down lists and create a rule in one go. It also satisfies the appetite of more powerful users who want to use AQL to write complex correlations or search queries.
What do you dislike about the product?
Qradar misses minor points on chart types offered, time-based statistics and also a better Incident handling procedure( assigning tickets to individuals and tracking until closure) would have been great. Asset management could be better.
What problems is the product solving and how is that benefiting you?
Daily monitoring of the infrastructure using Qradar SIEM rules and log activity tab. Furnishing reports to management directly generated from the tool. Visibility of the entire endpoint and network logs.
Recommendations to others considering the product:
Use Network Activity tab for packet capture, its very powerful. Build rules with few clicks with much ease.
- Leave a Comment |
- Mark review as helpful
Qradar ranks one of the best Siem product
What do you like best about the product?
It's supports most of the log sources and is friendly to use
What do you dislike about the product?
I think support team needs to be more efficient
What problems is the product solving and how is that benefiting you?
Helpful in analysis of different sources logs. Hui friendly.
Recommendations to others considering the product:
It's most user friendly
10
What do you like best about the product?
It's very simple to use. It helps IT administrators to detect and investigate incidents.
What do you dislike about the product?
In my opinion there is no such thing to dislike Qradar
What problems is the product solving and how is that benefiting you?
From one window I can see my complete network up to port level. It helps me to solve problems like any incidents. I can locate and contain problems very easily.
Recommendations to others considering the product:
One of the best solution I have ever used. It's very easy to use and integrate all devices with simple configuration. It assures integrity of logs. You can add all your log sources, monitor logs, offenses. Also you can prevent and detect attacks and investigate incidents.
IBM Qradar Recommendation
What do you like best about the product?
It is structured and easily analyze the the data or information, data is more readable as in raw format only,events are organized.
What do you dislike about the product?
User interface is not up to the Standard of the company reputation.
What problems is the product solving and how is that benefiting you?
Solving problems on alerts on clients and reporting the errors. Reporting the error is easily done and data are more efficiently classifiable.
Recommendations to others considering the product:
Qradar is a good SIEM tool and companies can adapt to IBM.
easy to use, learn, easily managed, comprehensive visibility, good offense management
What do you like best about the product?
Administration part- Parsing, Integration. Easy to scale. App add on to make enhancement in features, Multi-tenancy. Easy use for L1 analysts.
What do you dislike about the product?
old interface, difficulty with some apps
What problems is the product solving and how is that benefiting you?
Incident analysis, reporting and resolution. Threat investigation. Logs management.
QRadar offers a versatile and extensive SIEM platform with many choices of out-of-the-box content
What do you like best about the product?
QRadar has a solid ecosystem of value-added integrations. User Behavior Analytics ,Watson AI ,Includes strong support for network data monitoring.
What do you dislike about the product?
Not so much for integration and deployment, and service/support as other competitors
What problems is the product solving and how is that benefiting you?
IBM QRadar Advisor with Watson provides automated root cause research for identified threats.
Best in the current market
What do you like best about the product?
The correlation engine and the easiest GUI to work with. The support is very good. Easy deployment.
What do you dislike about the product?
Doesn't support integration with SOAR ,ELK or other SIEM.lack of GUI customization.Heavily use of machine learning.
What problems is the product solving and how is that benefiting you?
Easiest and fastest to setup in new environment. It doesn't need lots of time to get used to.Its automated monitoring helps to detect threats faster and gives great visibility of the infrastructure.
IBM Q-Radar Executive Review
What do you like best about the product?
There are a number of SIEMs on the market today but not all are created equal, QRadar stands the top for ease of use
What do you dislike about the product?
Nothing at the moment, eagerly waiting for further updates
What problems is the product solving and how is that benefiting you?
Mass Assignment with the work and managing organization
Agile and flexible
What do you like best about the product?
Correlation and reporting are the best features this tool
What do you dislike about the product?
Automation and customization should be more flexible
What problems is the product solving and how is that benefiting you?
Incident and co-relations are help full in identifying any incident
Cyber Security Analyst
What do you like best about the product?
IBM Qradar db is very extensive and provide real time updates and helps to trigger anomalies and respond accordingly.
What do you dislike about the product?
I don't think there is any downside in IBM Qradar.
What problems is the product solving and how is that benefiting you?
we monitor the traffic by IBM QRadar and analyze the logs and respond to the events/incidents.
showing 231 - 240