IBM Security QRadar SIEM v7.4.3 (BYOL)
IBM Security | IBM Security QRadar SIEM v7.4.3 (BYOL)Linux/Unix, Red Hat Enterprise Linux RHEL-7.7 - 64-bit Amazon Machine Image (AMI)
Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Is it really protecting our organization?
What do you like best about the product?
In addition to its advanced threat detection capabilities, IBM Security QRadar SIEM offers a range of features that make it a popular choice among organizations. One notable aspect is its centralized log management functionality.
What do you dislike about the product?
Complexity of Implementation as we have found the initial implementation and setup of QRadar SIEM to be complex and time consuming process. The platform's rich feature set and extensive configuration options may require experienced personnel or additional training to fully utilize its capabilities
What problems is the product solving and how is that benefiting you?
One of the significant challenges in is managing and analyzing security event logs from various sources. QRadar SIEM provides a centralized platform for collecting, storing, and analyzing logs from network devices, servers, applications, and endpoints and There it is benefiting us
- Leave a Comment |
- Mark review as helpful
Review for SIEM tool IBM Qradar
What do you like best about the product?
It's use full very friendly and easiet tool use for person or Cyber Security Analyst it's desig to Event and Logs analysis in one certerlized platform
What do you dislike about the product?
Facing for someone trouble shoot during the deployment or generate the Regex
What problems is the product solving and how is that benefiting you?
IBM Qradar to solve in different asset logs to generate in different platform to cover in a single platform
Very user friendly tool interface with Ease in Administration
What do you like best about the product?
Seamless interface with Log sources.
Out of the box support to many log sources.
Good dashboard creation tools.
Out of the box support to many log sources.
Good dashboard creation tools.
What do you dislike about the product?
Search queries should be made more simpler.
Syntax needs to be available on demand
Syntax needs to be available on demand
What problems is the product solving and how is that benefiting you?
High volume data ingestion. Mitigating the hassle of managing logs
Best SIEM
What do you like best about the product?
IBM QRadar is very easy to use, we will easily manage our dashboard according to us. Easy to create rules and building blocks.
What do you dislike about the product?
DSM update alert comes frequently and its not going away after the TAC help.
What problems is the product solving and how is that benefiting you?
IBM QRadar helps us in monitoring the real-time alerts; from here we will easily monitor our whole infra, create rules according to our requirements.
Deep dive into what's happening in your network!
What do you like best about the product?
Very easy to dive deep into a situation to view how incidents are linked.
What do you dislike about the product?
Can be overwhelming if you have no training. Realy requires training or you will get lost.
What problems is the product solving and how is that benefiting you?
The best thing I like about QRadar is that it can automatically launch other tools when an incident happens
Rapid Threat Hunting and SIEM Solution
What do you like best about the product?
IBM QRadar is the fastest platform to analyze and detect incidents in real-time.
What do you dislike about the product?
Long deployment time and not available for debian-based operating systems.
What problems is the product solving and how is that benefiting you?
I configure agent and send system logs, then it starts to work, detects all types of incidents.
"Empowering Your Security Team with IBM QRadar SIEM's Advanced Analytics"
What do you like best about the product?
Advanced threat detection capabilities: IBM Security QRadar SIEM uses a combination of correlation, behavioral analysis, and machine learning to detect and prioritize potential security threats in real-time.
What do you dislike about the product?
High costs: The cost of purchasing and maintaining IBM Security QRadar SIEM can be high, especially for smaller organizations. and High resource requirements: IBM Security QRadar SIEM can be resource intensive and may require significant hardware resources to run effectively.
What problems is the product solving and how is that benefiting you?
Comprehensive security visibility: QRadar SIEM collects and correlates data from a wide range of sources, including network, endpoint, and cloud, providing a holistic view of the organization's security posture.
Automated incident response: The platform can automatically respond to security incidents through its built-in incident response framework, enabling security teams to take immediate action to contain and mitigate threats.
Compliance and regulatory support: QRadar SIEM supports compliance with a wide range of regulations and standards, including PCI DSS, HIPAA, and SOC 2.
Automated incident response: The platform can automatically respond to security incidents through its built-in incident response framework, enabling security teams to take immediate action to contain and mitigate threats.
Compliance and regulatory support: QRadar SIEM supports compliance with a wide range of regulations and standards, including PCI DSS, HIPAA, and SOC 2.
An Easy to Implement SIEM Solution
What do you like best about the product?
I have worked on multiple SIEM solutions and find Qradar easy among them to onboard log sources. Also, it supports a wide range of log sources integration as Out of Box. Though the custom rule set present is not that useful, creating new rules is easy compared to other SIEMs.
What do you dislike about the product?
The UI is not very friendly for security guys. Also the search query language is complicated to work with. While searching data for long durations, Qradar becomes irresponsive. Difficult to understand how event buffer works; hence often observe event drops.
What problems is the product solving and how is that benefiting you?
The SIEM solutions help gather logs from various tools used across the organization and perform correlation on them to check for any abnormal or malicious behavior. They also alert analysts to avoid any significant compromise or breach.
Good SIEM product to use with impressive threat intel feeds
What do you like best about the product?
The threat intel feeds integrated with QRadar is excellent and very insightful.
The GUI of the tool is also really impressive and is well constructed for analysts.
The GUI of the tool is also really impressive and is well constructed for analysts.
What do you dislike about the product?
The license cost is really expensive and customisation requests and use cases that that are required to be configured cost extra each time. Support team take a long time to respond.
What problems is the product solving and how is that benefiting you?
IBM QRadar is a useful SIEM tool that helped add to our portfolio of offerings along with our MDR services. It also gives good insights into latest cyber threats and log types for monitoring team.
One of the best SIEM tool in the market
What do you like best about the product?
QRadar UI is very user-friendly. It doesn't require query-based search like other leading SIEM tools in the market. Its graphs and reports also provide detailed information about your Infrastructure.
What do you dislike about the product?
I don't find any downsides to QRadar. It might be because QRadar was the first SIEM tool I used in my career. Later I used other tools but found QRadar to be the best.
What problems is the product solving and how is that benefiting you?
With more than 40,000 computers and servers involved, it becomes difficult to track and prevent your infrastructure against security attacks. IBM QRadar makes soc teams' life easy by getting rid of false positives and providing detailed information about attacks.
showing 41 - 50