TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Security QRadar SIEM

    Score8.9 out of 10
    N/AIBM Security QRadar is security information and event management (SIEM) Software.N/A

    Sumo Logic

    Score8.9 out of 10
    N/ASumo Logic is a log management offering from the San Francisco based company of the same name.

    $3

    Per GB Logs

    Pricing
    IBM Security QRadar SIEMSumo Logic
    Editions & Modules
    No answers on this topic
    Essentials
    $3.00
    Per GB Logs
    Enterprise
    $4.00
    Per GB Logs
    Enterprise Security
    $4.25
    Per GB Logs
    Enterprise Suite
    $4.75
    Per GB Logs
    Offerings
    Pricing Offerings
    IBM Security QRadar SIEMSumo Logic
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    Community Pulse
    IBM Security QRadar SIEMSumo Logic
    Considered Both Products
    IBM
    Chose IBM Security QRadar SIEM
    It was on the easier side for use and can be stable.
    Incentivized
    Sumo Logic
    No answer on this topic
    Key User Insights
    Would buy again
    92%
    Would buy again
    67 Answers
    89%
    Would buy again
    8 Answers
    Delivers good value for the price
    97%
    Delivers good value for the price
    61 Answers
    100%
    Delivers good value for the price
    9 Answers
    Happy with the feature set
    96%
    Happy with the feature set
    70 Answers
    89%
    Happy with the feature set
    8 Answers
    Lived up to sales and marketing promises
    86%
    Lived up to sales and marketing promises
    38 Answers
    No answers on this topic
    Implementation went as expected
    94%
    Implementation went as expected
    59 Answers
    100%
    Implementation went as expected
    6 Answers
    Features
    IBM Security QRadar SIEMSumo Logic
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of IBM Security QRadar SIEM and Sumo Logic
    Feature
    IBM Security QRadar SIEM
    8.5
    69 Ratings
    7% above category average
    Sumo Logic
    -
    Ratings
    Centralized event and log data collection9.927 Ratings00 Ratings
    Correlation8.669 Ratings00 Ratings
    Event and log normalization/management9.527 Ratings00 Ratings
    Deployment flexibility7.827 Ratings00 Ratings
    Integration with Identity and Access Management Tools8.965 Ratings00 Ratings
    Custom dashboards and workspaces7.569 Ratings00 Ratings
    Host and network-based intrusion detection9.725 Ratings00 Ratings
    Data integration/API management9.07 Ratings00 Ratings
    Behavioral analytics and baselining7.648 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds8.049 Ratings00 Ratings
    Response orchestration and automation7.75 Ratings00 Ratings
    Reporting and compliance management7.947 Ratings00 Ratings
    Incident indexing/searching8.97 Ratings00 Ratings
    Best Alternatives
    IBM Security QRadar SIEMSumo Logic
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    Sumo Logic
    Score8.9 out of 10
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    IBM Security QRadar SIEMSumo Logic
    Likelihood to Recommend
    8.6
    (89 ratings)
    9.7
    (17 ratings)
    Likelihood to Renew
    8.7
    (5 ratings)
    -
    (0 ratings)
    Usability
    8.0
    (2 ratings)
    9.0
    (5 ratings)
    Availability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Performance
    9.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    8.1
    (62 ratings)
    8.7
    (6 ratings)
    In-Person Training
    9.0
    (1 ratings)
    -
    (0 ratings)
    Online Training
    9.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    8.0
    (1 ratings)
    9.0
    (1 ratings)
    Configurability
    8.0
    (1 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    9.0
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    8.1
    (58 ratings)
    -
    (0 ratings)
    Product Scalability
    8.0
    (1 ratings)
    -
    (0 ratings)
    Professional Services
    10.0
    (1 ratings)
    6.2
    (3 ratings)
    Vendor post-sale
    9.0
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    9.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    IBM Security QRadar SIEMSumo Logic
    Likelihood to Recommend
    IBM
    I would only recommend IBM Security QRadar SIEM in a few situations. For one, it's very easy to setup and use if all your log sources are generic from known vendors. It's also significantly cheaper than Splunk, which is nice if you're trying to save money or be more efficient. I would not recommend IBM Security QRadar SIEM for environments with a lot of custom logs and complicated detection requirements.
    Incentivized
    Read full review
    Sumo Logic
    SumoLogic is a fantastic log aggregator and analysis tool, a fine alternative to Splunk. Searching is powerful and mostly intuitive and results come fast. If you have application logs in clusters or Kubernetes pods that lose their logs every time they're restarted, Sumo is the solution for you
    Incentivized
    Read full review
    Pros
    IBM
    • Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action.
    • Facilitates security incident investigation and forensic analysis.
    • Provides a real-time view of security events, enabling immediate incident response.
    • Can integrate with external threat intelligence sources to enrich data and improve threat detection.
    • Enables the generation of detailed and customized reports.
    Incentivized
    Read full review
    Sumo Logic
    • Sumo Logic allowed for our InfoSec team to ingest logs from our CDN directly, in real-time, instead of massive compressed archives that were sent every two-hours (the only alternative at the time). Sumo Logic had an app for these logs, that allowed us to easily get an immediate payoff from the data, with canned dashboard and saved searches.
    • Sumo Logic has a fairly extensive REST API when it comes to log sources, source configurations, dashboard data, searches, etc. Their wiki for the API is usually kept up to date.
    • Sumo Logic, during the period of time I had used their product, had added the ability to configure agents via configuration files. This allowed customers to configure their endpoints, and modify the endpoints, with configuration management tools like Chef / Puppet / Salt. Beforehand, the only option was to always make changes either via the web portal or REST API.
    • The solutions engineers were extremely helpful, and easily reachable when issues would occur.
    • Users at our company found it easy to get started, working on new dashboards, scheduled searches, and alerting. The alerting worked well with our third-party paging tool.
    Incentivized
    Read full review
    Cons
    IBM
    • Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources.
    • While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete.
    • IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting.
    Incentivized
    Read full review
    Sumo Logic
    • I like the help center, but I think if it had more GUI tools, it could help new users.
    • Pulling out data is sometimes hard to read, (Maybe if I knew how to export data better, this would not be an issue for me).
    • I would like better know-how on how to create reports that will help our business.
    Incentivized
    Read full review
    Likelihood to Renew
    IBM
    QRadar is an established and stable product, we have been using it for many years and want to continue to focus on it. Anyone who has used the product and knows it knows how reliable it is and how it facilitates continuous monitoring of threats from outside and inside. it is an exceptional product that is very useful for us.
    Incentivized
    Read full review
    Sumo Logic
    No answers on this topic
    Usability
    IBM
    As a grade I give 8 as QRadar is not easy to learn. It requires some time to master it. It also needs a team of people actively working on the product. Once you learn to use it the software works very well and it is easy to correlate and understand detected threats. It only takes time to learn how to use it well and configure it properly.
    Incentivized
    Read full review
    Sumo Logic
    Sumo Logic is very powerful but definitely requires some configuration work to get the most out of it. You can get a certification related to this, but it is definitely not something you can just throw together.
    Incentivized
    Read full review
    Support Rating
    IBM
    Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm
    Incentivized
    Read full review
    Sumo Logic
    I would give this rating because I attended a free Sumo Logic training at a WeWork in Chicago. I found the training very useful, and I learned a lot of features that I was not aware of before I went to the training. I like the idea that SumoLogic provides free training seminars. I am certified in level1, and I plan on certifying to level2.
    Incentivized
    Read full review
    In-Person Training
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    Sumo Logic
    No answers on this topic
    Online Training
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    Sumo Logic
    No answers on this topic
    Implementation Rating
    IBM
    Initial patience is required to learn how to use the product, and it takes a dedicated team to use it. One person is not enough, and it's not enough to just set it up and check it once in a while. It has to be used daily and kept under control to be used effectively
    Incentivized
    Read full review
    Sumo Logic
    I was satisfied with the implementation, as at the time, it was the best way to implement the product with the available feature sets in Sumo Logic. User creation and management became more of an issue during continued use, instead of it being an issue related to deploying the product in our environment.
    Incentivized
    Read full review
    Alternatives Considered
    IBM
    IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its competitors because it already sets an example in the SIEM world.
    Incentivized
    Read full review
    Sumo Logic
    Sumo Logic works very well out of the gate. For a small business it has given us what we need. I worked at a larger company previously, and we produced so many logs we had to create a custom logging service to handle them all. Cost and availability are big issues when deciding between the different services, whether self maintained and hosted, or provided by another company.
    Incentivized
    Read full review
    Professional Services
    IBM
    No answers on this topic
    Sumo Logic
    I've assisted several OneLogin customers with partner accounts to Sumo Logic. It has always been pleasant.
    Read full review
    Return on Investment
    IBM
    • Offense investigation was really helped in tackling the incidents. It was accurate and brief
    • The automation with IBM resilient (SOAR) was a milestone in elimination of user mistakes
    • The X-Force threat intelligence supported us in getting the work done without any 3rd party enterprise OSINT database
    Incentivized
    Read full review
    Sumo Logic
    • I can't think of any negative side effects other than it being SO slow sometimes, but compared to Splunk everything is slow
    • It's SO much cheaper than Splunk that the time it takes to query information is well worth it
    • In the times that we've had Sumo go down or stop logging information, we've found that we'd be absolutely lost without Sumo
    Incentivized
    Read full review
    ScreenShots

    IBM Security QRadar SIEM Screenshots

    Screenshot of QRadar SIEM Cloud native- Threat intelligence preview