IBM Security QRadar SIEM vs. IBM Turbonomic

I would only recommend IBM Security QRadar SIEM in a few situations. For one, it's very easy to setup and use if all your log sources are generic from known vendors. It's also significantly cheaper than Splunk, which is nice if you're trying to save money or be more efficient. I would not recommend IBM Security QRadar SIEM for environments with a lot of custom logs and complicated detection requirements.

Incentivized

Measure the usage of resources across different platforms, from Kubernetes to VMs on-premises or in the cloud, to obtain current capacity metrics and plan for future scenarios. Reduce IT infrastructure costs by taking automated actions based on resource underutilization, such as shutting down VMs or changing resource definitions.

Incentivized

• Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action.
• Facilitates security incident investigation and forensic analysis.
• Provides a real-time view of security events, enabling immediate incident response.
• Can integrate with external threat intelligence sources to enrich data and improve threat detection.
• Enables the generation of detailed and customized reports.

Incentivized

• Presentation is nice. Its easy to understand what your looking at and the data that is being presented to you.
• Properly identify resource utilization and recommendations for action on how VMs can be improved and resources can be better utilized.
• It was also able to tell us the same information and analysis for cloud resources. I was not expecting that.

Incentivized

• Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources.
• While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete.
• IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting.

Incentivized

• It would be nice if the UI included a break-down of features that are both licensed as well as un-licensed. That way, you could not only see what you have, but what you don't.
• The right-sizing recommendations are great, but very little info is given about why the recommendation is being made. More info would not only increase understanding, but would also help drive decision-making.

Incentivized

QRadar is an established and stable product, we have been using it for many years and want to continue to focus on it. Anyone who has used the product and knows it knows how reliable it is and how it facilitates continuous monitoring of threats from outside and inside. it is an exceptional product that is very useful for us.

Incentivized

We are certainly happy with Turbonomic as a whole and have invested quite a bit of time and effort into learning the ins and outs of the product. We have our reporting setup the way we want it and have gained definite value from these features. I will say though that many products nowadays are offering more native monitoring, reporting, and alerting features which may eventually steer us away from this product

Incentivized

As a grade I give 8 as QRadar is not easy to learn. It requires some time to master it. It also needs a team of people actively working on the product. Once you learn to use it the software works very well and it is easy to correlate and understand detected threats. It only takes time to learn how to use it well and configure it properly.

Incentivized

Excellent approach to larger VM organizational management. They have an very clean integrated dashboard that allows us to see everything in our environment and what that is doing in real-time. It works on multiple hyper-visors really well and integrates capacity planning on my local site as well as my cloud locations.

Incentivized

VMTurbo has not caused any outages by not doing what we expect it to do.

Incentivized

It allocates resources among applications by showing more on the cost breakdown by cloud service, with metrics on cloud provider information like Azure Management, Identity, Networking, Storage with costs per day, and total services costs. This then could facilitate and show the corresponding actions thereafter upon scaling.

Incentivized

Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm

Incentivized

When I contact support I get a quick response and they are able to solve my problem quickly. I also get a sense that they want to make sure that we are getting value from the product and walk me through whatever steps are needed to accomplish my goals.

Incentivized

The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.

Incentivized

Alex (from VMTurbo) has worked with the product for years and helped develop the product. He was very knowledgeable and was able to provide our support team with details knowledge on how to get our deployment configured correctly as well as help with another VMTurbo POC within another customers environment.

Incentivized

The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.

Incentivized

After buying VMTurbo Operations Manager, I was invited to an online user training event. I felt this training was effective and dug just deep enough to be informative yet still keep my attention. Additionally, the webinar was free.

Incentivized

Initial patience is required to learn how to use the product, and it takes a dedicated team to use it. One person is not enough, and it's not enough to just set it up and check it once in a while. It has to be used daily and kept under control to be used effectively

Incentivized

The implementation was very simple. Just upload an OVA file and power on the VM. Once it comes up enter some networking information and you can then access the web interface. From there, just begin configuring the system for your environment by adding you license and the various virtual environments and storage through the inventory tab

Incentivized

IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its competitors because it already sets an example in the SIEM world.

Incentivized

As the organization had experience of years in using IBM products, we had the confidence that they will provide us with great support. And we needed a reliable solution as a financial institute to ensure continuous operations. Even though the price was very high, we made the correct decision to go ahead with IBM Turbonomic as the feedback from existing users in the region was very positive. We needed a solution which was capable of handling our automation requirements. All these were green in IBM Turbonomic.

Incentivized

It’s very scalable.

Incentivized

Professional services were always there to guide us in our transformation to the cloud. They understood our business model and then were able to provide guidance on what we needed from the tool.

Incentivized

• Offense investigation was really helped in tackling the incidents. It was accurate and brief
• The automation with IBM resilient (SOAR) was a milestone in elimination of user mistakes
• The X-Force threat intelligence supported us in getting the work done without any 3rd party enterprise OSINT database

Incentivized

• Application performance has been a big one. With Turbonomic keeping everything running at top performance, it can make changes when extra resources are need, quicker than somebody being notified and then making the necessary changes.
• Turbonomic has been a great cost savings for us on multiple occasions. We use it every time we are improving servers.
• With the planning feature we get the best performance form new hardware purchases

Incentivized