Juniper Secure Analytics vs. LogRhythm NextGen SIEM Platform vs. New Relic

This is an amazing tool if you have a Juniper infrastructure. It has served us well in dealing with networking monitoring, security event analysis, and analyzing all the data that transverses our network. We haven't run into any situations where this isn't a good product to utilize unless we are dealing with other manufacturers like Cisco products.

Incentivized

LogRhythm is good for providing a comprehensive view of the environment. It gives a great outline of whatever is going on in our servers and systems regarding security malfunctions. The SIEM sends real-time notifications when there are some occurrences; like creating a new user and inappropriate login attempts. It also avails a good use case that meets our HIPAA compliance.

Incentivized

I have used New Relic in different scenarios like monitoring my production infrastructure and applications which helps us to reduce the downtime of my applications and websites and also I have used the synthetic monitoring feature which helps to proactively monitor our websites availability. Along with this I have also used New Relic for cloud resources cost monitoring which helps to reduce my cloud cost. Also I have used mobile application monitoring which helps me to trace the sessions easily and I can easily reduce my RCA through the help of that.

Incentivized

• Analytics.
• Network monitoring/behavior.
• Security issue detection.

Incentivized

• LogRhythm is a great SIEM to learn content on because the building blocks are very intuitive and easy to implement. All of the concepts relevant to content development are literally represented as drag and drop building blocks that can be easily manipulated.
• The statistical building blocks contain powerful anomaly detection capabilities that are extremely difficult to implement in other SIEMs or not possible at all.
• LogRhythm does better event classification than any other SIEM by far. My team typically drops all classification schemes from default installations of SIEMs and rebuilds them from scratch. I can actually use LogRhythms event classifications in rules without worrying about excessive partial matches or correlating unwanted events.

Incentivized

• New Relic APM allows us to follow up transactions across services and trace performance bottlenecks in real-time, crucial when monitoring the processing of energy loads or predictive maintenance algorithms.
• It gives us deep visibility into our cloud servers, containers and IOT gateways, so we can catch CPU spikes or memory leaks which can impact the data we ingest from the field devices.
• We develop custom dashboards for monitoring trends of power consumption, abnormality in sensors and API health. In conjunction with alerting, it makes sure we are fixing issues before customers even see them.

Incentivized

• User training.
• Capability for other products.

Incentivized

• While searching for log events is quick, the interface isn't as user-friendly as other SIEM products.
• Many of the administrative/management functions are only available through the full LogRhythm desktop console, not through the web console.
• The LogRhythm agent, when used for FIM and RIM, is very memory intensive.

Incentivized

• Support for SQL like query with more functional features of analysis while viewing distributed tracing.
• support for very low level specific integration from APIs to classes to functions to piece of code
• More detailed documentation, as we faced issues while integrating for the first time.

Incentivized

LogRhythm is focused on SIEM. That is their core business. Cost of operations, feature set and ease of use. The Log Rhythm support team is outstanding. Overall reliability is good. Reporting module needs some improvement and LR is promising that there will be significant improvements in future releases.

Incentivized

I have not yet found any similar product that offers me this range of features to help us keep our online service fast and reliable. Besides this, New Relic is constantly evolving by adding new plugins to emerging technologies and platforms. Server performance measuring features are a key point as our user database grows.

LogRhythm does a rather decent job of making the functionality advanced (allowing for advanced keyword & field searching, use of "AND" as well as "OR" statements in the search bar) while keeping it accessible (by not requiring a specific syntax to do quick searches). This combined with a user interface that has headings and labels that are intuitive is very helpful.

Incentivized

I have given this much rating as I am used New Relic in different sectors and for different use cases like its K8s monitoring, infra monitoring, full stack monitoring as compare to other tools New Relic gives data in a formatted and connected way, and also it is giving us value for money. It also launches new features day by day which helps users to track the issue very quickly. It also supports OTel integrations which is the latest trend of observability tools. thats why I had given this much rating to New Relic.

Incentivized

Never observed an outage

Incentivized

Always responsive. Never observed slow page loads

Incentivized

Support has always been fantastic for this product compared to many other support providers I've worked with. They are always very friendly and seem to be well trained and knowledgeable and never have to wait long for a solution. We usually get the issue fixed in the first call, but also we really haven't had to use support a ton so that's also a plus

Incentivized

The support team has been really helpful and resolved most of the issues on time. However, for a couple of issues, several follow-ups were needed to elicit a reasonable response. The issue was deeply technical and could have been investigated only by their Architects, and bringing them into the ticket took longer than needed

Incentivized

• Buy professional services.
• Buy and implement the system if possible.
• Remember that the end point log configuration may require other teams in your company to assist you in getting the desired logs from all resources.
• Attend the end user and daily operations training after a period of usage so you are not overwhelmed with information on concepts not yet seen.
• Don't be afraid to call for help during your first months of use.
• Don't close any ticket until you are sure the expected results are verified.
• Use the community forums to discuss issues with your peers.
• Watch the training videos offered by L R University.

Incentivized

The documentation was clear and concise; the only issue we ran into was custom application naming. Due to HTTPD mod_fcgid and the need for the application name to be set in php.ini (not in .htaccess or the virtual host directive) ... we had issues setting this up.

Not even a close comparison between these two. Juniper is an amazing product with unlimited capabilities while FortiSIEM wasn't quite ready to be deployed. We like how much time, effort, and energy went into the development of Juniper's product.

Incentivized

I think Logrhythm still has a lot of work to do to catch up with competitors in many areas. They need to improve their design cycle, with a cycle that's completely focused on bug fixing and reliability, without introducing any new features to improve the system's overall reliability. They also need to improve their API, as now all security solutions should talk very well with each other, which APIs can enable.

Incentivized

Before start using New Relic, we had a custom Grafana monitoring tool configured for our clients. Altough functional, it took too much time to add new alerts and monitoring features. New Relic is way easier and simpler to to configure and saves us a lot of time spent not only on configuration, but also keeping the service working.

Incentivized

Agent deployment is easily integrated into our workflow. Adding the agent to new servers is quick and painless

Incentivized

• Found issues before our other tools.

Incentivized

• One of the positive impacts that we experienced from LogRhythm NextGen SIEM Platform is the Dynamic Alarming System. It shows the recent tickets, and we know what exactly to prioritize at the start of the day.
• The search tool also helped us trace back wireless users by log correlation that we almost gave up our hope for.
• A slightly negative impact that can be featured it relying too much on it. We have been a victim of a false alarm and went on a completely wrong direction until we tallied with the Log source and found the problem. It is good, but we must correspond against the log source to be confirmed.

Incentivized

• We spend six figures on this solution to avoid costs of a broken website.
• We could save more on cloud services (GCP, Azure, AWS) if New Relic allowed its licenses to be purchased through other marketplaces.
• New Relic handles some of the same operations that higher priced competitors do.

Incentivized