Microsoft Sentinel vs. vRealize Operations (discontinued)

We use it because when a user sees the suspicious activity on his account, Microsoft Sentinel gives alerts to the user's system and the admin system as well. When a user of one of our systems clicked a spam email, that email was trying to install a virus on our server, but Microsoft Sentinel gave an alert to the user and admin both, so that is why our team was able to fix that issue with Microsoft Sentinel very fast. However, it will not be the best option for you if your team is utilizing every feature but you are on a tight budget.

With the introduction of API-based event alerts, there is no need for a proxy, which is a good option. Its ability to manage infra on a real-time basis is a good option that helps monitor, administer and troubleshoot virtual machines.

Incentivized

• I appreciate that it keeps the data within our, what we call our, authorization boundary. The fact that the data remains within Microsoft's, I guess, walled garden if you will, is very helpful for certain compliance needs in particular.
• The large library of ingestion: ability to ingest is basically as easy as I can basically get it to be most of the time. There's occasionally some vendors that it's a little bit more challenging for, but given the ease of integration for a lot of things, basically it's become one of my requirements when I am looking at other tools is how easily do they integrate with Sentinel.

Incentivized

• Shows us where we can save on cost of keeping machines running, or boosting resources on VM's
• the ability to plan deployments with scenario plans that can be customized over a specific timeline
• reports that can be sent and shared with different teams or departments

Incentivized

• I think it should include more third party integration with non microsoft products as well as with other cloud providers. These integrations should be native.
• It should improve ML and AI capabilities.
• I find its documentation a little bit difficult to understand at the start. So the words should be simple.

Incentivized

• There are less space for customization.
• Cannot use for OS monitoring.
• Some option are very complex like getting an ideal VM report.

Incentivized

The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.

Incentivized

It has a good GUI to monitor real-time logs for cloud applications. This is quite a useful tool and preferred over most of the competitive applications in the market.

Incentivized

Azure Sentinel is very easy to use and configure. If you are stuck somewhere, Microsoft support is excellent in assisting and solving your issue.

Incentivized

The support is pretty good however some of the KB articles still reference different versions of the product so it can be hard to find answers to common questions

Incentivized

Well before there was Microsoft Sentinel, you had other competing products like ArcSight or Splunk, et cetera. I think they have their own qualities, but the Microsoft integration story is really why we're using it.

Incentivized

SCOM was quite overwhelming when we first set up a POC for it. There was just too much for one person to handle. With vROPs I can manage the product and provide the support needed for my environment. We also have a Solarwinds environment that provides us with a level of detail and alerting we have come to rely upon. vROPS takes it to another level because it links directly into vCenter to provide you with a complete picture of your virtual environment.

Incentivized

Not involved in purchasing.

Incentivized

Did not use professional services

Incentivized

• As any cybersecurity product, this has to be more with risk to avoid loss in case of a ransomware that more than relate to a productivity increase. Maybe the impact could be that instead of having people that are checking 24/7 the dashboard, you could implement Sentinel and have less people checking that or people with less expertise. So the saving will be a minor but will be a saving in the cost of your team.

Incentivized

• We believe that the ability to preplan deployments with vRealize has proven its return on investments.
• Our troubleshooting time has been reduced with vrealize because its constantly collecting performance data. typically vrealize will tell us cause of fault before we can determine it ourselves.

Incentivized