TrustRadius Insights
LogRhythm NextGen SIEM Platform is a versatile tool that offers a wide range of use cases for organizations of varying sizes. Managed …
LogRhythm NextGen SIEM Platform
Overview
What is LogRhythm NextGen SIEM Platform?
The LogRhythm NextGen SIEM Platform, from LogRhythm in Boulder, Colorado, is security information and event management (SIEM) software which includes SOAR functionality via SmartResponse Automation Plugins (a RespondX feature), the DetectX security analytics module, and AnalytiX as a log management…
Recent Reviews
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Popular Features
- Centralized event and log data collection (20)9.090%
- Correlation (20)8.181%
- Event and log normalization/management (20)8.080%
- Custom dashboards and workspaces (20)7.575%
Pricing
N/A
Unavailable
What is LogRhythm NextGen SIEM Platform?
The LogRhythm NextGen SIEM Platform, from LogRhythm in Boulder, Colorado, is security information and event management (SIEM) software which includes SOAR functionality via SmartResponse Automation Plugins (a RespondX feature), the DetectX security analytics module, and AnalytiX as a log management…
Entry-level set up fee?
- No setup fee
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Would you like us to let the vendor know that you want pricing?
43 people also want pricing
Alternatives Pricing
What is Blumira?
Blumira’s cloud SIEM platform offers both automated threat detection and response, enabling organizations of any size to more defend against cybersecurity threats in near real-time. It's goal is to ease the burden of alert fatigue, complexity of log management and lack of IT visibility.
Product Demos
Unleash the Power of Your SOC: LogRhythm NextGen SIEM Platform Demo | InfoSec Matters
YouTube
How to Stop Phishing Attacks with LogRhythm | LogRhythm in Action
YouTube
Features
Return to navigation
Product Details
- About
- Tech Details
- FAQs
What is LogRhythm NextGen SIEM Platform?
LogRhythm NextGen SIEM Platform Video
How would you score the maturity of your security operations program?
Assessing and improving your security operations maturity can help you reduce risk in your organization and prove the effectiveness of your security.
The LogRhythm Security Operations Maturity Model (SOMM)...
Show More LogRhythm NextGen SIEM Platform Technical Details
| Operating Systems | Unspecified |
|---|---|
| Mobile Application | No |
Frequently Asked Questions
The LogRhythm NextGen SIEM Platform, from LogRhythm in Boulder, Colorado, is security information and event management (SIEM) software which includes SOAR functionality via SmartResponse Automation Plugins (a RespondX feature), the DetectX security analytics module, and AnalytiX as a log management solution that centralizes log data, enriches it with contextual details and applies a consistent schema across all data types.
Reviewers rate Centralized event and log data collection highest, with a score of 9.
The most common users of LogRhythm NextGen SIEM Platform are from Enterprises (1,001+ employees).
Comparisons
Compare with
Reviews and Ratings
(70)
Community Insights
TrustRadius Insights are summaries of user sentiment data from TrustRadius reviews and, when necessary, 3rd-party data sources. Have feedback on this content? Let us know!
- Business Problems Solved
- Pros
- Cons
- Recommendations
LogRhythm NextGen SIEM Platform is a versatile tool that offers a wide range of use cases for organizations of varying sizes. Managed security services providers rely on LogRhythm to detect and respond to threats in their customers' environments effectively. Additionally, organizations use LogRhythm to monitor their entire infrastructure, including endpoints, network devices, and security systems, providing a comprehensive view of their network.
For information security departments, LogRhythm serves as a valuable tool for collecting logs from important systems and helps with log management in cloud environments. This allows users to identify live attacks and configure environments for customer demos. The platform also supports compliance regulations by providing auditing and compliance features, such as NERC CIP and HIPAA.
Furthermore, LogRhythm facilitates incident response and improves overall security posture by collecting logs from various systems and monitoring critical infrastructure. It allows for alerting and monitoring specific events like machine restarts or new user account creations. The drill-down feature enables users to extract information efficiently and detect problems in a well-structured manner with easy-to-understand visualizations.
Non-technical users find LogRhythm user-friendly as it requires no coding or programming knowledge, allowing them to easily build rules and manage servers. The extensive documentation, support, and community surrounding LogRhythm make it easy for users to learn and configure the highly customizable SIEM platform. Overall, LogRhythm NextGen SIEM Platform has proven to be an invaluable tool in meeting compliance requirements, improving incident response capabilities, and enhancing overall security monitoring for organizations across various industries.
Intuitive and Easy-to-Implement Building Blocks: Many users have praised LogRhythm for its intuitive and easy-to-implement building blocks that are represented as drag and drop elements. This feature has been mentioned by several reviewers, highlighting the platform's user-friendly interface.
Powerful Anomaly Detection Capabilities: LogRhythm's statistical building blocks have powerful anomaly detection capabilities that are difficult to find in other SIEMs, making it stand out in terms of event classification. Several users have commended this feature, emphasizing its effectiveness in identifying and classifying anomalous events.
Great Help Desk Troubleshooting with Web UI: LogRhythm's Web UI is highly regarded for help desk troubleshooting purposes. Users appreciate its ability to easily identify and drill down into authentication issues, performance trending, and correlation of events. This functionality has been positively mentioned by multiple reviewers.
Limited error handling: Some users have expressed frustration with the limited error handling capabilities of LogRhythm NextGen SIEM Platform. They feel that when an error occurs, the platform does not provide sufficient information or guidance on how to resolve it.
Lack of customization options: Several reviewers have mentioned that they would like more customization options within LogRhythm NextGen SIEM Platform. They feel restricted in their ability to tailor the platform to meet their specific needs and preferences.
Complex user interface: A number of users have found the user interface of LogRhythm NextGen SIEM Platform to be complex and difficult to navigate. They have mentioned that it can take time and effort to learn how to effectively use all the features and functionalities of the software.
Users commonly recommend LogRhythm's SIEM for its ease of use and monitoring capabilities, making it a good all-in-one tool for SIEM needs in larger and mid-sized setups. They consider LogRhythm one of the best SIEM tools available, praising its impact and GUI compared to RSA NetWitness. Users appreciate LogRhythm's cost-effectiveness, easy configuration and administration, as well as its ability to consume less CPU memory. They also highlight the availability of support and conferences in the community. Users suggest having patience during the initial setup and build-out process, as they believe the end result is worth it. Improved overall performance, control, and functionality with LogRhythm's instrument panel are also praised.
Furthermore, users recommend LogRhythm for companies that can develop sufficient expertise in its software and have an in-house SQL expert. They advise making the best use of LogRhythm for complete visibility of the network. Some suggestions for improvement include enhancing the dashboard process, offering a community version for trial and certification preparation purposes, adding more features to the web interface, and incorporating AI capabilities to streamline threat identification. Users find LogRhythm to be a great tool for work in medium-large size companies, suitable for achieving high fidelity security context. It is recommended for security event analysis and considered a leader in SIEM solutions that provide good support and meet customer requirements. Users suggest trying LogRhythm for better results in enterprise solutions compared to other SIEM tools.
Additionally, users emphasize LogRhythm's affordability, streamlining SIEM experience, and its suitability for mid-size and large organizations, especially those with widely dispersed endpoints and multi-tiered SOCs. LogRhythm is seen as a powerful network monitoring tool with pricing advantages. Recommendations include purchasing it for specific compliance requirements and critical environment protection, involving system administrators early to help filter traffic, and allowing multiple people to administer the system to avoid bottlenecks.
In conclusion, LogRhythm's SIEM is consistently recommended for its ease of use, monitoring capabilities, impact and GUI, cost-effectiveness, configuration flexibility, support availability, improved performance and control, integration possibilities, and affordability. It is considered a leader in the market and an alternative worth considering for organizations seeking a reliable SIEM solution.
Attribute Ratings
Reviews
(1-17 of 17)Companies can't remove reviews or game the system. Here's why
May 05, 2022
Top Rated SIEM Platform
Score 7 out of 10
Vetted Review
Verified User
LogRhythm has consistently been in the top quadrants and reviews. The support provided by the vendor is top class. Once it is up and running, there is no much to be done in terms of setup. However, free trainings on the internet like youtube are not available as they should be.
July 14, 2021
Fantastic Product For SIEM LogRhythm
- Arcsight Enterprise Security Manager (formerly HP Arcsight), IBM QRadar and McAfee Enterprise Security Manager
SIEMs are complex behemoths, regardless of the one you decide to go with. Even those that are supposedly turn-key solutions aren't really and can pose some tricky issues for veteran IT and InfoSec staff. LogRhythm has the best educational services and technical support, hands down. Not only that, but the LogRhythm Community is extremely active and the discussion is lively. I've been helped by fellow LR users when trying to create complex rulesets with them offering input on rules I've been trying to build out in the SIEM.
- Product roadmap and future vision
- Strong services expertise
- Product functionality and performance
- Breadth of services
- Strong customer focus
- Strong user community
July 17, 2020
LogRhythm Logging for the masses (of stuff you own)
We had business requirements for the following features:
- Sustained flow acquisition and data collection of dissimilar log types from multiple sources.
- Customization for Reporting and Alerting in near real time.
- Offer Dynamic Monitoring.
- Presented in a Security Event Console.
- Automated Response Generation for Security Events.
- Support for Regulatory Compliance.
- Host, Application and Object Access Logs.
- Integration with IAM (Identity Access Management).
- Ability to Express and Track Compliance with User-Defined Policy.
- Mapping of Events to NIST/CSF and ISO 27001 Control Frameworks and Regulations.
- Incident Management and Workflow.
- Data Collection and Archiving.
- Redundancy, Scalability and Deployment Flexibility.
- Correlation and Taxonomy.
- Enterprise Administration, Auto-Discovery, Asset Classification, Embedded Security Knowledge
March 02, 2020
Great SIEM, especially the auto-defending piece
LogRhythm is heads and tails above AlienVault and more well known and industry-standard compared to InsightIDR.
November 25, 2019
LogRhythm: A NextGen tool for NextGen analysts
The only thing we chose LogRhythm NextGen SIEM Platform for is to allow the Security Analysts to work on the dashboards which don't know much about programming and query languages but has good intuition about cyber-security. It is easy to get hands-on compared to Splunk, which has an initial learning curve before being able to start harnessing its true power.
Also, the ticketing system is quite fancy and somehow shows us the recent tickets that we need to jump on, which is not in Splunk.
Also, the ticketing system is quite fancy and somehow shows us the recent tickets that we need to jump on, which is not in Splunk.
October 14, 2019
Delivers enterprise level SIEM at a reasonable cost
We researched Splunk as well but it seemed to require more programming experience than LogRhythm which we currently do not have and could not support another FTE for. SolarWinds SIEM product was another product we researched, although it's basic functionality was good, it was not really a full enterprise-grade solution, but rather a value adds for compliance and audit purposes.
October 14, 2019
If we were a smaller environment, LogRhythm's NextGen SIEM Platform would be perfect
LogRhythm's NextGen SIEM Platform is lightning fast when compared to other SIEM platforms. With our previous SIEM platform, it would take several hours to query for certain events over a 90 day period. For more advanced queries we'd sometimes have to let it run overnight. With LogRhythm's NextGen SIEM Platform, we are able to provide data on the same query in minutes.
October 14, 2019
SIEM That Ticks All Major Boxes With a User Friendly Platform
Unlike other vendors, all modules of LogRhythm are integrated with the main solution. One could go for the Enterprise Architecture which offers separate hardware for separate modules. But in our case that wasn't needed. We needed something that was user-friendly and didn't take a lot of time to get used to it. LogRhythm ticked both of these boxes nicely.
We used Kiwi years ago before it was owned by Solarwinds and it worked great for our then small server stack, but we grew much bigger fast and needed something more robust and LogRhythm fit the bill.
September 05, 2019
LogRhythm is on beat!
LogRhythm is easily differentiated from the other log analysis products I've used in terms of sheer functionality. The competitors can't keep up in performance, speed, or correlation. The only thing that the other products can do to hold a candle to LogRhythm is to integrate it with their existing products and make it 'tie-in' well.
LR is inferior when compared to a cloud-native SIEM - the functionality is simply not there.
September 17, 2018
Effective security at your hands.
AlienVault USM Appliance and USM Anywhere might lack some functionality where LogRhythm does well. For instance, SmartResponse functionality is more mature than the Orchestration rules at AlienVault USM Anywhere. You can easily script SmartResponse to act accordingly to each situation, and if you do so carefully (and test them), you can be assured your environment is safe automatically or if you set those up on approval mode, you can be agile by clicking the proper SmartResponse item when the opportunity arises.
August 01, 2018
LogRhythm - excelling in customer support and innovation
We selected LogRhythm due to low overall time investment to meet our basic needs, very competitive pricing, a strong user community and a reputation for excellent support. We have been pleasantly surprised by the very personal nature of the partnership we enjoy with LogRhythm - even for an organization of our modest size.
October 25, 2017
LogRhythm is a clear winner
- WE used to use Solar Winds LEM and but we outgrew it
We did an RFP and evaluated several SIEM vendors. LogRhythm ended up being a very clear choice when compared with the other vendors.
In this RFP we invited all vendors that were in the leaders category of the Gartner magic quadrant for SIEM.
In this RFP we invited all vendors that were in the leaders category of the Gartner magic quadrant for SIEM.
October 12, 2016
LogRhythm for your SIEM Needs
- Snare and McAfee
LogRhythm was simpler to set up and configure as well as extract information from. It also was less intrusive in terms of how many appliances were needed to implement. We were up and running within 5 hours to start accepting log sources. We selected LogRhythm as well since support is based in the USA in Colorado.
June 08, 2016
So you want to know which SIEM to buy
- HP Arcsight, IBM Security QRadar, McAfee Enterprise Security Manager, Splunk and AlienVault Unified Security Management
I work with every SIEM on the market and I believe LogRhythm simply provides the best overall value in terms of price, incident response capability, content capability, and ease of engineering.
June 07, 2016
LogRhythm does what it promises.
