Item: IBM Security QRadar SIEM
Rating: 9
Author: Verified User

Use Cases and Deployment Scope

Full monitoring of the IT environment, analyzing logs and flows to detect security issues.

Pros and Cons

Logsource integration.
Rule tuning.
Out-of-the-box rules and use cases.
Horizontal scalability.

Reporting.
Dashboards.
Alerting.

Return on Investment

Helped to see what was unseen earlier.
Requirement for several audits like PCI or HIPAA.

If you have a DSM or App for the integration needed, it is relatively easy. However, the quality of DSMs (especially the 3rd party ones) is quite fluctuating, and if there is no DSM you need time and experience to create one.

Support Rating

In general, support is great, they know all the tips and tricks. Paid support is a MUST for this product because you'll face issues that can be solved by only them.

Alternatives Considered

Splunk Enterprise

Much less manual work and easier integration.

Key Insights

Do you think IBM Security QRadar SIEM delivers good value for the price?

Yes

Are you happy with IBM Security QRadar SIEM's feature set?

Yes

Did IBM Security QRadar SIEM live up to sales and marketing promises?

Yes

Did implementation of IBM Security QRadar SIEM go as expected?

Yes

Would you buy IBM Security QRadar SIEM again?

Yes

Other Software Used

macOS, Microsoft Sentinel, Splunk Enterprise

Likelihood to Recommend

Perfect for medium and large enterprises if the required expertise is available. Also perfect for MSSP models, so it is quite easy to build a product using this for smaller companies where dedicated SIEM is not an option.

From the real world.

Software Version

Modules Used

Overall Satisfaction with IBM Security QRadar SIEM