Item: IBM Security QRadar SIEM
Rating: 9
Author: Antonio Martinez

Use Cases and Deployment Scope

Security Use cases and rules to monitor our infrastructure, applications and network

Pros and Cons

Use case building and rules creation
Testing and investigation of logs
Log source management

GUI
Search speed

Return on Investment

Good integration
Good support
Good reliability

I believe in the past was the main tool which can integrate with the vast majority of log sources, formats and appliances, but nowadays is possibly still in a good integration level but not that far from other vendors

Support Rating

Usually every interaction I managed with the Qradar support was satisfactory unless they couldnt solve the problem due to a lack of devolpment or bug issue on the tool itlsefl

Key Insights

Do you think IBM Security QRadar SIEM delivers good value for the price?

Not sure

Are you happy with IBM Security QRadar SIEM's feature set?

Yes

Did IBM Security QRadar SIEM live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of IBM Security QRadar SIEM go as expected?

I wasn't involved with the implementation phase

Would you buy IBM Security QRadar SIEM again?

Yes

Other Software Used

Splunk Enterprise Security (ES), SentinelOne Singularity, Trellix Email Security

Likelihood to Recommend

Is suited for creating monitoring and security rules. Is not so appropriate for handling larges volumes of data and the speed of searching

Senior Analyst review

Software Version

Modules Used

Overall Satisfaction with IBM Security QRadar SIEM