Item: IBM Security QRadar SIEM
Rating: 9
Author: Denise Munive

Use Cases and Deployment Scope

It is used to monitor all the organization's security tools and infrastructure centrally and in this way detect incidents quickly, it also helps us comply with regulations.

Pros and Cons

Group the different events that generated it in the name of the offense
Receive email alerts
Always report errors on the main page
Have an easy to understand interface for creating rules

Have the parsing of all sources
Frequent updating of log source parsing
Better breadth in the editing of reports

Return on Investment

I help comply with regulations
Reduced incident traceability time
Speed in detecting alerts

Ease of Integration

There are log sources that are easy to integrate, however, there are others that are not on the list and must be added manually and a manual analysis must be performed.

Support Rating

Not many tickets have been opened for support, however those that have been generated the response is almost immediate as is the resolution.

Key Insights

Do you think IBM Security QRadar SIEM delivers good value for the price?

Not sure

Are you happy with IBM Security QRadar SIEM's feature set?

Yes

Did IBM Security QRadar SIEM live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of IBM Security QRadar SIEM go as expected?

I wasn't involved with the implementation phase

Would you buy IBM Security QRadar SIEM again?

Yes

Likelihood to Recommend

Appropriate for well-known log sources, but inappropriate for obscure log sources or applications.

Review SIEM Qradar Cibanco

Software Version

Modules Used

Overall Satisfaction with IBM Security QRadar SIEM