LogRhythm NextGen SIEM Review

The Advanced Intelligence Engine alerts the SOC to potential security issues, though File Integrity Monitoring needs improvement.

Valuable Features

Its Security Information and Event Management (SIEM) capabilities (security analysis, forensics) are the most valuable features for us.

Improvements to My Organization

The LogRhythm AIE (Advanced Intelligence Engine) is very good at alerting my SOC to events of interest and potential security issues without flooding my team with noise.

Room for Improvement

There is room for improvement in the area of File Integrity Monitoring.

Use of Solution

I've used it for 15 months.

Deployment Issues

No issues encountered.

Stability Issues

No issues encountered.

Scalability Issues

No issues encountered.

Customer Service and Technical Support

Customer Service:

It's excellent.

Technical Support:

It's excellent.

Previous Solutions

I have used Tripwire, which was a poor SIEM solution.

Implementation Team

We used a vendor team. I recommend using LogRhythm's professional services for assistance with implementation.

Other Advice

I highly recommend LogRythm for SIEM.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
Add a Comment
Sign Up with Email