• Home
  • IBM Security QRadar vs. Sematext Logs

IBM Security QRadar vs Sematext Logs comparison

Cancel
You must select at least 2 products to compare!
IBM Logo

IBM Security QRadar

Read 198 IBM Security QRadar reviews
15,293 views|9,299 comparisons
91% willing to recommend
Sematext Logo

Sematext Logs

300 views|165 comparisons
Comparison Buyer's Guide
Download the complete report
Buyer's Guide
Log Management
April 2024
Executive Summary

We performed a comparison between IBM Security QRadar and Sematext Logs based on real PeerSpot user reviews.

Find out what your peers are saying about Splunk, Datadog, Wazuh and others in Log Management.
To learn more, read our detailed Log Management Report (Updated: April 2024).
Download the complete report
768,578 professionals have used our research since 2012.
Featured Review
James Riffenburg
The solution uses AI to analyze different logged events, and network activity and create a correlation
The solution has helped improve our organization by providing the comfort and visibility that we are, meeting compliance, and doing our due... Read more →
Use Sematext Logs?
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pricing and Cost Advice
  • "found other solutions, with more features at the same cost or less. You don’t have to leave the Gartner Magic Quadrant to beat their price."
  • "Most of the time, it is easier and cheaper to buy a new product or the QRadar box."
  • "IBM's Qradar is not for small companie. Unfortunately, it would be 'overkill' to place it plainly. The pricing would be too much."
  • "IBM's Qradar is not for small companie. Unfortunately, it would be 'overkill' to place it plainly. The pricing would be too much."
  • "Go through a vulnerability assessment review for price breaks. A virtualized solution will also cut down on cost."
  • "It is expensive. It is not a product that I can provide for SMBs. It is a program that I can only provide for really large enterprises."
  • "The maintenance costs are high."
  • "Pricing (based on EPS) will be more accurate."

    • More IBM Security QRadar Pricing and Cost Advice →

    Information Not Available
    report
    See Which Vendors Are Best For You
    Use our free recommendation engine to learn which Log Management solutions are best for your needs.
    See Recommendations
    768,578 professionals have used our research since 2012.
    Comparison Review
    Vinod Shankar
    Qradar vs. ArcSight
    Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM players and have made themselves relevant in the SIEM market. We have worked on both the products and feel that this comparison is a good way to start the discussion rolling on features of both the products and how they approach the problem of Security Information & Event Management. Okay, let’s get started!!! ArcSight vs QRadar Subject ArcSight QRadar Product Birth Year 2000, ArcSight SIEM came into the market and incidentally this was the only product they have worked on. In 2011 HP bought them Year 2004-2005, Q1 Labs entered into the SIEM market modifying their NBAD platform (QFLOW) and in 2012, IBM bought them. Logging Format CEF – Common Event Format LEEF – Log Event Extended Format Underlying DB Oracle till 2012, then combination of MySQL, PSQL etc. Proprietary based on Ariel Data store and probably Annotation Query Language (AQL) Vendor Support ArcSight supports more than 400 vendors with their CEF certification program QRadar supports more than 250 vendors with their LEEF certification program Portfolio Log Correlation – HP ArcSight ESM Log Management – HP ArcSight Logger Identity… Read more →
    Questions from the Community
    What are the biggest differences between Securonix UEBA, Exabeam, and IBM...
    Top Answer:It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information… more »
    Read all 2 answers   →
    What SOC product do you recommend?
    Top Answer:For tools I’d recommend:  -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also,… more »
    Read all 12 answers   →
    What do you like most about IBM QRadar?
    Top Answer:The event collector, flow collector, PCAP and SOAR are valuable.
    Read all 88 answers   →
    Ask a question

    Earn 20 points

    Ranking
    6th
    out of 95 in Log Management
    Views
    15,293
    Comparisons
    9,299
    Reviews
    31
    Average Words per Review
    494
    Rating
    7.5
    59th
    out of 95 in Log Management
    Views
    300
    Comparisons
    165
    Reviews
    0
    Average Words per Review
    0
    Rating
    N/A
    Comparisons
    Also Known As
    IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, QRadar, IBM QRadar User Behavior Analytics, IBM QRadar Advisor with Watson
    Learn More
    IBM
    Sematext
    Overview

    IBM Security QRadar is a security and analytics platform designed to defend against threats and scale security operations. This is done through integrated visibility, investigation, detection, and response. QRadar empowers security groups with actionable insights into high-priority threats by providing visibility into enterprise security data. Through centralized visibility, security teams and analysts can determine their security stance, which areas pose a potential threat, and which areas are critical. This will help streamline workflows by eliminating the need to pivot between tools.

    IBM Security QRadar is built to address a wide range of security issues and can be easily scaled with minimal customization effort required. As data is ingested, QRadar administers automated, real-time security intelligence to swiftly and precisely discover and prioritize threats. The platform will issue alerts with actionable, rich context into developing threats. Security teams and analysts can then rapidly respond to minimize the attackers' strike. The solution will provide a complete view of activity in both cloud-based and on-premise environments as a large amount of data is ingested throughout the enterprise. Additionally, QRadar’s anomaly detection intelligence enables security teams to identify any user behavior changes that could be indicators of potential threats. 

    IBM QRadar Log Manager

    To better help organizations protect themselves against potential security threats, attacks, and breaches, IBM QRadar Log Manager gathers, analyzes, preserves, and reports on security log events using QRadar Sense Analytics. All operating systems and applications, servers, devices, and applications are converted into searchable and actionable intelligent data. QRadar Log Manager then helps organizations meet compliance reporting and monitoring requirements, which can be further upgraded to QRadar SIEM for a more superior level of threat protection.

    Some of QRadar Log Manager’s key features include:

    • Data processing and capture on any security event
    • Disaster recovery options and high availability 
    • Scalability for large enterprises
    • SoftLayer cloud installation capability
    • Advanced threat protection

    Reviews from Real Users

    IBM Security QRadar is a solution of choice among users because it provides a complete solution for security teams by integrating network analysis, log management, user behavior analytics, threat intelligence, and AI-powered investigations into a single solution. Users particularly like having a single window into their network and its ability to be used for larger enterprises.

    Simon T., a cyber security services operations manager at an aerospace/defense firm, notes, "The most valuable thing about QRadar is that you have a single window into your network, SIEM, network flows, and risk management of your assets. If you use Splunk, for instance, then you still need a full packet capture solution, whereas the full packet capture solution is integrated within QRadar. Its application ecosystem makes it very powerful in terms of doing analysis."

    A management executive at a security firm says, "What we like about QRadar and the models that IBM has, is it can go from a small-to-medium enterprise to a larger organization, and it gives you the same value."

    Sematext Logs is a cloud-based SaaS log management solution that offers you real-time actionable insights into your log analytics with hosted ELK as a service, in the cloud or on-premises. Logs can be aggregated from a variety of sources using it because it's compatible with a large number of log shippers, libraries, platforms, and frameworks. Sematext’s auto-discovery of logs and services lets you automatically start log monitoring from both log files and containers and forward them directly through the user interface. Sematext Logs features sophisticated full-text searching, filtering, and tagging capabilities and allows you to correlate logs with infrastructure and application metrics within a single dashboard.

    Sematext Logs Benefits

    • Centralized logging
      With Sematext Logs, you can store and aggregate logs from all your data sources, including servers, infrastructure, apps, databases, containers, and systems, in a central location.
    • Hosted ELK as a service
      Using Sematext Logs, you will benefit from an Elasticsearch API and Kibana in the cloud without having to manage the infrastructure or pay for expensive consultants. Select a log shipper that works for you - Logstash, Filebeat, rsyslog, Logagent, etc. Analyze logs, and correlate them with infrastructure and application metrics.

    • Alerting on Logs
      Embrace the simplicity and ease of troubleshooting with our metric and log alerts, so you can concentrate on such matters as working on other projects or getting other work done. Sematext analyzes logs for optimal health when detecting anomalies, so you don't have to worry about those things.

    • Log security
      Utilize a centralized log management service to maintain security and compliance for cloud-native applications. AWS runs Sematext Logs, whose infrastructure follows IT security best practices and adheres to a variety of compliance standards such as SOC 1/SSAE, SOC 2, SOC 3,16/ISAE 3402 (formerly SAS 70 Type II), FISMA, DIACAP, FedRAMP, and HIPAA.

    • Powerful Searching and Filtering
      Using fast and intuitive search tools, you can search, filter, and analyze log data to identify and fix issues before they affect your business and prevent them from getting worse.

    • Saved Searches & Log Taggings
      Rerun recent and saved searches without typing them again. Save any query as Saved Search or Alert Query. Run Live Tail for any Saved Search. Autocomplete recent and saved searches. Tag Saved Searches with custom labels and colors. See log charts for Saved Searches at a glance, without running them.

    • 100+ integrations
      Use any of the compatible log shippers, logging libraries, platforms, and frameworks to make the most out of your logs. Supports all standard logging facilities and agents, ships logs via Syslog, ship from apps via Log4j, Logback, Log4j 2, Log4net, Winston, Python SyslogHandler... Supports Java, PHP, Perl, GoLang, Python, .NET, Ruby, and JavaScript. Ship with anything that can talk to Elasticsearch or Syslog.

    Click here to see the live demo

    Just some of the things you can do with Sematext Logs

    • Integration with other Sematext Cloud components, such as Infrastructure Monitoring, Synthetics, and Experience. For example, you can have dashboards with widgets from any component, so you can see which error caused that CPU spike
    • Spike-friendly pricing. Ingestion is averaged out and calculated on top of the “base” plan. For example, if you have the cheapest paid plan ($50/month, supports 1GB/day) and send 60GB in a month (2GB per day, on average), you end up paying $100
    • Configurable overage – you can choose when Sematext stops accepting logs, to control your cost
    • Per-silo pricing. You can create multiple “apps”, for example, Production and QA. Each can have its own plan (volume, retention) and overage configuration
    • Agent-free: any log shipper or library that works with syslog or Elasticsearch will work with Sematext Logs
    • Elasticsearch API access beyond indexing: you can run searches, export data, create custom templates, and more
    • Extra features on top of the ELK stack are available, such as role-based access control, alerting, and anomaly detection

    Where to go from here?

    Sign up for a free trial and try it for yourself. We offer both free and paid plans. Our commercial plan starts at $50 per GB per day for 7-day retention and you can try it free for 14 days. The free plan includes 500 MB per day.

    Sample Customers
    Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.
    Access Intelligence Plc, Adore Beauty, Agmatix, Associated Company, BITTE KAI RAND, BUFF Technologies LTD, ClariLab, CommIT, Depth-Sa, Diesel Laptops, Digitaltentstudio, Doole Health, Dovetail Technologies Ltd, Ebctechnologies, Emento, Empact IT, Enhance-It, ESCIO AS, Essential Assists, Extendi, Factinsect, Fino, Fulcrum, GradGuard, Ipdetect, Ivinco, Kal-It, Kronozio, Leen151, Macrovo, Moneri, Nextgenins, Pharmacies BENU SA, Pulsar Platform, QL Gaming Group, Section, Sematext Group Inc, Spineor, Spot Metrics, TP EQUIPMENT LEASING, Teams, Telna, Treatwell, Universal Equations, Upc Romania Bucuresti E320 Ra7, Velocitor Solutions, Vuelio, Wahoo Fitness, Weareyourhero
    Top Industries
    REVIEWERS
    Financial Services Firm23%
    Computer Software Company15%
    Comms Service Provider10%
    Security Firm6%
    VISITORS READING REVIEWS
    Educational Organization18%
    Computer Software Company15%
    Financial Services Firm10%
    Government7%
    No Data Available
    Company Size
    REVIEWERS
    Small Business39%
    Midsize Enterprise15%
    Large Enterprise45%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise29%
    Large Enterprise50%
    No Data Available
    Buyer's Guide
    Log Management
    April 2024
    Download Free Report
    Find out what your peers are saying about Splunk, Datadog, Wazuh and others in Log Management. Updated: April 2024.
    DOWNLOAD NOW
    768,578 professionals have used our research since 2012.

    IBM Security QRadar is ranked 6th in Log Management with 198 reviews while Sematext Logs is ranked 59th in Log Management. IBM Security QRadar is rated 8.0, while Sematext Logs is rated 0.0. The top reviewer of IBM Security QRadar writes "A highly stable and scalable solution that provides good technical support". On the other hand, IBM Security QRadar is most compared with Microsoft Sentinel, Splunk Enterprise Security, Wazuh, LogRhythm SIEM and Elastic Security, whereas Sematext Logs is most compared with Graylog, Grafana Loki and Logsign Next-Gen SIEM.

    See our list of best Log Management vendors.

    We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.