Most Helpful Review
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
Providing real-time visibility for threat detection and prioritization - QRadar SIEM provides contextual and actionable surveillance across the entire IT infrastructure.
It is very stable. We have not faced interruptions in the past four and a half years.
It has improved comprehensive visibility for what is going on in the perimeters, and on the inside, as well.
It is really helpful to us from the compliance point of view.
The initial setup is not complex or difficult.
QRadar has somewhat of a new structure recently from last gen. They have moved from the standard UI based infrastructure.
It has improved my efficiency.
A nice benefit is when we go to the process of selecting our youth cases, they go by building blocks. QRadar links it to building blocks.
It is quite extensible. It is a platform that we can build our use instead of each case instead of each case being limited or restricted to each capability. This is probably the best feature.
In the past we used the different application to collect logs. We used SurfWatch and VMware to do so. But, we found that the Splunk has more capacity to do more in less time. They provide a aster speed to index all the events , and this is a huge asset.
The dashboards are the most valuable feature. We like the ability to drill in and see what queries are under the dashboard, build new visualizations, edit the querying, and see the reports.
We were able to create a catalog of dashboards and have a holistic view at all levels. We could understand our business much better. Real-time errors, which were buried in emails before now, surfaced up on dashboards.
The technical support has been very good. They are very responsive and have been helpful.
You can run reports against multiple devices at the same time. You are able to troubleshoot a single application on a thousand servers. You can do this with a single query, since it is very easy to do.
It has reduced the time to resolution, time to investigate, and time to troubleshoot for debugging issues.
Out-of-the-box, it seems very powerful.
AI is superb but need improvements.
Technical support is good, but not great.
The tech support is not that good.
The Indian tech support is not helpful.
It is not app based.
The initial setup was complex, and it took six months.
QRadar needs a lot of fine tuning
The quality of technical support depends on the IBM support person. Sometimes, it's hard to get the right person on the other side. A ticket coordinator could be the key to better quality delivery.
I would like to see future development in terms of ML (Machine Learning).
I think the tech support response time could be a bit better. Sometimes I need to wait more than 24 hours for a response to my tickets.
Splunk is not very user-friendly. It has a complex architecture in comparison to other solutions on the market.
We do have to educate developers on how to not blow it up. It is a little to easy to write an expensive query and overly stress the system. This could be improved.
I would like additional features in different programming models with the support for writing queries in SQL or other languages, such as C#, Java, or some other type of query definitions.
When you get into large amounts of data, Splunk can get pretty slow. This is the same on-premise or AWS, it doesn't matter. The way that they handle large data sets could be improved.
I would like to see an updated dashboard. The dashboard is a little out-of-date. It could be made prettier.
My company could benefit from doing more Splunk training with Splunk consultants teaching us how to use it.
Pricing and Cost Advice
The cost of this product is expensive.
It is very expensive.
A good approach would be to begin with an On Cloud subscription, then later on do a more exact sizing.
Pricing and licensing are competitive. Their new licensing options allow logs to bypass the correlation engine for a flat rate, which is also appealing for log data that is compliance-driven for a small amount of money.
Pricing (based on EPS) will be more accurate.
An X-Force feed is free with QRadar.
It is expensive. It is not a product that I can provide for SMBs. It is a program that I can only provide for really large enterprises.
The maintenance costs are high.
I think the price could be improved.
I am not personally involved with the pricing of the solution.
Some of the insights that we have obtained as a part of using Splunk have greatly helped us in increasing our revenue in terms of selling our products.
The pricing seems good relative to the other vendors that we have had here. However, they need to find ways to be more flexible with the licensing and be able to deal with situations where we start generating more logs. Maybe having some controls in the Splunk interface to turn it off, so we don't have to change anything in our application.
We have had a reduction in the time it takes to resolve issues and correlate what has failed.
It would be nice if the pricing were cheaper. However, we did purchase it.
Splunk is not free.
We have seen ROI and improvements as we have continued to use the product, but they are more reactive.
Answers from the Community
out of 40 in Security Information and Event Management (SIEM)
out of 40 in Security Information and Event Management (SIEM)
Compared 42% of the time.
Compared 11% of the time.
Compared 8% of the time.
Compared 16% of the time.
Compared 9% of the time.
Compared 7% of the time.
Also Known As
|QRadar SIEM, QRadar UBA, QRadar on Cloud, QRadar|
The IBM QRadar security and analytics platform is a lead offering in IBM Security's portfolio. This family of products provides consolidated flexible architecture for security teams to quickly adopt log management, SIEM, user behavior analytics, incident forensics, and threat intelligence and more. As an integrated analytics platform, QRadar streamlines critical capabilities into a common workflow, with tools such as the IBM Security App Exchange ecosystem and Watson for Cyber Security cognitive capability.
With QRadar, you can decrease your overall cost of ownership with an improved detection of threats and enjoy the flexibility of on-premise or cloud deployment, and optional managed security monitoring services.
Splunk software has been around since 2006 and the company has since grown to become an industry leader. Splunk's vision is to make machine data accessible, usable and valuable to everybody. The company offers a wide range of products to turn machine data into valuable information by monitoring and analyzing all activities. This is known as Operational Intelligence and is the unique value proposition of Splunk.
Splunk is well-known for its Log Management capabilities and also for its Security Information and Event Management (SIEM) solutions.
Learn more about IBM QRadar
Learn more about Splunk
|Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.||Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.|
Financial Services Firm25%
Comms Service Provider7%
Health, Wellness And Fitness Company7%
Financial Services Firm16%
Comms Service Provider12%
Financial Services Firm20%
Financial Services Firm17%
Comms Service Provider11%
See also IBM QRadar Reviews, Splunk Reviews, and our list of Best Security Information and Event Management (SIEM) Companies.