NetIQ Sentinel Overview
NetIQ Sentinel is the #28 ranked solution in our list of top Security Information and Event Management (SIEM) tools. It is most often compared to Splunk: NetIQ Sentinel vs Splunk
What is NetIQ Sentinel?
NetIQ Sentinel is a full-featured Security Information and Event Management (SIEM) solution that simplifies the deployment, management and day-to-day use of SIEM, readily adapts to dynamic enterprise environments and delivers the true "actionable intelligence" security professionals need to quickly understand their threat posture and prioritize response.NetIQ Sentinel is also known as Novell SIEM.
NetIQ Sentinel Buyer's Guide
Download the NetIQ Sentinel Buyer's Guide including reviews and more. Updated: March 2021
NetIQ Sentinel Customers
Faysal Bank, GaVI, Handelsbanken, ISC Mªnster, Lambeth Council, Swisscard, The Municipality of Siena, Tukes, University of Dayton, University of the Sunshine CoastNetIQ Sentinel Video
NetIQ Sentinel Archived Reviews (More than two years old)
Filter by:
Loading...
Filter Unavailable
Loading...
Filter Unavailable
Loading...
Filter Unavailable
Loading...
Filter Unavailable
Loading...
Filter Unavailable
Order by:
Loading...
Search:
it_user674118
Security/Service Engineer at a comms service provider with 10,001+ employees
Valuable features are Anomaly dashboards, search/filters features.
What is our primary use case?
Primarily, I used a NetIQ Sentinel when I worked as a Security Analyst as a tool to collecting and filtering-out logs in order to investigating whether there's something "interesting" i.e. samples of real attack or malware activities. Sentinel is tool that if it's well configured, it remove from view all unnecessary information like logs about that the user opened a window in the system and shows you only needful entries. It removes data that can obscure your perspective and mislead in investigation. Later, I used a NetIQ Sentinel more "administratively", which means that I… more »
it_user674112
Information Systems Manager at a healthcare company with 501-1,000 employees
The query tool of the web UI is so cool.
What other advice do I have?
Be careful with requirements, production resources are really needed. Be clear with objectives, and test it before use. Understanding SIEM concepts is basically the goal.
Find out what your peers are saying about Micro Focus, Splunk, IBM and others in Security Information and Event Management (SIEM). Updated: March 2021.
466,017 professionals have used our research since 2012.
it_user674067
Manager Platform Monitoring at a non-tech company with 10,001+ employees
It provides real time security event analytics. Take a look at other vendors like LogRhythm.
What is most valuable?
Scalability is the best feature.How has it helped my organization?
It provides real time security event analytics.What needs improvement?
Take a look at other vendors like LogRhythm. They are light years ahead of where this product is.For how long have I used the solution?
I have used this solution for seven years.What do I think about the stability of the solution?
We did have issues with stability. Java is not stable.What do I think about the scalability of the solution?
We did not have scalability issues.How are customer service and technical support?
Support is good, but only for backend support. Both Level-1 and Level-2 support teams are terrible.Which solution did I use previously and why did I switch?
We did not have a…it_user147231
Development Manager at a security firm with 51-200 employees
The correlation engine allows our clients to generate rules more efficiently.
What other advice do I have?
Prepare a plan for short, medium and large implementation. Start with the simple, like so: FW, routers, etc., then move to more complex ones like applications in house.it_user144273
Senior IT Security Consultant at a tech consulting company with 51-200 employees
Our intital setup was complex but mainly because of all the network variables we had.
What other advice do I have?
Be aware that without any technical support from NetIQ it could be very hard to administer.Product Categories
Security Information and Event Management (SIEM)Popular Comparisons
Splunk
IBM QRadar
ArcSight Enterprise Security Manager (ESM)
LogRhythm NextGen SIEM
AT&T AlienVault USM
Securonix Security Analytics
Fortinet FortiSIEM
Rapid7 InsightIDR
Exabeam
AWS Security Hub
SolarWinds Security Event Manager
Azure Sentinel
Buyer's Guide
Download our free Security Information and Event Management (SIEM) Report and find out what your peers are saying about Micro Focus, Splunk, IBM, and more!
Quick Links
- Which is the best SIEM solution for a government organization?
- What is the difference between IT event correlation and aggregation?
- What are the threats associated with using ‘bogus’ cybersecurity tools?
- Which is the best SIEM tool for a mid-sized financial services firm: Arcsight or Securonix?
- What is the difference between SIEM and SOAR platforms?
- What is the difference between log management and SIEM?
- Which SIEM is best fit with Palo Alto Cortex XDR?
- Are you using a SIEM platform with AWS Cloudwatch?
- What is the best SIEM tool for a large financial services firm?
- What is your SIEM buying cycle like?