Can you please share your opinion about purchasing and using IBM QRadar?
IBM QRADAR is a great SIEM systems only expensive, it is capable to detect and report on security issues and the AI is doing a great job. If I compare it with different systems on the market, Riverbeds security system is equal, Advise if you like to go with IBM you should ask for the roadmap of Qradar.
@Dawn Eickenhorst , you might like to check the following link:
Hi community members,
I'm a security engineer at a Tech Services company and I'm currently exploring SOC solutions, such as Rapid7 InsightIDR, Splunk, IBM QRadar and ArcSight Analytics.
Based on your experience, which SOC tool/solution would you recommend and why?
How do log management and SIEM differ? Is it necessary to have separate tools for each function or can these functions be rolled into one solution?
Which products are best for SIEM, and which are better for log management? Do you have recommendations of products that effectively combine both log management and SIEM?