IBM Security QRadar Reviews

Easy to use. Learning curve is short. It's the same product compared to 10 years ago. It functions as it's expected. Expansion of the solution is easy. Reporting is inside the product and works well. Support is adequate.

There's no DataBroker or in short Kafka etc for filtering. AI and ML models is missing. Within the digital transformation and cloud migrations, it falls behind for the 3rd party integrations. I need to do the integration from the scratch for Saas or Paas services. Api integrations does not work well compared to similar solutions.

Easy to use. Easy integration with log sources. Assure security of logs is easy with QRadar.

Sometime use too more resources. The user manual can be more detailed.

The IBM QRadar SIEM is a powerful tool. A mature solution to collect event and investigate incidents and attacks. The tool store in secure mode all events. The tool is easy to use. Easy to add log sources and analysis offenses.

The documentation of the tool can be more detailed.

Its UI , Features, Policy definitions , Integrations.

Nothing as such . Its a fantastic Product

1. It is one of the best software of SIEM in the market.2. Any offense can be monitored easily on a single console.3. Customer Support is amazing

1. It is a bit expensive when you buy it for local servers.2. One of the most expensive tools for cloud-based SIEM tools.3. It's a bit professional tool and that's why beginners get issues when using it.

Robust SIEM product with a hybrid on-premise and cloud delivery model, one of the best in the market

price model only based on EPS and overall price compared to other solution

Easy to implement correlation rules. Provides a very user friendly interface and with a few clicks can easily build monitoring rules. Has built in alert management tool

I think the UBA component can be improved to include machine learning. Rather it is currently based on static correlation rules

It is one of the most user friendly SIEM tool, I have worked with. UI is quite good and navigation is very easy.
As being a part of SOC team, it is helpful in detecting, investigating and prioritizing threats/alerts.
We can create use cases based on threat condition, which will trigger an alert in case of threat defined in the use case, which will make our threat monitoring easier.
It helps in securing our assets, endpoints, network everything.
We can create dashboards and download reports.
We can create reference sets for any IOCs or any other data which will be helpful in usecase creations or finetuning.
it can be integrated with soar solutions for our ease.

Sometimes due to less EPS, we might face Event drops during heavy flow of data.
Creating dashboards for any real time detection can be difficult.
Sometimes API calls fails while working on SOAR for the automated usecases.

Qrader is best tool for information security. we have integrated qrader with our firewall and proxy, we work on offenses which are generated by qrader when it detects or find any suspicious behavior. we can write policies to get alerts in qrader.

Most of the offenses which qrader generated are false positive so it should develop their with more features and detection capabilities

Security Innovation event management system is excellent as it has endless layers of security for a company's firewall

To be sincere, the only way this system can be flawed is when pass codes are compromised within

It was a good experience. Implementation was easy.

Too much documentation. Complicated instructions.

Overall product stability
Predefined log normalization functionnality
Diverse feature set
Perpetual licensing

Licensing model: the EPS (events per second) cap limits the amount of logs that can be ingested in Qradar
Can produce a lot of false positives

User friendly easy to manage, customisable dashboard.

Some part of qradar is little bit complicated.

Powerful product with advanced threat detection capability and excellent automation and analytical functionality that provides us with data-driven insight and helps gain full visibility into the root cause and take immediate action.

Great integration with most products in use and a highly flexible product to future business demands and deployment options to choose from. Nothing to dislike.

Easy to implement and administrate. Good price. The vendor offer good support. Big user community. Run fast. Easy to add and manage log sources.

Nothing. We like this tool. And recommend to other to use it

I have used QRadar for a few years. We run it in a big environment. The benefits are flexible and scalable architecture, efficient reporting, the data consolidation and search capabilities.

The dashboards should be improved. Generally, we absolutely satisfied with QRadar, but I did not compare it with some other tools.

I like how IBM Security QRadar easily investigate, detect and respond to threats on devices and endpoints on company network.

Our internal support team eradicates issues as soon as they arise.