IBM Security QRadar vs Logsign Next-Gen SIEM comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

IBM Security QRadar
Ranking in Log Management
6th
Ranking in Security Information and Event Management (SIEM)
4th
Average Rating
8.0
Number of Reviews
198
Ranking in other categories
User Entity Behavior Analytics (UEBA) (1st), Endpoint Detection and Response (EDR) (20th), Security Orchestration Automation and Response (SOAR) (4th), Managed Detection and Response (MDR) (10th), Extended Detection and Response (XDR) (11th)
Logsign Next-Gen SIEM
Ranking in Log Management
43rd
Ranking in Security Information and Event Management (SIEM)
36th
Average Rating
7.6
Number of Reviews
3
Ranking in other categories
No ranking in other categories
 

Market share comparison

As of June 2024, in the Security Information and Event Management (SIEM) category, the market share of IBM Security QRadar is 16.3% and it increased by 40.7% compared to the previous year. The market share of Logsign Next-Gen SIEM is 0.5% and it increased by 148.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
Unique Categories:
Log Management
8.2%
User Entity Behavior Analytics (UEBA)
13.5%
 

Featured Reviews

YE
Sep 30, 2022
Real-time detection is quite efficient but the dashboard lacks important visibility for threat hunting
Our company includes 20 senior engineers and analysts who use the solution to detect viruses on Windows servers and critical assets. We also track user activity such as connections during travel.  We have many use cases and playbooks in our portfolio.  Our company uses the solution as our main CM…
BT
Jan 8, 2024
Easy to use and find the features that you need
The initial setup is easy. Logsign support deals with it. You just provide a server to them, and they install the product. It is budget-friendly every time. The first step is to provide the server with strong SIEM resources like CPU, memory, etc. You also need to give them a VPN connection to connect and do the setup. When you open a support ticket, they connect with the VPN and apply the solution. They help you collect logs or forward logs from the different servers or products on the network or offline products. The process takes up to a month. You need to work together with the Logsign support. You need to collect the logs and forward them to Logsign from each product or each part of your system. After that, you will be able to monitor the system security.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"There are a lot of features in QRadar. App Exchange is the most valuable feature. User behavior analytics (UBA) is also a very good feature. Watson is also there, but we are not currently using Watson. It is versatile and quite easy. It also has an all-in-one-box feature and good integration with AWS."
"There are other third-party plugins that we can use."
"I think it's a very stable product that provides much more visibility than the other product."
"What I like the most about it is that you can very easily install and configure it. As compared to other SIEM solutions, for which you need to know and do a lot more to prepare your SIEM environment, QRadar is much simpler to install and configure. There are various options in the Admin console. In the Admin tab, you can design dashboards and view various graphs. It has a lot of attractive features, and you don't need to configure everything on your own."
"The playbook engine is flexible and allows for the graphical visualization of processes, enabling the implementation of dynamic playbooks for incident response or testing."
"It is a pretty solid product for the type that it is representing. It is a CM solution as compared to Splunk or ArcSight from HP. It is also user friendly. It comes with some internal AI as well, in which it automatically maps multiple lots from unrelated devices and makes a smart decision to link them back and create an offense based on that. It is a smart tool."
"The features that I have found most valuable are that it is very stable, easy to get going, and easy to manage. It is also easy to review all incidents."
"The ability to add extensions is the most valuable feature. For example, extensions that provide valuable test ports."
"Logsign provides sample logs within the product, allowing users to see how logs will appear before integration, which is a valuable feature for testing and understanding log formats."
"The most valuable features of Logsign SIEM are its cloud capabilities, alerting functionality, integration with Elastic Search, and configuration options."
 

Cons

"The solution is expensive compared to other products."
"The product needs to improve its GUI."
"The only problem is that if you have too many events that occur, then the storage capacity becomes a problem. We would need to increase the storage capacity."
"QRadar needs to be more specialized, along the lines of what other SIEM solutions are."
"The implementation of the solution's technology needs to be simplified."
"Maybe there should be more custom rules in the exchange. Basically, we are using a lot of threat rules, so maybe they'll develop something like that."
"IBM Security QRadar’s GUI could be improved."
"The user interface is a bit difficult to get used to."
"Improvements needed in Logsign SIEM are providing specific security alerts that can be filtered and configured more effectively."
"I hope they address the pricing model for Logsign Next-Gen SIEM, especially regarding regional variations. The pricing should not differ based on the country of operation as it can lead to dissatisfaction among customers. A fixed pricing structure would be more favorable for us. I would also suggest enhancing the GUI interface and adding features similar to xFi Exchange from IBM Pure. This would streamline operations and save time for analysts."
 

Pricing and Cost Advice

"The solution comes with a high price tag, while some of the competitors provide identical functionality in their offerings at no extra cost."
"Customers have to purchase a license based on the number of users, devices, and applications they want to protect. It allows you to take a license on a subscription basis for three years or five years."
"QRadar's price is reasonable compared to LogRhythm."
"There is a license required for this solution and it is an annual payment. I have found all solutions in the category to be expensive, including Splunk."
"Pricing and licensing are competitive. Their new licensing options allow logs to bypass the correlation engine for a flat rate, which is also appealing for log data that is compliance-driven for a small amount of money."
"Licensing can be costly depending on your architecture."
"It would be great if this product were cheaper."
"The price of this product is high."
Information not available
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
787,061 professionals have used our research since 2012.
 

Comparison Review

VS
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
Educational Organization
19%
Computer Software Company
15%
Financial Services Firm
10%
Government
7%
Government
14%
Computer Software Company
13%
Comms Service Provider
11%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What do you like most about IBM QRadar?
The event collector, flow collector, PCAP and SOAR are valuable.
What needs improvement with Logsign Next-Gen SIEM?
Improvements needed in Logsign SIEM are providing specific security alerts that can be filtered and configured more effectively. There should be a focus on delivering alerts tailored to specific ne...
What is your primary use case for Logsign Next-Gen SIEM?
We use Logsign SIEM for various tasks in our daily operations. One key use case is for forensic analysis. We also use it to monitor critical servers and generate security alerts for actions like lo...
What advice do you have for others considering Logsign Next-Gen SIEM?
Logsign SIEM seems to be following market trends by adapting its pricing model based on the number of devices rather than data volume. This aligns with how other solutions are evolving in the marke...
 

Also Known As

IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, QRadar, IBM QRadar User Behavior Analytics, IBM QRadar Advisor with Watson
No data available
 

Learn More

 

Overview

 

Sample Customers

Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.
Turkish Petroleum, Tırsan, DP World, SAC American Colleges, Robert College, Unlu&Co, UniCo Insurance Company, ETSTur, CK Energy, UEDAS Energy, Wilo, Eurocross Assistance, Deloitte Turkey, Incı GS Yuasa, Pappara, Bilgi University, Anadolu University, İstanbul University, The Ministry of Energy and Natural Resources, TRT, Anadolu Media Agency, Ministry of Family, Labour and Social Services, Ispark, Spor AS and wide range of enterprises in different industries. 
Find out what your peers are saying about IBM Security QRadar vs. Logsign Next-Gen SIEM and other solutions. Updated: June 2024.
787,061 professionals have used our research since 2012.