LogRhythm UEBA Reviews

Name: LogRhythm UEBA
Brand: LogRhythm
Rating: 3.6 (10 reviews)

3.6 out of 5

10 reviews
62% willing to recommend

What is LogRhythm UEBA?

LogRhythm UEBA enables your security team to quickly and effectively detect, respond to, and neutralize both known and unknown threats. Providing evidence-based starting points for investigation, it employs a combination of scenario analytics techniques (e.g., statistical analysis, rate analysis, trend analysis, advanced correlation), and both supervised and unsupervised machine learning (ML).

Get the User Entity Behavior Analytics (UEBA) Buyer's Guide and find out what your peers are saying about LogRhythm UEBA, IBM Security QRadar, Splunk User Behavior Analytics and more!

LogRhythm UEBA is the #12 ranked solution in top User Entity Behavior Analytics (UEBA) solutions and #27 ranked solution in XDR Security products. PeerSpot users give LogRhythm UEBA an average rating of 7.2 out of 10. LogRhythm UEBA is most commonly compared to IBM Security QRadar: LogRhythm UEBA vs IBM Security QRadar. LogRhythm UEBA is popular among the large enterprise segment, accounting for 62% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 18% of all views.

Buyer's Guide

User Entity Behavior Analytics (UEBA)

December 2024

Get the category report

Helped 831,020 peers since 2012

Featured reviews

Sheikh Abu Ayub Azad

CEO at Trustaira

The initial setup is easy, partly because LogRhythm is primarily based on the Windows platform. It's good to have two engineers for deployment but it can be done with one. It's more about the knowledge. Deployment is typically done in two or three different phases. It usually takes up to three full months to get good deployment. There's the initial onboarding of all the log sources, then collecting data in the data lake, followed a couple of weeks later with some minor tuning before the final tuneup.

Read full review

Hanan Syed

Senior Cyber Cons at MDS

The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs. Consequently, presenting this information to a CSO or senior manager often requires manual reporting rather than relying on the dashboard. I recall experiencing integration challenges with LogRhythm UEBA, particularly when connecting with products not listed in its predefined integrations. These issues often manifest as parsing errors, even when attempting to integrate with cloud logs.

Read full review

Rob Haller

Security Engineer at U.S. Acute Care Solutions

Better dashboarding. At the moment, the dashboard only has an hour. It will give you one period of time, versus being an active dashboard like the rest of the dashboards. It doesn't give you an active tally of what's going on. It just gives you a snapshot. Also, better automation and response.

Read full review

LogRhythm UEBA mindshare

Product category:

As of January 2025, the mindshare of LogRhythm UEBA in the User Entity Behavior Analytics (UEBA) category stands at 2.3%, down from 3.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

User Entity Behavior Analytics (UEBA)

Key learnings from peers

Last updated Nov 21, 2024

Valuable Features

LogRhythm UEBA is appreciated for its customizable dashboard, server threat hunting, and machine learning capabilities. Users value its graphical interface, reporting, and ease of configuration. It excels in pinpointing cyber incidents and monitoring file and registry activity. Insightful for end-user behavior analysis and security for privileged accounts, LogRhythm UEBA effectively identifies suspicious activities, providing a second opinion and supporting multiple devices.

"The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location."
"The tool's most valuable feature is server threat hunting."
"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."

Room for Improvement

LogRhythm UEBA requires enhancements in dashboard functionality, automation, and search capabilities. It also needs stronger integration with other systems and better filtering. Guidance for unsupported device integration and improvements in cloud performance are necessary. Documentation for open-source users is limited. Pricing raises concerns in regions like Asia. The interface and user-friendliness could be refined. Data aggregation and machine-learning capabilities are areas for improvement, and risk quantification is lacking in a unified view. Enhanced use cases and integration support are also needed.

"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."
"LogRhythm UEBA's data aggregation needs to be improved. Open-source users do not have much documentation available. Documentation is available only for enterprise users."
"The product could be user-friendly for someone who doesn’t have any prior experience working with it."

Pricing

LogRhythm UEBA pricing is perceived as expensive with costs extending beyond standard licensing, which is subscription-based and flexible. While some find it budget-friendly, others rate it costly compared to competitors like IBM QRadar. Licensing is annual, tailored with module options, and includes technical support. Although affordable for small and medium businesses, deployment might require costly professional services, impacting total cost. The cloud version is notably more expensive.

"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."
"LogRhythm UEBA's pricing is affordable for small and medium businesses."
"It is quite a budget-friendly product."

Popular Use Cases

LogRhythm UEBA is primarily utilized for identifying identities, monitoring anomalous user behavior, and enhancing visibility. Users deploy it for network monitoring and logging events. Companies leverage it for security purposes, threat hunting, and reducing cyber risk using machine learning. It assists businesses in user behavior analysis and securing infrastructure through constant monitoring and analytics. Clients use it according to their specific requirements, making it a versatile tool in cybersecurity operations.

Service and Support

Users express mixed feelings about LogRhythm UEBA customer service. Some find it slow and challenging to contact, highlighting the need for quicker responses and better access to the right team. Others rate LogRhythm's technical support as responsive and helpful, particularly in guiding through misconfigurations. Scores range from six to seven out of ten, indicating room for improvement in promptness compared to industry standards.

Deployment

Users found LogRhythm UEBA's setup generally straightforward, though some faced complexities and minor adjustments. Initial deployments varied from quick processes to taking several months for full implementation. Typically, two engineers are recommended, with tasks such as onboarding log sources and data lake integration. Troubleshooting post-deployment, particularly with agents, posed more challenges than setup itself. Timeframes for deployment ranged from a week to up to three months, emphasizing the need for knowledgeable resources.

Scalability

LogRhythm UEBA is recognized for its scalability, generally receiving high ratings. Users find it adaptable to their needs, able to scale in log collection, processing, and correlation. Despite positive feedback, concerns include high memory and resource consumption by agents. While most versions are rated favorably, the on-prem version receives lower ratings for scalability. Users report it's flexible and easily allows for server additions, accommodating multiple users in their organizations.

Stability

Some users consider LogRhythm UEBA's stability acceptable, while others report no bugs or issues. Many find it stable if deployed correctly. Some rate its stability as seven or 7.5 out of ten, suggesting it could be improved. A few describe it as a stable solution, yet it's not rated too highly by all.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our User Entity Behavior Analytics (UEBA) Buyer's Guide for additional reliable information.