Try our new research platform with insights from 80,000+ expert users
LogRhythm UEBA Logo

LogRhythm UEBA Reviews

Vendor: LogRhythm
3.5 out of 5
Start review

What is LogRhythm UEBA?

LogRhythm UEBA enables your security team to quickly and effectively detect, respond to, and neutralize both known and unknown threats. Providing evidence-based starting points for investigation, it employs a combination of scenario analytics techniques (e.g., statistical analysis, rate analysis, trend analysis, advanced correlation), and both supervised and unsupervised machine learning (ML).

Get the User Entity Behavior Analytics (UEBA) Buyer's Guide and find out what your peers are saying about LogRhythm UEBA, IBM Security QRadar, Splunk User Behavior Analytics and more!
LogRhythm UEBA is the #11 ranked solution in top User Entity Behavior Analytics (UEBA) solutions and #25 ranked solution in XDR Security products. PeerSpot users give LogRhythm UEBA an average rating of 7.0 out of 10. LogRhythm UEBA is most commonly compared to IBM Security QRadar: LogRhythm UEBA vs IBM Security QRadar. LogRhythm UEBA is popular among the large enterprise segment, accounting for 59% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 19% of all views.
Buyer's Guide
User Entity Behavior Analytics (UEBA)
March 2025
Get the category report
Helped 842,388 peers since 2012

Featured LogRhythm UEBA reviews

Read more reviews

LogRhythm UEBA mindshare

Product category:
User Entity Behavior Analytics (UEBA)
As of March 2025, the mindshare of LogRhythm UEBA in the User Entity Behavior Analytics (UEBA) category stands at 2.1%, down from 3.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.
User Entity Behavior Analytics (UEBA)
 
 
Key learnings from peers

Valuable Features

LogRhythm UEBA's valuable features include CloudAI for anomaly detection, a customizable dashboard, an intuitive graphical user interface, and detailed reporting. Users appreciate file and registry activity monitoring, server threat hunting, and the system's ease of configuration. The tool's machine learning capabilities excel in detecting unusual logins and tracking compromised account usage. Its ability to pinpoint cyber incidents and analyze user behaviors is highly valued for infrastructure monitoring.
  • "I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools."
  • "I can investigate attacks more quickly using machine learning tools."
  • "The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location."

Room for Improvement

LogRhythm UEBA requires better dashboards, including real-time updates. Users find the pricing high, especially in Asia, and seek improvements in automation, filtering, and integration with unsupported devices. The user interface and documentation, particularly for open-source users, need enhancement. It also lacks a comprehensive use case library and efficient machine-learning capabilities. Users face challenges integrating with certain products, and cloud performance is seen as lagging. Improved data aggregation and risk presentation are also needed.
  • "The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."
  • "In general, if something needs to be improved in the algorithm, it would be the dashboards."
  • "The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."

Pricing

Enterprise buyers evaluating LogRhythm UEBA note that while the solution offers flexible subscription-based licensing with various module options, it is generally considered expensive, particularly for cloud versions. Initial setup requires professional services, which add to costs. Opinions vary, with some finding it budget-friendly and others rating it costly compared to competitors like IBM QRadar. Pricing is typically on a yearly basis and may include technical support.
  • "I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."
  • "LogRhythm UEBA's pricing is affordable for small and medium businesses."
  • "It is quite a budget-friendly product."

Popular Use Cases

LogRhythm UEBA is primarily used for identifying identities, monitoring anomalous user behavior, and enhancing visibility. Companies use it for network monitoring, security analytics, threat hunting, and event logging. They employ machine learning tools for reducing cyber risk and investigating attacks swiftly. This tool is developed and provided by partners, with its use case depending on customer requirements. User logs play an essential role in securing infrastructure through constant monitoring and analysis.

Service and Support

LogRhythm UEBA's support is rated mixed by users. Some appreciate guidance during configuration issues, while others find reaching support and response time challenging. Beta team interactions are generally positive. Many note slow response times and needing repeated contacts. While some praise helpfulness, others expect more efficiency. Support is not deemed as strong as industry peers.

Deployment

LogRhythm UEBA's initial setup is often described as straightforward, although complexity varies. Some users find it quick due to precompiled applications and Windows-based deployment, while others require extensive tuning and multiple deployment phases. Challenges exist, particularly with troubleshooting post-deployment tasks involving agents. Deployment typically takes from a week to several months depending on resource availability, with organizations noting the importance of requirement analysis and familiarity with architecture for successful implementation.

Scalability

LogRhythm UEBA is mostly considered easy to scale, with high ratings from users. However, there are concerns about resource consumption and the limitations of the on-premises version. Many appreciate the flexible scaling options available, such as scaling at log collection, processing, or correlation. Adoption of cloud solutions is often suggested due to cost concerns with on-premises setups. The cloud option's pricing is compared unfavorably with competitors.

Stability

LogRhythm UEBA displays mixed stability feedback. Some find it very stable and trouble-free if properly deployed, while others encounter issues like agents stopping automatically. Ratings vary, with some giving it a 7.5 out of 10 and others a 7, indicating differing experiences. Stability is described as good by some users, though one suggests it's not too great. Overall, stability satisfaction ranges from acceptable to concerning.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our User Entity Behavior Analytics (UEBA) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
By visitors reading reviews

Top industries

By visitors reading reviews
Computer Software Company
19%
Financial Services Firm
11%
Manufacturing Company
9%
Government
8%
Real Estate/Law Firm
6%
Healthcare Company
5%
Comms Service Provider
5%
University
5%
Educational Organization
4%
Hospitality Company
3%
Construction Company
3%
Insurance Company
3%
Pharma/Biotech Company
3%
Legal Firm
3%
Retailer
3%
Energy/Utilities Company
2%
Wholesaler/Distributor
2%
Marketing Services Firm
1%
Media Company
1%
Logistics Company
1%
Outsourcing Company
1%

Compare LogRhythm UEBA with alternative products

Go!

Learn more about LogRhythm UEBA

LogRhythm UEBA was previously known as LogRhythm UserXDR, LogRhythm Enterprise UEBA.

Related questions

  • 49
Which is the best UEBA solution?
  • 6
Viable, Cost-Effective Competitors to Rapid7 InsightIDK
  • 203
What is your recommended cost-effective solution to detect and prevent APT attacks?
  • 34
Looking for recommendations and a pros/cons template for software to detect insider threats
  • 565
What are the main differences between UEBA and SIEM solutions?
  • 5
Monitoring Web Hosted Servers for unwanted guests
  • 18
Why is User Entity Behavior Analytics - UEBA important for companies?
  • 0
When evaluating User Behavior Analytics, what aspect do you think is the most important to look for?
  • 6
Which is the best UEBA solution?
  • 4
What are the different types of insider threats that UEBA solutions help to detect?

Product Categories

Product Categories
User Entity Behavior Analytics (UEBA)
Extended Detection and Response (XDR)

Popular Comparisons

Popular Comparisons
IBM Security QRadar vs LogRhythm UEBA Logo
IBM Security QRadar vs LogRhythm UEBA
Splunk User Behavior Analytics vs LogRhythm UEBA Logo
Splunk User Behavior Analytics vs LogRhythm UEBA
Aruba IntroSpect vs LogRhythm UEBA Logo
Aruba IntroSpect vs LogRhythm UEBA
See all alternatives
 

LogRhythm UEBA reviews

Sort by:
HS
Senior Cyber Cons at MDS
Verified user of LogRhythm UEBA
Jan 26, 2025
Improves threat investigation speed and reduces cyber risks but requires a more comprehensive use case library

Pros

"I can investigate attacks more quickly using machine learning tools."

Cons

"In general, if something needs to be improved in the algorithm, it would be the dashboards."

What is our primary use case?

I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools.

What is most valuable?

It is more about tracking the usage of compromised accounts. All old accounts are the accounts that integrators can use. The solution is used for user entity behavior analysis, however, it is not heavily used due to other alerts. I have started to use it more recently.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (516 words)
HS
Senior Cyber Cons at MDS
Verified user of LogRhythm UEBA
Feb 11, 2024
Detects unusual logins but dashboards need improvement

Pros

"The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location. "

Cons

"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."

What is our primary use case?

Using machine learning tools, we use the product to reduce cyber risk and investigate attacks more quickly. We use it mainly for user entity behavior analysis.

What is most valuable?

The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (500 words)
Buyer's Guide
User Entity Behavior Analytics (UEBA)
Download free report
Find out what your peers are saying about User Entity Behavior Analytics (UEBA). Updated March 2025
842,388 professionals have used our research since 2012.
Sheikh Abu Ayub Azad - PeerSpot user
CEO at Trustaira
Verified user of LogRhythm UEBA
Oct 3, 2022
Great at managing cyber incidents; the technical support could be improved

Pros

"Good capability pinpointing specific cyber incidents."

Cons

"The cloud version is lacking and not up to par. "

What is our primary use case?

We have the standard use cases for this product including monitoring of any kind. I'm the company CEO and we are partners with LogRhythm. 

What is most valuable?

The capability of pinpointing specific cyber incidents is a valuable feature for us. It's very good in correlation and it can pinpoint exactly what happened in terms of a cyber incident. I also think they have an impressive dashboard that can be customized quite easily.

*Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Read full review (470 words)
RH
Security Engineer at U.S. Acute Care Solutions
Verified user of LogRhythm UEBA
Oct 24, 2017
It watches everything to tell you what you don't know, and gives you a second opinion

What is most valuable?

Like they say, you don't know what you don't know. So, with CloudAI, it's just watching everything to see what you don't know, and it gives you a second opinion.

An ever-changing landscape, in medical, we deal with a lot of doctors in all sorts of places. So, they're always changing, moving, and using Macs. So, it makes it interesting. I definitely think that it's good at finding things automatically, versus trying to define it.

How has it helped my organization?

Not yet, but it's still working on it, it's still maturing. Right now, we were having some issues with some things, but as it continues, it will definitely.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (491 words)
PeerSpot user
Cyber Security Manager at a government with 10,001+ employees
Verified user of LogRhythm UEBA
Jun 7, 2023
The solution makes it easy to monitor users though it needs to improve its UI

Pros

"It is easy to monitor users and that is how the solution is adding value to our firm."

Cons

"The UI could be improved a little bit."

What is our primary use case?

I use the solution for a bit of user monitoring and analysis, and logging events.

How has it helped my organization?

It is easy to monitor users and that is how the solution is adding value to our firm.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (232 words)
PeerSpot user
Sr.Security Operations Engineer at a pharma/biotech company with 501-1,000 employees
Verified user of LogRhythm UEBA
Oct 21, 2023
An affordable solution that helps with server threat hunting

Pros

"The tool's most valuable feature is server threat hunting. "

Cons

"LogRhythm UEBA's data aggregation needs to be improved. Open-source users do not have much documentation available. Documentation is available only for enterprise users. "

What is our primary use case?

We use the product as a security program for threat hunting, user behavior, and analytics. It helps us with constant monitoring. We use user logs to secure our infrastructure. 

What is most valuable?

The tool's most valuable feature is server threat hunting. 

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (274 words)
PeerSpot user
Business Intelligence Developer at a computer software company with 11-50 employees
Verified user of LogRhythm UEBA
Oct 20, 2023
Has valuable dashboard features, whereas it could be easier to understand for new users

Pros

"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."

Cons

"The product could be user-friendly for someone who doesn’t have any prior experience working with it. "

What is our primary use case?

I used the product for monitoring logs.

What is most valuable?

LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs for 30 to 60 days. 

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (246 words)
NC
Team Lead - Network and Security at Connex Information Technologies
Verified user of LogRhythm UEBA
Jan 10, 2023
Easy to scale and manage, user-friendly, and its technical support is responsive

Pros

"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."

Cons

"What needs improvement in LogRhythm UEBA is the pricing. Here in Asia, for example, in Sri Lanka, pricing is the primary concern, and this is the only area for improvement I see in the product."

What is our primary use case?

The use case for LogRhythm UEBA depends on the requirement of the customer. My company provides and develops it, and it's up to the customer how he'll use it.

What is most valuable?

What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems.

I also like that the product is easy to manage and user-friendly.

*Disclosure: My company has a business relationship with this vendor other than being a customer: Distributor
Read full review (429 words)