Try our new research platform with insights from 80,000+ expert users

Amazon OpenSearch Service vs IBM Security QRadar comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 5, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Amazon OpenSearch Service
Ranking in Log Management
30th
Average Rating
7.8
Reviews Sentiment
7.5
Number of Reviews
5
Ranking in other categories
Application Performance Monitoring (APM) and Observability (35th)
IBM Security QRadar
Ranking in Log Management
6th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
207
Ranking in other categories
Security Information and Event Management (SIEM) (4th), User Entity Behavior Analytics (UEBA) (1st), Endpoint Detection and Response (EDR) (17th), Security Orchestration Automation and Response (SOAR) (4th), Managed Detection and Response (MDR) (9th), Extended Detection and Response (XDR) (11th)
 

Mindshare comparison

As of April 2025, in the Log Management category, the mindshare of Amazon OpenSearch Service is 2.3%, up from 0.0% compared to the previous year. The mindshare of IBM Security QRadar is 3.8%, down from 5.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

VijayKumar27 - PeerSpot reviewer
Effective as a vector store, serverless architecture but there aren't enough security features
The pricing aspect is a concern. The service is way too costly. For the past month, I used only 30 to 40 MB of data, and the cost was $500. AWS could improve pricing. Even being serverless, it incurs charges during idle times. For just holding data, you need to create a list. AWS should add an option to make data idle, so it won't include computing charges. They charge for OCU units based on the time the serverless solution is up, not on indexing or retrieval speed. Once the service starts, it starts getting billed. It would help if there were an option to limit computing. When using it as a database, storing data without frequent fetching would save computing costs.
Md. Shahriar Hussain - PeerSpot reviewer
Real-time incident detection and user-friendly dashboard benefit daily operations
There are many types of AI, and this AI is very limited in SQL and features. There may be potential for improvement. So far, it seems very limited. It shows some good features in the correlation part, but I think there is room for improvement. For instance, when creating rules, it can suggest more rules, reducing the effort needed. If AI-related support can suggest rules and integrate with existing security devices like MD, IPS, this SIM can create more relevant rules. Sometimes logs I receive don't mean anything, and I need technical stakeholders to share or forward logs, but these are sometimes inadequate. Keywords can help identify insufficient logs. I often lack time to verify logs. Sharing false positive results could be reduced to help my team.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The business analytics capabilities are the most important feature it provides."
"We retrieve historical data with just a click of a button to move it from cold to hot or warm because it's already stored in the backend storage"
"The customer service is excellent, rated nine out of ten."
"Amazon OpenSearch Service has enhanced our organization's ability to store and search large amounts of data efficiently."
"This service already sorts data like vectors. They have classified the storage pre-defined."
"Amazon OpenSearch Service provides a managed database solution, so we don't need to manage everything ourselves."
"I would definitely recommend Amazon OpenSearch Service to other professionals due to its fast and reliable search capabilities."
"It has a powerful GUI where you can put together your use cases, and don't have to write your own scripts."
"I really like the feature we have with the logs, that if there are any credit card numbers being used, like a PII, you can just use rejects and you can mask it. This is a really good feature in QRadar."
"The tool's most valuable feature is log source management. It enables us to connect to various log sources, including content, authentications, or other customized integrations. These integrations can be tailored for use with other platforms that don’t already have built-in IBM add-ons."
"It is a pretty solid product for the type that it is representing. It is a CM solution as compared to Splunk or ArcSight from HP. It is also user friendly. It comes with some internal AI as well, in which it automatically maps multiple lots from unrelated devices and makes a smart decision to link them back and create an offense based on that. It is a smart tool."
"Overall a great solution."
"The most valuable features are the versatility of this solution and the variety of things you can do with it."
"IBM QRadar User Behavior Analytics has easy architecture, has a good portfolio and integration."
"It's built around Red Hat Linux, which is highly robust."
 

Cons

"The pricing aspect is a concern. The service is way too costly. For the past month, I used only 30 to 40 MB of data, and the cost was $500. AWS could improve pricing."
"One improvement I would like to see is support for auto-scaling."
"They can enhance data visualization."
"It would be beneficial to have some level of customization available in the managed service, tailored to the specific use cases of the end users."
"One improvement I would like to see is support for auto-scaling."
"We faced documentation challenges during integration after migrating from Elasticsearch to Amazon OpenSearch Service. Better documentation on integration, query handling, and a more user-friendly UI could enhance the product."
"The price is fair yet leans towards the expensive side. I'd rate it five out of ten with respect to capabilities vs. cost."
"The solution's technical support works, but sometimes, it can take quite a long time to get a solution from technical support."
"There should be more opportunity for community kind of distribution where, for example, if there was a zero-day threat targeting companies."
"There are many types of AI, and this AI is very limited in SQL and features. There may be potential for improvement."
"IBM Security QRadar lacks automated response. With this feature, there's no need to visit VirusTotal or other sites for IP reputation. There should be a small plug-in where users can click to retrieve details about the reputation and organization of public IP."
"If you have too many events that occur, then the storage capacity becomes a problem. You need to have more storage."
"They should introduce some automation into the product."
"While the interface is easy to use, it could be a little more responsive."
"IBM Security QRadar’s GUI could be improved."
 

Pricing and Cost Advice

Information not available
"Only enterprise businesses can afford the tool."
"The product is expensive. We have purchased the perpetual license, but we pay for the support."
"think the pricing is quite flexible."
"We pay approximately $40,000 to use the solution annually. This solution is a lot less expensive than Splunk."
"There is an annual license required for this solution."
"It is overly expensive and overly complex in terms of licensing. They have many different appliances, which makes it extremely difficult to choose the technology. It is very difficult to choose the technology or QRadar components that you should be deploying. They have improved some of it in the last few years. They have made it slightly easy with the fact that you can now buy virtual versions of all the appliances, which is good, but it is still very fragmented. For instance, on some of the smaller appliances, there is no upgrade path. So, if you exceed the capacity of the appliance, you have to buy a bigger appliance, which is not helpful because it is quite a major cost. If you want to add more disks to the system, they'll say that you can't."
"QRadar is quite expensive. It wouldn't be worth it for a small business..."
"IBM QRadar is a little bit expensive compared to other products."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
845,040 professionals have used our research since 2012.
 

Comparison Review

VS
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
15%
Manufacturing Company
8%
Comms Service Provider
5%
Educational Organization
23%
Computer Software Company
14%
Financial Services Firm
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Amazon OpenSearch Service?
We retrieve historical data with just a click of a button to move it from cold to hot or warm because it's already stored in the backend storage
What is your experience regarding pricing and costs for Amazon OpenSearch Service?
Amazon OpenSearch Service is a bit costly compared to self-hosted Elasticsearch due to the managed service pricing.
What needs improvement with Amazon OpenSearch Service?
One improvement I would like to see is support for auto-scaling. The current configuration does not support automatic scaling based on server load, requiring us to manage the scaling manually. Addi...
What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is your experience regarding pricing and costs for IBM Security QRadar?
The cost depends. The price I negotiated varies by region and relationship with the OEM. Cost is not shared due to another procurement team handling negotiations, but it was reasonable as far as I ...
 

Also Known As

No data available
IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, IBM QRadar Advisor with Watson
 

Overview

 

Sample Customers

Information Not Available
Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.
Find out what your peers are saying about Amazon OpenSearch Service vs. IBM Security QRadar and other solutions. Updated: March 2025.
845,040 professionals have used our research since 2012.