Try our new research platform with insights from 80,000+ expert users

Amazon OpenSearch Service vs IBM Security QRadar comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 5, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Amazon OpenSearch Service
Ranking in Log Management
32nd
Average Rating
7.6
Reviews Sentiment
7.6
Number of Reviews
4
Ranking in other categories
Application Performance Monitoring (APM) and Observability (35th)
IBM Security QRadar
Ranking in Log Management
6th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
207
Ranking in other categories
Security Information and Event Management (SIEM) (4th), User Entity Behavior Analytics (UEBA) (1st), Endpoint Detection and Response (EDR) (17th), Security Orchestration Automation and Response (SOAR) (4th), Managed Detection and Response (MDR) (10th), Extended Detection and Response (XDR) (12th)
 

Mindshare comparison

As of March 2025, in the Log Management category, the mindshare of Amazon OpenSearch Service is 2.0%. The mindshare of IBM Security QRadar is 3.9%, down from 5.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management
 

Featured Reviews

VijayKumar27 - PeerSpot reviewer
Effective as a vector store, serverless architecture but there aren't enough security features
The pricing aspect is a concern. The service is way too costly. For the past month, I used only 30 to 40 MB of data, and the cost was $500. AWS could improve pricing. Even being serverless, it incurs charges during idle times. For just holding data, you need to create a list. AWS should add an option to make data idle, so it won't include computing charges. They charge for OCU units based on the time the serverless solution is up, not on indexing or retrieval speed. Once the service starts, it starts getting billed. It would help if there were an option to limit computing. When using it as a database, storing data without frequent fetching would save computing costs.
Md. Shahriar Hussain - PeerSpot reviewer
Real-time incident detection and user-friendly dashboard benefit daily operations
There are many types of AI, and this AI is very limited in SQL and features. There may be potential for improvement. So far, it seems very limited. It shows some good features in the correlation part, but I think there is room for improvement. For instance, when creating rules, it can suggest more rules, reducing the effort needed. If AI-related support can suggest rules and integrate with existing security devices like MD, IPS, this SIM can create more relevant rules. Sometimes logs I receive don't mean anything, and I need technical stakeholders to share or forward logs, but these are sometimes inadequate. Keywords can help identify insufficient logs. I often lack time to verify logs. Sharing false positive results could be reduced to help my team.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Amazon OpenSearch Service provides a managed database solution, so we don't need to manage everything ourselves."
"The business analytics capabilities are the most important feature it provides."
"Amazon OpenSearch Service has enhanced our organization's ability to store and search large amounts of data efficiently."
"This service already sorts data like vectors. They have classified the storage pre-defined."
"We retrieve historical data with just a click of a button to move it from cold to hot or warm because it's already stored in the backend storage"
"The customer service is excellent, rated nine out of ten."
"There are more than 120 extensions in QRadar, which are easy to install and configure. These can improve your analysis of events."
"think QRadar is great overall. We’ve had a positive experience with it and recommend it for deployment. However, there are areas for improvement. The technical support is good, and the documentation is valuable, but it could be enhanced, especially regarding integration with other systems. In terms of support and updates, QRadar’s capabilities are crucial for maintaining high security standards. Network and software administrators can monitor all traffic effectively, which reassures clients and drives further adoption."
"It has improved my efficiency."
"The most valuable features would have to be the products' ability to customize vulnerability management settings."
"It is incredibly easy to deploy. All the appliances are flexible in the roles that they serve and are all managed the in the same way."
"The scalability is awesome, because QRadar includes other solutions in the same console."
"One of the most valuable features of this solution is it has very good data correlation."
"My overall rating for this solution is nine out of ten."
 

Cons

"One improvement I would like to see is support for auto-scaling."
"The price is fair yet leans towards the expensive side. I'd rate it five out of ten with respect to capabilities vs. cost."
"One improvement I would like to see is support for auto-scaling."
"It would be beneficial to have some level of customization available in the managed service, tailored to the specific use cases of the end users."
"They can enhance data visualization."
"The pricing aspect is a concern. The service is way too costly. For the past month, I used only 30 to 40 MB of data, and the cost was $500. AWS could improve pricing."
"Each module requires a separate license and a separate cost."
"Certain updates—especially when using Azure—don't apply directly. Our engineering team must invest additional effort to implement these updates. However, the tool's cloud-based version poses no issues. However, upgrading the product can sometimes be challenging for on-premises instances."
"I don't give it a 10 because it is something we have to request. I would love it if UBA was included out of the box like Microsoft."
"In terms of additional features, a mobile app would be nice. Also, the reporting is definitely okay, but you have to make sure that everybody with different roles can understand it. There is room for improvement in the reporting."
"We have had problems with networking."
"I think that the search speed of this solution could be improved."
"Maybe there should be more custom rules in the exchange. Basically, we are using a lot of threat rules, so maybe they'll develop something like that."
"Some of the cloud apps need improvement."
 

Pricing and Cost Advice

Information not available
"Go through a vulnerability assessment review for price breaks. A virtualized solution will also cut down on cost."
"The license is not subscription-based."
"There is a license to use this solution, which is paid annually. However, there are subscription options available."
"Its price is good in terms of efficiency and the number of people required for implementing various things. You might pay more in terms of money, but you might save on the number of people. For example, if you are using Kibana, you have to pay more for people or experts, which is not the case with IBM QRadar."
"The solution comes with a high price tag, while some of the competitors provide identical functionality in their offerings at no extra cost."
"The solution has a licensing model that is based on events per second so it scales to need and budget."
"Pricing (based on EPS) will be more accurate."
"The pricing needs to be such that they are more competitive with other vendors."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
842,690 professionals have used our research since 2012.
 

Comparison Review

VS
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
15%
Manufacturing Company
8%
Comms Service Provider
5%
Educational Organization
23%
Computer Software Company
14%
Financial Services Firm
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Amazon OpenSearch Service?
We retrieve historical data with just a click of a button to move it from cold to hot or warm because it's already stored in the backend storage
What is your experience regarding pricing and costs for Amazon OpenSearch Service?
Amazon OpenSearch Service is a bit costly compared to self-hosted Elasticsearch due to the managed service pricing.
What needs improvement with Amazon OpenSearch Service?
One improvement I would like to see is support for auto-scaling. The current configuration does not support automatic scaling based on server load, requiring us to manage the scaling manually. Addi...
What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is your experience regarding pricing and costs for IBM Security QRadar?
The cost depends. The price I negotiated varies by region and relationship with the OEM. Cost is not shared due to another procurement team handling negotiations, but it was reasonable as far as I ...
 

Also Known As

No data available
IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, IBM QRadar Advisor with Watson
 

Overview

 

Sample Customers

Information Not Available
Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.
Find out what your peers are saying about Amazon OpenSearch Service vs. IBM Security QRadar and other solutions. Updated: March 2025.
842,690 professionals have used our research since 2012.