Try our new research platform with insights from 80,000+ expert users

LogRhythm SIEM pros and cons

Vendor: LogRhythm

4.2 out of 5

173 reviews
89% willing to recommend

6,494 followers

Pros & Cons summary

LogRhythm SIEM offers robust compliance reporting and advanced threat detection, providing actionable intelligence through effective log correlation. It features automation for improved response times and supports API integration for enhanced efficiency. The system includes AI engine modules to reduce false positives. However, the documentation is inadequate, stability during upgrades is a concern, and the cloud model is underdeveloped, complicating initial setup and diminishing technical support quality.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

LogRhythm SIEM offers built-in compliance reporting and reports for external audits.

LogRhythm SIEM demonstrates strong log correlation across multiple sources, providing actionable intelligence.

LogRhythm SIEM enhances efficiency through automation and centralized monitoring workflows.

LogRhythm SIEM allows seamless integration with other security solutions via APIs.

LogRhythm SIEM provides comprehensive threat management with advanced analytics and machine learning capabilities.

CONS

LogRhythm SIEM faces issues with parsing, making it challenging for users to easily adjust parsers for both standard and non-standard log sources.

The system struggles with stability, especially during upgrades, leading to functionality issues and requiring professional services for troubleshooting.

LogRhythm SIEM's integration capabilities need enhancement, particularly with cloud and SAS applications, and the move to a Linux platform is suggested for better performance.

The current API development is slow, leaving users unable to fully utilize cloud resources, resulting in monitoring challenges.

Documentation is a significant concern, as users find it difficult to locate and utilize the information necessary for effective deployment and usage.

LogRhythm SIEM Pros review quotes

Senior Security Engineer at Augeo Marketing

Oct 17, 2017

Provides visibility into the network.

Read full review

reviewer1992084

Senior Security Analyst at a transportation company with 501-1,000 employees

Oct 16, 2022

The dashboards in the LogRhythm SIEM really help us as a starting point. It gives us a starting point we can go to every day. We walk through several dashboards to see anomalous activity for further investigation.

Read full review

System Administrator at GOLDENWEST FEDERAL CREDIT UNION

Oct 18, 2022

One of the main features that I like about LogRhythm NextGen SIEM is that there are a lot of pre-built pieces. Like with our AV, we didn't have to tell it how to read the logs; they already had it pre-made. So, we essentially just had to follow their guide to get the logs imported in and set up some rules for it. We've only had to manually create the parsing rules for a few of our vendors so that we could interpret the logs correctly. Most of them had already been pre-created for us.

Read full review

Free Report: LogRhythm SIEM Reviews and More

Learn what your peers think about LogRhythm SIEM. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.

839,422 professionals have used our research since 2012.

JM

Principal Security Analyst at a healthcare company with 501-1,000 employees

Oct 28, 2018

We take in around 750 million logs a day. We have a lot of products and that would be a lot of different panes of glass that we would have to look through otherwise. By centralizing, we can triage and take steps much more quickly than if we tried to man that many interfaces that come with the products.

Read full review

AS

Avraham Sonenthal

Senior Network Engineer at a government with 5,001-10,000 employees

May 9, 2019

The feature that makes it usable is the web interface.

Read full review

Security Analyst at Xanterra

Oct 17, 2017

The PCI compliance pieces that help us produce reports for our external auditor, and their support.

Read full review

KM

Global Security Manager at Chart Industries Inc

Oct 17, 2017

The ability for me to go into the Web UI, and just learn what's going on in my environment.

Read full review

Administrator Executive at a individual & family service with 10,001+ employees

Oct 17, 2017

It gives us insight into our entire installation, where we are multiple sites, going as far as the East Coast to the Central West Coast.

Read full review

Information Security Officer at a insurance company with 201-500 employees

Nov 8, 2017

LogRhythm has shown to us, to this point in time, that it has the capabilities of being able to deliver actionable intelligence to the security engineers and analysts.

Read full review

Data Sec Program Manager at a insurance company

Nov 8, 2017

The most valuable feature of LogRhythm for me is the ability to correlate logs throughout many different log sources.

Read full review

Show 10 more reviews (out of 81)

LogRhythm SIEM Cons review quotes

Senior Security Engineer at Augeo Marketing

Oct 17, 2017

I would probably look for more things to go into the web console that is currently on the fat client.

Read full review

reviewer1992084

Senior Security Analyst at a transportation company with 501-1,000 employees

Oct 16, 2022

We use Windows Event Forwarding to collect the logs from our Windows clients, and the logs get aggregated as one data source on that collector. Therefore, finding logs specific to one particular Windows system requires some creativity in how we search the SIEM.

Read full review

JB

SIEM Architect at Marsh & McLennan Companies, Inc.

Oct 28, 2018

My biggest issue - I know that they say they're doing it - is that the API-building is extremely important. They keep saying it's coming, it's coming. It's not coming fast enough. I don't care if they need to double their team size to get it out there quicker, the world is already in the cloud and we can't monitor it. That's a big problem for us. My boss keeps coming to me about it. That's an issue.

Read full review

Free Report: LogRhythm SIEM Reviews and More

Learn what your peers think about LogRhythm SIEM. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.

839,422 professionals have used our research since 2012.

System Administrator at GOLDENWEST FEDERAL CREDIT UNION

Oct 18, 2022

When we originally got LogRhythm, their tech support was fantastic, and I loved them. Now, we don't quite get as quick of a response. I've been disappointed in the more recent tech support. When you call in, they'll say that they will get you somebody, and you'll finally get someone who will contact you back a day or so later. Whereas before, I would get help right away.

Read full review

JM

Principal Security Analyst at a healthcare company with 501-1,000 employees

Oct 28, 2018

I have Windows administrators who will remove the agent when they think that that's what's fouling up their upgrade or their install or their reconfiguration, etc. The first thing they do is to turn off the antivirus, turn down the firewall, and take off anything else. They don't realize that the LogRhythm agent is just sitting there monitoring. Most antivirus products have application protection features built-in where, if I'm an admin on a box, I can't uninstall antivirus. I need to have to the antivirus admin password to do that.

Read full review

AS

Avraham Sonenthal

Senior Network Engineer at a government with 5,001-10,000 employees

May 9, 2019

It is a product that is very hard to use.

Read full review

Security Analyst at Xanterra

Oct 17, 2017

I would really like to see some type of group or global management for RIM policies,

Read full review

KM

Global Security Manager at Chart Industries Inc

Oct 17, 2017

I have probably submitted half a dozen log parser requests, and I keep finding more stuff that we need to keep an eye on that doesn't have a definition in LogRhythm.

Read full review

Administrator Executive at a individual & family service with 10,001+ employees

Oct 17, 2017

I would really love to be able to take some of the data and not have to export it to a CSV file, so I can pull it into Excel to turn it into some other kind of graph.

Read full review

Information Security Officer at a insurance company with 201-500 employees

Nov 8, 2017

Right now there is the concern about being able to gather all of the data into the system.

Read full review

Show 10 more reviews (out of 81)

Product Categories

Product Categories

Security Information and Event Management (SIEM)

Popular Comparisons

Popular Comparisons

CrowdStrike Falcon vs LogRhythm SIEM

Wazuh vs LogRhythm SIEM

Microsoft Sentinel vs LogRhythm SIEM

Splunk Enterprise Security vs LogRhythm SIEM

IBM Security QRadar vs LogRhythm SIEM

Elastic Security vs LogRhythm SIEM

Rapid7 InsightIDR vs LogRhythm SIEM

Sumo Logic Security vs LogRhythm SIEM

Fortinet FortiSIEM vs LogRhythm SIEM

AlienVault OSSIM vs LogRhythm SIEM

Securonix Next-Gen SIEM vs LogRhythm SIEM

Google Chronicle Suite vs LogRhythm SIEM

Exabeam vs LogRhythm SIEM

ManageEngine Log360 vs LogRhythm SIEM

USM Anywhere vs LogRhythm SIEM

See all alternatives

Product Categories

Product Categories

Security Information and Event Management (SIEM)

Popular Comparisons

Popular Comparisons

CrowdStrike Falcon vs LogRhythm SIEM

Wazuh vs LogRhythm SIEM

Microsoft Sentinel vs LogRhythm SIEM

Splunk Enterprise Security vs LogRhythm SIEM

IBM Security QRadar vs LogRhythm SIEM

Elastic Security vs LogRhythm SIEM

Rapid7 InsightIDR vs LogRhythm SIEM

Sumo Logic Security vs LogRhythm SIEM

Fortinet FortiSIEM vs LogRhythm SIEM

AlienVault OSSIM vs LogRhythm SIEM

Securonix Next-Gen SIEM vs LogRhythm SIEM

Google Chronicle Suite vs LogRhythm SIEM

Exabeam vs LogRhythm SIEM

ManageEngine Log360 vs LogRhythm SIEM

USM Anywhere vs LogRhythm SIEM

See all alternatives

Related questions

12

Between AlienVault and LogRhythm, which solution is suitable for Banks in Gulf Region

27

IBM QRadar is rated above competitors (McAfee, Splunk, LogRhythm) in Gartner's 2020 Magic Quandrant. Agree/Disagree?

1

Does LogRhythm NextGen SIEM offer good security?

333

What Solution for SIEM is Best To Be NIST 800-171 Compliant?

79

When evaluating Security Information and Event Management (SIEM), what aspect do you think is the most important feature to look for?

166

What are the main differences between Nessus and Arcsight?

4

What's The Best Way to Trial SIEM Solutions?

254

Which is the best SIEM solution for a government organization?

1,376

What is the difference between IT event correlation and aggregation?

238

What Is SIEM Used For?