LogRhythm UEBA Reviews

Our primary use case is to identify the identities and anomalous user behavior and to enhance visibility. 

It should have better mitigation with other solutions and be tightly integrated with other solutions. It has to be improved. 

I have been using LogRhythm Enterprise UEBA for five years. 

The scalability is quite good. We don't have any issues with it. The only problem is that the agents consume too much memory and system resources. The memory and resource consumption is high. 

We have contacted technical support. On a scale from one to ten, I would rate them a six. They respond but it's time-consuming to contact support. We repeatedly call them and they don't respond. They're not as good as other support in the industry. 

It's straightforward. It takes a few days to find anomalies and abnormal behavior. In general, it's of medium level complexity. 

Licensing is on a yearly basis. It's not expensive compared to its competitors. 

We also evaluated CrowdStrike. 

I would rate it a seven out of ten. 

I would recommend this solution so long that LogRhythm does something about the memory and resource consumption. It has a lot of features. It has file integration monitoring but when it's applied it consumes too many resources. It's a big problem with the agents. 

They should improve the interface to make it a better rating. 

We are a solution provider and this is one of the products that we implement for our clients.

Customers in Sri Lanka generally purchase this product for network monitoring. 

Implementing this provides greater visibility into the network, as well as client activities.

This solution is really easy to configure.

The most valuable features are file activity monitoring and registry activity monitoring. Users like to have insight as to what is being modified while certain processes are running.

There is a large number of supported devices.

It would be helpful if there were more guidance provided for integrating with unsupported devices.

I have been working with this solution from LogRhythm for about three years.

We have had no bugs, glitches, or other problems with stability.

Scalability has not been an issue for us.

I have been in contact with technical support and they are really good. They have guided us when we've had problems with misconfiguration.

It took us about a month and a half to deploy this solution. The first month involved the setup and then there were two weeks of fine-tuning. In total, after six weeks we were able to bring up the system without any issues.

The deployment for our customers is usually on-premises, although there is a cloud version as well.

The pricing is nice when compared to other products in the industry.

Overall, this is a really good product and I recommend it.

I would rate this solution an eight out of ten.