Home
Security Information and Event Management (SIEM)

Best Security Information and Event Management (SIEM) Tools

Get Recommendations

What is SIEM? A Security Information and Event Management (SIEM) system gives security managers a holistic overview of multiple security systems. SIEM tools centrally store and analyze log from different locations in order to spot patterns and trends that might signal an emerging security threat or attack. SIEM security combines a security information management (SIM) system with security event management (SEM) to form a single SIEM software solution. In this way, SIEM blends the best of event management tools with security event and incident management technologies.

There are multiple SIEM vendors competing in the market today. PeerSpot members offer a number of recommendations for those considering SIEM solutions.

Keep in mind, while SIEM is used for detecting security threats and triggers the alerts, a SOAR solution is needed to act on these alerts.

One phrase that comes up repeatedly in PeerSpot dialogues about SIEM products is “real time.” According to reviewers, SIEM technology should possess real-time threat analysis and reporting capabilities. Solutions should offer real time security related logs and incident reporting. Reports need to specify possible risks and damage to infrastructure. A SIEM tool should ideally provide real time gathering of logs and Log Correlation. Notification event Triggering and the availability special Event Collectors with different environment is viewed as a most important criterion.

Some PeerSpot members stress the importance of SIEM being able to combine information from multiple sources. The solution has to be capable of intelligent queries on these combined sources. Put another way, SIEM must offer compatibility with diverse security data sources and be able to adapt to new or unknown sources. Then, the SIEM solution should perform multilevel correlation on those sources of data.

Efficient use is important. A SIEM tool must be easy to deploy, configure and use. SIEM can be more effective if it integrates with Identity and Access Management. Alerting and workflow integration adds to administrative efficiency.

Specific features recommended include packet analysis, audit trail creation, threat intelligence and search. Users encourage potential buyers to have confidence in the power of a SIEM solution’s search performance and the performance of its threat intelligence engine. The solution should be capable of parsing any log format.

Leaderboard for Security Information and Event Management (SIEM)

Check out the members with the highest scores who have reviewed Security Information and Event Management (SIEM).

#1. Prateek Agarwal

1700

Points

Technical Program Manager at Indian Institute of Management Visakhapatnam

Reviewed Microsoft Sentinel:

Can monitor events on a real-time basis and has great visualization

#2. Ryan Dave Brigino

1155

Points

Software Engineer at Es'hailSat

Reviewed SolarWinds Security Event Manager :

It has all the features needed to satisfy our audit requirements

#3. Abbasi Poonawala

1145

Points

Chief Enterprise Architect at a financial services firm

Reviewed IBM QRadar:

It has good integrations, easy scalability, and strong technical support, but needs better pricing…

#4. reviewer1581882

1100

Points

Sr Manager - Information Security & Researcher at a tech services company

Reviewed FireEye Helix:

A cloud-hosted security operations platform that's easy to use

#5. reviewer1524594

750

Points

Senior Solutions Architect at a manufacturing company

Reviewed IBM QRadar:

A stable SIEM solution with centralized control and built-in AI/ML

#6. Jai Agarwal

710

Points

IT Project Manager at Orange España

Reviewed Microsoft Sentinel:

Enables us to predict future threats with AI, machine learning, and automated security

585

Points

Deputy Manager at JTI (Japan Tobacco International)

Reviewed NetWitness Platform:

Really scalable for enterprise customers

#8. ParveshDhurmea

570

Points

Assistant Engineer at Harel Mallac Technologies Ltd

Reviewed Fortinet FortiSIEM:

Easy to use, user-friendly, and reliable

#9. Kamal Abdelrahman

565

Points

Country Manager at Magarah

Reviewed IBM QRadar:

Stable, scalable, and helpful support

#10. Gian Michele Roletto

560

Points

SOC Manager at Nais Srl

Reviewed IBM QRadar:

Feature - rich, well priced and has good support

Provide a review

Earn +50 points

Share your expertise with the community and be seen as an expert.

Provide a review

Add a project

Earn +20 points

Had a successful project at work? Share it with the community.

Scoring Chart

Type	Points
Register	20
LinkedIn Connect	20
Add photo	15
Add bio	15
Add project	20
Write review	50
Review is liked	20
Add a comment	10
Write article	20
Ask question	10
Answer a question	10
Answer is liked	10