Home
Security Information and Event Management (SIEM)

Best Security Information and Event Management (SIEM) Tools

Get Recommendations

What is SIEM? A Security Information and Event Management (SIEM) system gives security managers a holistic overview of multiple security systems.

To learn more, read our Security Information and Event Management (SIEM) Buyer's Guide (Updated: May 2023).

SIEM tools centrally store and analyze log from different locations in order to spot patterns and trends that might signal an emerging security threat or attack. SIEM security combines a security information management (SIM) system with security event management (SEM) to form a single SIEM software solution. In this way, SIEM blends the best of event management tools with security event and incident management technologies.

There are multiple SIEM vendors competing in the market today. PeerSpot members offer a number of recommendations for those considering SIEM solutions.

Keep in mind, while SIEM is used for detecting security threats and triggers the alerts, a SOAR solution is needed to act on these alerts.

One phrase that comes up repeatedly in PeerSpot dialogues about SIEM products is “real time.” According to reviewers, SIEM technology should possess real-time threat analysis and reporting capabilities. Solutions should offer real time security related logs and incident reporting. Reports need to specify possible risks and damage to infrastructure. A SIEM tool should ideally provide real time gathering of logs and Log Correlation. Notification event Triggering and the availability special Event Collectors with different environment is viewed as a most important criterion.

Some PeerSpot members stress the importance of SIEM being able to combine information from multiple sources. The solution has to be capable of intelligent queries on these combined sources. Put another way, SIEM must offer compatibility with diverse security data sources and be able to adapt to new or unknown sources. Then, the SIEM solution should perform multilevel correlation on those sources of data.

Efficient use is important. A SIEM tool must be easy to deploy, configure and use. SIEM can be more effective if it integrates with Identity and Access Management. Alerting and workflow integration adds to administrative efficiency.

Specific features recommended include packet analysis, audit trail creation, threat intelligence and search. Users encourage potential buyers to have confidence in the power of a SIEM solution’s search performance and the performance of its threat intelligence engine. The solution should be capable of parsing any log format.

Leaderboard for Security Information and Event Management (SIEM)

Check out the members with the highest scores who have reviewed Security Information and Event Management (SIEM).

#1. Olajide Olusegun

1815

Points

Network Team Lead at Atlas Security

Reviewed ArcSight Interset / Intelligence:

Security alert, log management and Syslog for a large environment with quite a number of…

#2. Prateek Agarwal

1755

Points

Technical Program Manager at a university

Reviewed Microsoft Sentinel:

Can monitor events on a real-time basis and has great visualization

#3. Jai Agarwal

1010

Points

IT Project Manager at Orange España

Reviewed Microsoft Sentinel:

Enables us to predict future threats with AI, machine learning, and automated security

#4. reviewer1581882

710

Points

Sr Manager - Information Security & Researcher at a tech services company

Reviewed Trellix Helix:

A cloud-hosted security operations platform that's easy to use

#5. Ryan Dave Brigino

685

Points

Software Engineer at Es'hailSat

Reviewed SolarWinds Security Event Manager :

It has all the features needed to satisfy our audit requirements

#6. reviewer2134215

680

Points

Consultant at a financial services firm

Reviewed ArcSight Enterprise Security Manager (ESM):

Flexible with easy integrations but needs a less complex query language

#7. Robert Cheruiyot

645

Points

IT Security Consultant at Microlan Kenya Limited

Reviewed Splunk Enterprise Security:

Efficient, scalable, robust and easy to use

585

Points

Deputy Manager at JTI (Japan Tobacco International)

Reviewed NetWitness Platform:

Really scalable for enterprise customers

#9. Gian Michele Roletto

560

Points

SOC Manager at Nais Srl

Reviewed IBM Security QRadar:

Feature - rich, well priced and has good support

#10. ParveshDhurmea

550

Points

Assistant Engineer at Harel Mallac Technologies Ltd

Reviewed Fortinet FortiSIEM:

Easy to use, user-friendly, and reliable

Provide a review

Earn +50 points

Share your expertise with the community and be seen as an expert.

Provide a review

Add a project

Earn +20 points

Had a successful project at work? Share it with the community.

Scoring Chart

Type	Points
Register	20
LinkedIn Connect	20
Add photo	15
Add bio	15
Add project	20
Write review	50
Review is liked	20
Add a comment	10
Write article	20
Ask question	10
Answer a question	10
Answer is liked	10