User Reviews of Elastic Security & LogRhythm SIEM

With Elastic Security, the challenge arises from the fact that there is a learning curve in relation to queries and understanding the query language provided to extract usable data. You have to understand what kind of queries to create quickly to get the information you need out of the system, as it ingests the information into a database,...

One of the main features that I like about LogRhythm SIEM is that there are a lot of pre-built pieces. Like with our AV, we didn't have to tell it how to read the logs; they already had it pre-made. So, we essentially just had to follow their guide to get the logs imported in and set up some rules for it. We've only had to manually create...