Try our new research platform with insights from 80,000+ expert users
NetMon Logo

NetMon Reviews

Vendor: Exabeam
3.8 out of 5
Leave a review

What is NetMon?

NetMon offers significant capabilities in log aggregation, traffic analysis, and real-time network insights. Its ease of use accommodates both entry-level and advanced functionalities, enhancing network visibility and threat detection.

Get the NetMon Buyer's Guide and find out what your peers are saying about NetMon, Zabbix, SolarWinds NPM and more!
NetMon is the #16 ranked solution in top Identity Threat Detection and Response (ITDR) solutions and #53 ranked solution in best Network Monitoring Tools. PeerSpot users give NetMon an average rating of 7.6 out of 10. NetMon is most commonly compared to Zabbix: NetMon vs Zabbix. NetMon is popular among the small business segment, accounting for 44% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a performing arts, accounting for 21% of all views.
Buyer's Guide
NetMon
September 2025
Get the report
Helped 869,952 peers since 2012

Featured NetMon reviews

Read more reviews

NetMon mindshare

As of October 2025, the mindshare of NetMon in the Network Monitoring Software category stands at 0.4%, up from 0.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Network Monitoring Software Market Share Distribution
ProductMarket Share (%)
NetMon0.4%
Zabbix11.4%
SolarWinds NPM4.4%
Other83.8%
Network Monitoring Software

PeerResearch reports based on NetMon reviews

TypeTitleDate
CategoryNetwork Monitoring SoftwareOct 16, 2025Download
ProductReviews, tips, and advice from real usersOct 16, 2025Download
ComparisonNetMon vs ZabbixOct 16, 2025Download
ComparisonNetMon vs Auvik Network Management (ANM)Oct 16, 2025Download
ComparisonNetMon vs SolarWinds NPMOct 16, 2025Download
Suggested products
TitleRatingMindshareRecommending
Zabbix4.211.4%95%107 interviewsAdd to research
SolarWinds NPM4.14.4%92%159 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

NetMon's key features include log aggregation, ease of use, comprehensive analytics, and network visibility offering insight into lateral traffic. Traffic analysis supports bandwidth monitoring and real-time data assessment. Customizable dashboards and a strong correlation engine are appreciated for threat detection. AI-based analytics assist in predicting attacks. Integration simplicity is valuable for holistic security management. Users value the bundled package for extended data visibility and deep packet analysis aiding in attack resolution.
  • "The initial setup is straightforward because we can deploy an open server."
  • "LogRhythm NetMon's most impressive feature is that it's a bundled package, so you're not just relying on monthly data; you get a six-month view for more comprehensive indicators of compromise. This dual approach is precious. We implement LogRhythm NetMon in our cybersecurity strategy mainly for compliance and correlation of network, user, and decision activities, particularly for network firewalls and access control."
  • "It has a very strong artificial intelligence engine."

Room for Improvement

NetMon needs better integration with multiple products and improved customization for analytics. Users experience difficulties with training and documentation. They face console lag and connectivity issues which can affect performance. The pricing model is a concern compared to competitors. Customers desire more integrated features within a single platform instead of separate products. The agent-based approach limits integration capabilities and there is a need for seamless integration with existing network equipment through protocols like Gflow and Netflow.
  • "The platform's integration features often need to be improved."
  • "The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for easier management."
  • "Some of the automated tasks we can perform on QRadar cannot be performed on LogRhythm because the solution has limitations."

Pricing

NetMon's pricing is considered mid-range compared to its competitors, offering a strong cost-to-performance ratio with excellent visibility and threat detection capabilities through its advanced analytics and SOAR features. The annual licensing fee is approximately $85k, with additional costs for support. Licensing options include perpetual and subscription models. Deployment may require extra professional services, adding to costs. Some users find pricing high, particularly for smaller companies.
  • "The product is expensive for smaller companies."
  • "I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships."
  • "LogRhythm's licensing part is something that depends on the license you want since they offer it on a perpetual and subscription basis."

Popular Use Cases

Organizations primarily use NetMon for monitoring irregular network traffic, identifying traffic types, origins, and destinations. It assists with network security, performance, traffic analysis, flow, and password checks. NetMon captures network packets, enables users to monitor traffic flow, and measure data downloads. It supports network behavior analysis, forensics, and real-time analytics. Extensions include DPA, forensic services, and integration with LogRhythm SIEM for a comprehensive security overview. Deployments span private clouds and data centers, supporting multiple users and clients.

Service and Support

NetMon's customer service and support receive mixed feedback. Some users highlight quick and effective responses, like same-day or next-day resolutions. They appreciate the availability, community resources, and readiness to handle queries, even praising it as ten out of ten. However, others report delays, describing support as sometimes unresponsive, with some waiting a day or more for assistance. Despite varying experiences with response times, many agree the technical expertise and issue resolution are commendable.

Deployment

Setting up NetMon varies from complex to straightforward depending on prior experience and team involvement. Some describe it as overwhelming without SIEM knowledge, requiring guidance and several staff. For others, the process is simple, taking as little as half a day or up to a month, especially with experienced engineers. Deployment typically involves setting up servers and integrating systems, with complexities arising mainly from user familiarity and available support.

Scalability

Users find NetMon's scalability impressive with easy addition of collectors and minimal re-architecture. While some indicate scalability depends on initial sizing, others note its capability to support multiple companies and users efficiently. However, advanced monitoring or larger network expansions may lack flexibility. Users appreciate the appliance's simplified scaling across various data sources and log sources, but smaller teams may require more time to explore and leverage its extensive functionalities.

Stability

After upgrading, NetMon's stability improved significantly. Users note fewer issues and rate stability highly. It operates smoothly with ELK-based architecture. Reports mention quick searches and no performance degradation. Although some encountered platform-related challenges, many experienced no collector outages or console inaccessibility. Stability is significantly better post-upgrade to version 7.25, with features like data processing and indexing enhancing the experience. PCAP data collection runs efficiently across various environments. NetMon consistently delivers reliable performance.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our NetMon Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise4
By reviewers
By visitors reading reviews
Company SizeCount
Small Business22
Midsize Enterprise8
Large Enterprise20
By visitors reading reviews

Top industries

By visitors reading reviews
Performing Arts
21%
Financial Services Firm
19%
Insurance Company
11%
Government
8%
Manufacturing Company
4%
Energy/Utilities Company
4%
Wholesaler/Distributor
4%
Real Estate/Law Firm
4%
Computer Software Company
4%
Transportation Company
4%
Outsourcing Company
2%
Construction Company
2%
Healthcare Company
2%
Educational Organization
2%
Logistics Company
2%
Comms Service Provider
2%
Pharma/Biotech Company
2%
Recreational Facilities/Services Company
2%
Leisure / Travel Company
2%
University
2%

Compare NetMon with alternative products

Go!

Learn more about NetMon

NetMon provides seamless analytics with its real-time dashboards and advanced AI integration. The platform is designed for comprehensive monitoring and detailed analysis, making it indispensable for identifying network traffic, origins, destinations, and facilitating threat detection through lateral traffic visibility. Despite its powerful analytics and customization features, improvements in product integration, customer support, and pricing could increase its competitive edge. Connectivity, topology visualization, and server performance are areas noted for enhancement. Integration with protocols like Gflow and Netflow might alleviate agent-based restriction challenges. NetMon sends correlated data to LogRhythm SIEM for enhanced threat analysis and is used for tasks like traffic analysis and DPA.

What are NetMon's key features?
  • Log Aggregation: Seamless collection of diverse network logs for analysis.
  • Traffic Analysis: Detailed inspection of network traffic for identifying irregular patterns.
  • AI Integration: Advanced analytics powered by robust AI capabilities.
  • Customizable Dashboards: Real-time insights tailored to user requirements.
  • Correlation Engine: In-depth correlation of network activity for comprehensive reports.
  • Deep Packet Analytics: Thorough examination of data packets for granular insights.
What benefits and ROI can users expect?
  • Enhanced Threat Detection: Significant improvements in identifying lateral threats.
  • Comprehensive Insights: Complete visibility into network and user activities.
  • Efficient Monitoring: Real-time analytics streamline network monitoring processes.
  • Compliance Support: Strong integration supports adherence to compliance standards.

NetMon is widely adopted in industries requiring detailed traffic monitoring and security, such as finance and healthcare. Its capabilities in traffic type identification and correlated analysis make it essential for environments where detecting irregular patterns is critical. It's utilized for network security through comprehensive analysis and integration with SIEM systems.

NetMon was previously known as LogRhythm Network Monitor .

NetMon customers

Sera-Brynn

Related questions

  • 61
When evaluating Network Performance Monitoring, what aspect do you think is the most important to look for?
  • 143
What is the best network monitoring software for large enterprises?
  • 85
What Questions Should I Ask Before Buying a Network Monitoring Tool?
  • 15
UIM OnPrem - SaaS
  • 41
Anyone switching from SolarWinds NPM? What is a good alternative and why?
  • 26
What is the best tool for SQL monitoring in a large enterprise?
  • 88
What tool do you recommend using for VoIP monitoring for a mid-sized enterprise?
  • 19
Should we choose Nagios or PRTG?
  • 51
Which is the best network monitoring tool: Zabbix or Solarwinds? Pros and Cons?
  • 49
What software solution would you recommend to monitor user machines?

Product Categories

Product Categories
Network Monitoring Software
Identity Threat Detection and Response (ITDR)

Popular Comparisons

Popular Comparisons
Zabbix vs NetMon Logo
Zabbix vs NetMon
SolarWinds NPM vs NetMon Logo
SolarWinds NPM vs NetMon
PRTG Network Monitor vs NetMon Logo
PRTG Network Monitor vs NetMon
SCOM vs NetMon Logo
SCOM vs NetMon
Plixer Scrutinizer vs NetMon Logo
Plixer Scrutinizer vs NetMon
NETSCOUT vSTREAM vs NetMon Logo
NETSCOUT vSTREAM vs NetMon
Niagara Visibility Controller vs NetMon Logo
Niagara Visibility Controller vs NetMon
Opmantek NMIS vs NetMon Logo
Opmantek NMIS vs NetMon
Ixia CloudLens vs NetMon Logo
Ixia CloudLens vs NetMon
ObserverLIVE vs NetMon Logo
ObserverLIVE vs NetMon
See all alternatives
 
NetMon Reviews Summary
Author infoRatingReview Summary
Product manager at Tata Communications Ltd4.0I use LogRhythm NetMon for network forensic services and real-time analytics with machine learning and AI. It offers valuable integration features but could improve by lowering its pricing model compared to competitors like IBM QRadar, Dynatrace, and Darktrace.
Information Security Analyst at Detecon Al Saudia Company Limited3.5We use LogRhythm NetMon for cloud-based fax services, benefiting from its comprehensive threat detection features and deep packet analytics. While cost-effective, integration and feature enhancements are needed for better management. A unified solution with improved capabilities would be preferable.
Co-Founder & Managing Director at Halainfosec4.0I find LogRhythm NetMon to have strong AI and a robust correlation engine, improving log processing. However, it struggles with third-party integration and lacks some SOAR capabilities compared to QRadar. Despite upgrade options, inherent limitations persist.
Senior project engineer at a tech vendor with 10,001+ employees4.0We monitor IP addresses and traffic like HTTPS and DNS with LogRhythm NetMon, valuing its customizable dashboards and protocol monitoring. However, we notice connectivity lags, possibly due to VPN hops, which affect console performance and access.
Manager at Meghna Bank4.0No summary available
Software management at Midland Bank3.5No summary available
Product Technical Manager at a tech company with 1-10 employees4.0No summary available
Data Security Architect at a comms service provider with 1,001-5,000 employees3.5No summary available