LogRhythm UEBA [EOL] Reviews

Name: LogRhythm UEBA [EOL]
Brand: Exabeam
Rating: 3.5 (11 reviews)

3.5 out of 5

11 reviews
55% willing to recommend

What is LogRhythm UEBA [EOL]?

LogRhythm UEBA [EOL] offers advanced threat detection with an intuitive interface, utilizing correlation, behavior analysis, and machine learning to monitor server threats and privileged accounts effectively.

Get the User Entity Behavior Analytics (UEBA) Buyer's Guide and find out what your peers are saying about LogRhythm UEBA [EOL], CrowdStrike Falcon, Wazuh and more!

Buyer's Guide

User Entity Behavior Analytics (UEBA)

July 2025

Get the category report

Helped 864,155 peers since 2012

Featured LogRhythm UEBA [EOL] reviews

Sheikh Abu Ayub Azad

CEO at Trustaira

The initial setup is easy, partly because LogRhythm is primarily based on the Windows platform. It's good to have two engineers for deployment but it can be done with one. It's more about the knowledge. Deployment is typically done in two or three different phases. It usually takes up to three full months to get good deployment. There's the initial onboarding of all the log sources, then collecting data in the data lake, followed a couple of weeks later with some minor tuning before the final tuneup.

Read full review

HananSyed

Cyber Security Consultant at Mideast Data Systems

I would rate it a seven out of ten. I would recommend this solution so long that LogRhythm does something about the memory and resource consumption. It has a lot of features. It has file integration monitoring but when it's applied it consumes too many resources. It's a big problem with the agents. They should improve the interface to make it a better rating.

Read full review

Hanan Syed

Senior Cyber Cons at MDS

In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the use cases LogRhythm has. It does not have a very large use case library, so the content engineer needs to develop use cases rapidly alongside emerging threats.

Read full review

Valuable Features

LogRhythm UEBA's features include an intuitive graphical user interface, customizable dashboard, and comprehensive reporting. Users value its machine learning capabilities for identifying behavioral anomalies and pinpointing cyber incidents. It efficiently monitors file and registry activities, server threats, and privileged accounts. Easy configuration and extensive device support enhance usability. The tool's ability to automatically detect and analyze end-user behaviors and suspicious activities is appreciated.

"I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools."
"I can investigate attacks more quickly using machine learning tools."
"The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location."

Room for Improvement

LogRhythm UEBA's dashboarding needs enhancement, offering only a snapshot instead of a real-time view. The search and filtering features require improvements along with tighter integration with other solutions. Guidance for unsupported devices and documentation for open-source users should be expanded. Users desire better automation, pricing, user-friendliness, data aggregation, and machine learning. The use case library and risk quantification need enhancement, along with integration functionality, especially with cloud logs.

"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."
"In general, if something needs to be improved in the algorithm, it would be the dashboards."
"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."

Pricing

Enterprise users experienced varied perceptions of LogRhythm UEBA [EOL] pricing. Some noted it as expensive, particularly compared to IBM QRadar, with additional deployment and migration costs. Others found it competitively priced against similar industry products, offering flexible subscription options with technical support. Its affordability appeals to some small and medium businesses, but professional services for deployment increase costs. Overall, sentiments on pricing ranged from budget-friendly to costly, depending on individual business contexts.

"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."
"LogRhythm UEBA's pricing is affordable for small and medium businesses."
"It is quite a budget-friendly product."

Popular Use Cases

Entities primarily use LogRhythm UEBA [EOL] for identifying identities and anomalous user behavior, enhancing visibility, and network monitoring. It's implemented for user monitoring, analysis, and logging events. Security programs utilize it for threat hunting, user behavior, and analytics, providing constant monitoring. Companies apply machine learning tools for reducing cyber risk and investigating attacks. Customers deploy it to secure infrastructure using user logs, depending on their requirements.

Service and Support

LogRhythm UEBA [EOL] customer service and support receive mixed feedback. Users appreciate their responsiveness and guidance with misconfiguration issues, yet highlight challenges in reaching the right team promptly. While some find their technical support satisfactory, others note delays in response and resolution times. The ability to contact support is time-consuming, leading to ratings between six and seven out of ten. The need for quicker and more efficient support persists in comparison to industry standards.

Deployment

LogRhythm UEBA [EOL]'s initial setup varies in complexity. Some users describe it as straightforward, needing minimal adjustments, while others find it more involved and requiring phased implementation. Many note it benefits from multiple engineers for deployment. The process, taking up to three months, includes onboarding log sources and data collection, followed by tuning. Challenges arise, particularly with agent issues, which can complicate post-deployment tasks.

Scalability

LogRhythm UEBA [EOL] offers good scalability and adapts to requirements, whether in log collection, processing, or correlation. Some users note excessive memory and resource consumption by agents. Organizations find it easy to add servers and scale up, but on-premises versions lack flexibility and result in increased costs, pushing a shift to cloud options. Users have shared mixed ratings, with some giving high scores for scalability, while others point to cost concerns in the cloud environment.

Stability

Stability opinions on LogRhythm UEBA [EOL] vary. Some consider it very stable and without issues if deployed correctly, while others find it only moderately stable. Several users encounter no problems, rating its stability between seven and seven point five out of ten, whereas some experience agents stopping troubleshooting automatically. Stability is satisfactory for many, though concerns about automatic troubleshooting persist among certain users.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our User Entity Behavior Analytics (UEBA) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

10%

Retailer

Manufacturing Company

Comms Service Provider

Government

University

Healthcare Company

Construction Company

Real Estate/Law Firm

Educational Organization

Legal Firm

Hospitality Company

Insurance Company

Pharma/Biotech Company

Outsourcing Company

Wholesaler/Distributor

Energy/Utilities Company

Media Company

Performing Arts

Consumer Goods Company

Marketing Services Firm

Logistics Company

Transportation Company

Aerospace/Defense Firm

Compare LogRhythm UEBA [EOL] with alternative products

Learn more about LogRhythm UEBA [EOL]

LogRhythm UEBA [EOL] provides comprehensive user behavior analytics and threat hunting capabilities, making use of customizable dashboards, reporting tools, file and registry monitoring. CloudAI adds depth by identifying unknown activities, enhancing network visibility and cyber risk reduction through constant monitoring. Users in Sri Lanka find it valuable for network stability, while other users leverage it for improved user monitoring and quick attack investigation. Despite its strong features, enhancements in integration, pricing in Asia, and documentation could improve its adoption.

What are the key features of LogRhythm UEBA [EOL]?

Intuitive Graphical Interface: Provides a user-friendly experience tailored to cybersecurity needs.
Customizable Dashboards: Offers personalized monitoring views and reporting capabilities.
Effective Reporting Tools: Enhances incident analysis and decision-making with detailed insights.
Machine Learning: Identifies patterns in user behavior, detecting anomalies efficiently.
CloudAI: Detects unknown activities, improving threat identification accuracy.

What benefits can users expect from LogRhythm UEBA [EOL]?

Enhanced Threat Detection: Increases network safety through comprehensive monitoring.
Improved Network Visibility: Facilitates better management of cybersecurity resources.
Quick Attack Investigation: Reduces time to detect and respond to threats.
Cyber Risk Reduction: Employs machine learning to address potential security gaps proactively.

In the financial sector, LogRhythm UEBA [EOL] is implemented to monitor privileged accounts and identify suspicious transactions swiftly. Healthcare organizations use it to safeguard sensitive patient data through behavior analysis. Manufacturing firms apply it to protect intellectual property and ensure compliance with industry regulations. Across these industries, the adaptability and analytics of LogRhythm UEBA [EOL] offer a strategic approach to cybersecurity management.

LogRhythm UEBA [EOL] was previously known as LogRhythm UserXDR, LogRhythm Enterprise UEBA.