Share your experience using SIEMStorm

We use Coralogix to analyze our log metrics. We were looking for an enhanced tool to help us secure our real-time data.

We have integrated Coralogix with Slack and other tools, which has helped us receive real-time alerts. We don't have to constantly monitor the tool because it generates alerts and pushes them to us, providing notifications on Slack. This enhancement has strengthened our security, fulfilling our need when searching for such a tool. 

Numerous data monitoring tools are available, but Coralogix somehow fine-tunes our policies and effectively supports our teams. This SaaS platform utilizes machine learning for behavioral analysis of logs, yielding the results we need. For instance, there was a scenario where we received extension logs that were difficult to interpret. However, we obtained the analysis with the help of the product.

Almost all the features we currently use in our product subscription are important to us. Regarding alerting or incident management, incident alert mapping, and suppression rules, we utilize almost all the features available on Coralogix. Additionally, we are sending all the logs, such as app logs, EPC flow logs, etcetera.

Nowadays, tools are often divided into modules. It would be helpful if Coralogix could integrate the main modules that any organization requires into a single subscription. It would streamline the process for organizations like ours.

Merging some of the modules into a single subscription would be beneficial. Nowadays, modules are often separated, so if an organization needs additional modules after subscribing to one, they may have to purchase another subscription. Combining the availability module with tracing metrics or other relevant modules would be beneficial.

I rate the platform's stability a nine out of ten.

I rate the platform's scalability an eight.

We did contact the technical support team when we encountered a deployment issue with Cloudflare. They assisted us promptly and provided helpful answers within the expected time frame.

Before adopting Coralogix, we relied on open-source solutions, but they needed to meet our needs effectively. It led us to explore and eventually invest in a commercial product.

The platform has a reasonable cost. I rate the pricing a three out of ten.

We also evaluated Palo Alto and other Palo Alto products as potential solutions. We opted for Coralogix over Palo Alto because its subscription plan offered better visibility and more features.

The alerting feature in Coralogix, integrated with Slack, has helped your team respond to incidents more quickly and effectively. We haven't experienced any incidents since implementation. Still, during the POC phase, the alerting feature proved to be prompt and reliable, assisting your team in promptly addressing potential issues.

It provides visualization tools that facilitate data analysis. These tools are available directly on the dashboard.

I recommend analyzing their organization's use case and scenario for new users. They should compare it with other tools to see if it suits their needs. If they find it suitable, then they should proceed with it. However, they should be prepared for the possibility that the tool may only suit some organizations. In our case, it worked well in pricing, scenario, and overall performance, so we opted to use it.


I rate it a nine out of ten.

We use AWS Security Hub to find vulnerabilities. We can check if an IAM user has multiple policies. We can check whether it is directly attached to the user and not attached to the group.

We take precautionary steps instead of responding to vulnerabilities. We haven’t faced any security breaches or vulnerabilities yet. We use GuardDuty. It provides us with information about IPs so that we can block them. We can restrict the IP from entering our network.

The solution shows us our compliance score. Based on the score, we can check what is preventing our compliance score from becoming 100%. The tool provides an explanation and steps for remediation. We can easily assign tasks to juniors. Even people without experience can understand the remedies.

The support must be quicker.

I have been using the solution for three to four years.

I rate the tool’s scalability an eight out of ten. We manage various customers. We use the Security Hub in every project. Some customers do not use AWS. They use Prisma. However, Prisma has similar features.

I raise support requests to the support team. If we raise tickets that impact services, we get quick support. If we raise a normal ticket that does not impact services, we do not get quick support.

Neutral

The initial setup is easy. Anyone can do it.

I have used Prisma and Qualys. They have the same approach as AWS. Instead of purchasing a third-party solution, we choose Security Hub. It is an in-built tool in AWS.

We are partners. I will recommend the tool to others. It is better to use an in-built tool like AWS Security Hub than using a third-party solution. It helps with compliance. Overall, I rate the solution a ten out of ten.