No more typing reviews! Try our Samantha, our new voice AI agent.
Sentinel Logo

Sentinel Reviews

Vendor: OpenText
3.8 out of 5
Leave a review

What is Sentinel?

Sentinel is a robust platform offering seamless native integration, enhanced security through transactional data, and a user-friendly interface reminiscent of Microsoft Windows. Its capabilities in threat detection, monitoring, and business intelligence integration make it an attractive choice for organizations.

Get the Sentinel Buyer's Guide and find out what your peers are saying about Sentinel, CrowdStrike Falcon, Splunk Enterprise Security and more!
Sentinel is the #16 ranked solution in top Security Information and Event Management (SIEM) solutions. PeerSpot users give Sentinel an average rating of 7.6 out of 10. Sentinel is most commonly compared to CrowdStrike Falcon: Sentinel vs CrowdStrike Falcon. Sentinel is popular among the large enterprise segment, accounting for 47% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 10% of all views.
Buyer's Guide
Sentinel
May 2026
Get the report
Helped 900,051 peers since 2012

Featured Sentinel reviews

Read more reviews

Sentinel mindshare

As of June 2026, the mindshare of Sentinel in the Security Information and Event Management (SIEM) category stands at 2.7%, down from 3.5% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Sentinel2.7%
Splunk Enterprise Security7.3%
IBM Security QRadar5.3%
Other84.7%
Security Information and Event Management (SIEM)

PeerResearch reports based on Sentinel reviews

TypeTitleDate
CategorySecurity Information and Event Management (SIEM)Jun 19, 2026Download
ProductReviews, tips, and advice from real usersJun 19, 2026Download
ComparisonSentinel vs Splunk Enterprise SecurityJun 19, 2026Download
ComparisonSentinel vs IBM Security QRadarJun 19, 2026Download
ComparisonSentinel vs WazuhJun 19, 2026Download
Suggested products
TitleRatingMindshareRecommending
CrowdStrike Falcon4.32.8%97%140 interviewsAdd to research
Splunk Enterprise Security4.27.3%94%399 interviewsAdd to research
 
 
Key learnings from peers
Last updated Jun 19, 2026

Valuable Features

Sentinel users value its Correlation Engine for policy rule generation, business intelligence for tracking activities, streamlined integration, and automation features. Its scalability, intuitive web interface, and threat visibility enhance security operations. Advanced querying supports tailored responses to threats. Anomaly dashboards facilitate zero-day attack identification, while email alerts improve monitoring efficiency. The user-friendly GUI and native integration promote ease of use. Sentinel ensures smooth connections, leveraging cloud-based capabilities to enhance threat detection.
  • "Sentinel has positively impacted my organization by improving monitoring significantly."
  • "Transactional user information improves security, prevents fraud, and promotes best practices."
  • "Sentinel is a tool that, if it's well configured, removes from view all unnecessary information and shows you only needful entries, so you can do your job faster, more conveniently, and with high performance."

Room for Improvement

Sentinel requires enhancements in its Correlation Engine, device support, and agent development flexibility. Users find the Java desktop app and WMI integration cumbersome, preferring full web-based management. Cloud connectivity needs expansion beyond Microsoft, Google, and Amazon. The platform's user interface and dashboards are criticized for lacking simplicity and flexibility. Extensive Unix scripting skills are needed, and documentation on security aspects is insufficient. Its integration with various cloud systems and customization options also demand improvement.
  • "This product's connection to certain types of cloud systems could be improved."
  • "Documentation for security aspects could be improved. It is difficult to find clear information about encryption or risks that are addressed."
  • "The dashboard and customer view should be improved."

ROI

Sentinel ensures ROI by monitoring user behavior to forestall malicious activities, reducing extra security expenses. Integration features contribute to financial benefits. Clients generally experience favorable financial outcomes, frequently within a lease timeframe, often under three years. Calculating financial gains from antivirus services remains challenging since potential losses, if absent, aren't quantifiable.

Pricing

Sentinel is described as a subscription-based solution with pricing perceived as moderate to expensive, most suitable for large organizations. Licensing offers flexibility, occasionally providing discounts for long-term partners. Sentinel typically requires a support contract with NetIQ for maintenance, with upgrades available annually. Pricing is aligned with competitors, yet challenges arise with currency exchange for some users. Additional packages, like Sentinel Rapid Deployment, cater to specific needs but entail separate costs.
  • "Sentinel is moderately priced."
  • "Sentinel is a subscription-based solution."
  • "Sentinel's slightly on the expensive side."

Popular Use Cases

Sentinel is used for log collection, filtering, and security management. Its primary use includes investigating suspicious activities, such as unauthorized access or unusual behaviors, by integrating with systems like Active Directory. Users appreciate its simple interface and its role in monitoring security events and managing alarms. It serves as a hub for IT and security teams and supports integration with other tools, offering enhanced threat detection capabilities and advanced query modifications.

Service and Support

Sentinel customer service is generally well-received, although there are mixed feelings about support. Some appreciate the human touch and knowledgeable engineers, while others face challenges in obtaining timely help. Support staff's ability varies, with backend support seen as more effective. High priority cases receive quick attention, but less urgent issues can take longer. Access to a dedicated engineer with a support contract is beneficial. Experiences suggest inconsistent service levels across inquiries.

Deployment

Sentinel's initial setup experience varied among users. Some found it complex due to network variables and custom integrations, especially with Azure architecture, while others described it as straightforward or easy, particularly those familiar with Linux. Duration for deployment ranged from minutes to a few months, depending on familiarity and complexity. Virtual appliances and guided processes facilitated setup for some, and team sizes for management varied. Proper guidance made basic integrations simpler with well-known devices.

Scalability

Many users report Sentinel as highly scalable, especially when cloud-based and integrated with Identity Manager or User Application Portal. It scales efficiently up to 24,000 events per second; beyond that level, additional technologies like Hadoop can enhance scalability. Some face challenges due to technical expertise or specific requirements, but scalability is often rated positively. Enterprise businesses benefit from it, especially for large-scale operations. Due to pricing dynamics, it's popular among diverse sectors.

Stability

Sentinel is noted for being stable and reliable, with several users highlighting its strong performance and minimal downtime. Some mention needing more RAM, particularly with Java issues, and concerns over network changes requiring restarts. There are occasional regional outages related to updates, but users find the system robust. Many rate its stability highly, citing support for high event volumes without facing significant issues. Despite a few network-related challenges, Sentinel maintains a positive reputation for stability.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Sentinel Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business8
Midsize Enterprise3
Large Enterprise5
By reviewers
By visitors reading reviews
Company SizeCount
Small Business133
Midsize Enterprise78
Large Enterprise190
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
10%
Manufacturing Company
8%
Computer Software Company
8%
Comms Service Provider
8%
Outsourcing Company
6%
Retailer
5%
Government
5%
Construction Company
5%
Healthcare Company
4%
University
4%
Performing Arts
4%
Media Company
3%
Educational Organization
3%
Insurance Company
3%
Wholesaler/Distributor
3%
Hospitality Company
2%
Energy/Utilities Company
2%
Real Estate/Law Firm
2%
Transportation Company
2%
Consumer Goods Company
2%
Marketing Services Firm
1%
Non Profit
1%
Recreational Facilities/Services Company
1%
Legal Firm
1%
Non Tech Company
1%

Compare Sentinel with alternative products

Go!

Learn more about Sentinel

Sentinel simplifies security management with its advanced features, including the Kusto Query Language and automation abilities that reduce the complexity of coding tasks. The platform's correlation engine allows for efficient rule generation, while its threat visibility and intelligence features offer preparation against risks. Advanced hunting queries, anomaly dashboards, and scalability options enhance its utility. Users appreciate its seamless connections with Microsoft tools and ability to improve threat detection through cloud and business intelligence integration. However, enhancements could improve documentation on security aspects, simplify dashboards, and optimize drag-and-drop features. There are suggestions for better device integration, a shift to web interfaces, and improved customization options, although some users face challenges with Unix scripting.

What are the most important features of Sentinel?
  • Native Integration: Offers seamless connections with Microsoft tools.
  • Enhanced Security: Utilizes transactional data for better protection.
  • User-Friendly Interface: Features a GUI similar to Microsoft Windows.
  • Automation Capabilities: Simplifies coding tasks with Kusto Query Language.
  • Advanced Threat Visibility: Strengthens risk preparation with intelligence features.
What benefits or ROI should users consider in reviews?
  • Improved Security Monitoring: Provides proactive threat detection.
  • Increased Efficiency: Offers automation, reducing manual efforts.
  • Scalability: Supports growth with adaptable features.
  • Integration Benefits: Ensures seamless connection with existing systems.

Sentinel finds application across sectors for logging, security event monitoring, and integration with tools like Microsoft Defender for Endpoint. Users from industries such as government and academic institutions leverage its advanced SQL query support for customized responses, enhancing security measures with AI capabilities in diverse environments.

Sentinel was previously known as NetIQ Sentinel, Novell SIEM.

Sentinel customers

Faysal Bank, GaVI, Handelsbanken, ISC Mªnster, Lambeth Council, Swisscard, The Municipality of Siena, Tukes, University of Dayton, University of the Sunshine Coast

Related questions

  • 219
What Solution for SIEM is Best To Be NIST 800-171 Compliant?
  • 219
When evaluating Security Information and Event Management (SIEM), what aspect do you think is the most important feature to look for?
  • 173
What are the main differences between Nessus and Arcsight?
  • 231
What's The Best Way to Trial SIEM Solutions?
  • 187
Which is the best SIEM solution for a government organization?
  • 496
What is the difference between IT event correlation and aggregation?
  • 175
What Is SIEM Used For?
  • 152
RSA-EMC vs. other SIEM products?
  • 251
What Questions Should I Ask Before Buying SIEM?
  • 194
What are the pros and cons of internal SOC vs SOC-as-a-Service?

Product Categories

Product Categories
Security Information and Event Management (SIEM)

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs Sentinel Logo
CrowdStrike Falcon vs Sentinel
Splunk Enterprise Security vs Sentinel Logo
Splunk Enterprise Security vs Sentinel
Wazuh vs Sentinel Logo
Wazuh vs Sentinel
IBM Security QRadar vs Sentinel Logo
IBM Security QRadar vs Sentinel
Microsoft Sentinel vs Sentinel Logo
Microsoft Sentinel vs Sentinel
Elastic Security vs Sentinel Logo
Elastic Security vs Sentinel
LogRhythm SIEM vs Sentinel Logo
LogRhythm SIEM vs Sentinel
Rapid7 InsightIDR vs Sentinel Logo
Rapid7 InsightIDR vs Sentinel
Cortex XSIAM vs Sentinel Logo
Cortex XSIAM vs Sentinel
Anomali vs Sentinel Logo
Anomali vs Sentinel
Fortinet FortiSIEM vs Sentinel Logo
Fortinet FortiSIEM vs Sentinel
Coralogix vs Sentinel Logo
Coralogix vs Sentinel
Exabeam vs Sentinel Logo
Exabeam vs Sentinel
USM Anywhere vs Sentinel Logo
USM Anywhere vs Sentinel
Stellar Cyber Open XDR vs Sentinel Logo
Stellar Cyber Open XDR vs Sentinel
See all alternatives
 
Sentinel Reviews Summary
Author infoRatingReview Summary
Manager, Customer Success at Coltek Business Soltuions3.5I've used Sentinel for five to six years as our go-to antivirus. It's simple to use, stable, and integrates well. Pricing could improve, but overall it's reliable and scalable, earning it a solid seven out of ten.
Senior Specialist at a tech vendor with 10,001+ employees4.5As a SIEM SME, I find Sentinel excellent for monitoring, valuing its KQL, filtering, and pay-as-you-go log ingestion, which reduced false positives. It's stable, scalable, with great support, making it a strong choice.
Technology Specialist at a government with 51-200 employees4.5I deployed Sentinel for a government department to collect and analyze logs, enhancing security operations. The threat intelligence and alert setup were valuable, but improvements in reporting and dashboard analytics would be beneficial. We used Microsoft Azure for deployment.
Security Engineer at a financial services firm with 10,001+ employees4.0In our SOC operations, Sentinel offers comprehensive threat detection when used with Microsoft Defender, allowing advanced hunting and tailored SQL queries. It faces integration issues with certain devices and experiences regional outages, but outperforms previous solutions like RSA and ArcSight.
Service Provider at a comms service provider with 10,001+ employees4.5We use Sentinel to efficiently manage security events, enjoying its smart analysis and seamless Microsoft integration, though more customization and mixed deployment options would help. Clients experience ROI within three years, but flexibility and hosting options need improvement.
Principal Solution Architect at a comms service provider with 51-200 employees4.0I use Sentinel to monitor integration processes, finding it simple yet outdated and not user-friendly. Despite its age, the product offers ROI through integration capabilities, though improvements are needed for better usability in complex environments.
Senior Specialist: Solution Architecture at a tech services company with 501-1,000 employees4.0I find its native integration and user behavior tracking valuable for security and fraud prevention. It's stable and scalable. However, I desire better security documentation, outsourced authorization, and a unified user interface.
Compliancy, Security & Identity consultant at TMD informatisering BV4.5I find NetIQ Sentinel very valuable for its business intelligence engine and broad connectivity to logging systems. It's reliable and easy to set up. However, I think its integration with diverse cloud systems needs improvement.