When TriGeo was acquired by SolarWinds, TriGeo SIM became known as SolarWinds Log & Event Manager. This product is a leading Security Information and Event Management (SIEM) product and log management solution, which provides log collection, analysis, and real-time correlation.
| Product | Market Share (%) |
|---|---|
| SolarWinds Security Event Manager | 0.8% |
| Wazuh | 8.3% |
| Splunk Enterprise Security | 8.0% |
| Other | 82.9% |
| Type | Title | Date | |
|---|---|---|---|
| Category | Security Information and Event Management (SIEM) | Dec 29, 2025 | Download |
| Product | Reviews, tips, and advice from real users | Dec 29, 2025 | Download |
| Comparison | SolarWinds Security Event Manager vs Splunk Enterprise Security | Dec 29, 2025 | Download |
| Comparison | SolarWinds Security Event Manager vs Wazuh | Dec 29, 2025 | Download |
| Comparison | SolarWinds Security Event Manager vs Microsoft Sentinel | Dec 29, 2025 | Download |
| Title | Rating | Mindshare | Recommending | |
|---|---|---|---|---|
| Wazuh | 3.7 | 8.3% | 81% | 50 interviewsAdd to research |
| Splunk Enterprise Security | 4.2 | 8.0% | 94% | 374 interviewsAdd to research |
The most valuable features of SolarWinds Security Event Manager are its ability to search for past events, effectiveness in server, network, and log monitoring, IP address management, straightforward setup and scalability, File Integrity Monitoring, and customizable reports and alerts.
The product also offers compliance and security maintenance, log analysis capabilities, support for high availability, timely alerts, incidence analysis and knowledge, and valuable notification rules.
The product is stable and comprehensive.
Improvements that can be made to SolarWinds Security Event Manager include enhancing the ease of creating event alerts, addressing the high cost of the solution, providing more customization capabilities for posting events on devices, improving scalability for deployment across multiple environments, and simplifying the technical aspects of the program.
Users point out the solution needs improvements around enhancing correlation capabilities for faster event detection and improving integration with the IT framework for automation purposes.
SolarWinds Security Event Manager has proven to be beneficial in terms of return on investment. It helps in eliminating vulnerabilities to meet internal audit requirements, leading to a positive outcome from a security standpoint.
The solution has been effective in preventing potential losses from attacks.
Users have mentioned that the pricing and licensing for SolarWinds Security Event Manager are flexible, with options for yearly licenses or perpetual licenses for on-premises deployment. The cost is perceived as reasonable, although some uncertainty remains about the exact pricing.
SolarWinds Security Event Manager is primarily used for event management and log collection. It helps in identifying and preventing suspicious activities, as well as blocking known spyware or ransomware sites. It provides insights, email alerts, and app directory changes. The tool is used for compliance with audit requirements and is employed for investigation, troubleshooting, monitoring, and other fixed-log or event management tasks.
The customer service and support of SolarWinds Security Event Manager have received mixed feedback. Some customers have mentioned that the support is good and they have improved over the years. They have specialized teams for different aspects of the product and have expanded their offices globally. However, there are also customers who find it challenging to get in contact with support and have expressed dissatisfaction with the service.
The initial setup for SolarWinds Security Event Manager is generally considered to be easy and straightforward. It can be deployed quickly on a small network, but may be more challenging for larger and more complex networks with multiple remote locations and firewalls.
Some users encountered issues related to networks and firewalls during deployment yet received assistance from SolarWinds support.
The installation process is described as easy, even for non-technical users, and can be completed in a few hours. Once the solution is deployed, it typically only requires a small team or even just one person to monitor and manage it.
SolarWinds Security Event Manager is said to scale well, with the ability to add VMs for easy scaling.
The scalability depends on factors such as hardware and the number of licenses purchased.
There is an option for an "Unlimited" license that provides unlimited probes for different locations, although it comes at a higher cost compared to previous solutions.
Some users have experienced initial difficulties with defining certain hard drive aspects with ESXi, however, overall, the scalability is considered good.
That said, there are also some concerns about scalability, particularly regarding integration with other solutions and the convenience of meeting current needs.
SolarWinds Security Event Manager is consistently reliable and has no stability issues. It is stable and performs well, with no bugs or glitches, and it does not crash or freeze.
| Company Size | Count |
|---|---|
| Small Business | 14 |
| Midsize Enterprise | 3 |
| Large Enterprise | 5 |
| Company Size | Count |
|---|---|
| Small Business | 37 |
| Midsize Enterprise | 27 |
| Large Enterprise | 70 |
SolarWinds Security Event Manager was previously known as SolarWinds LEM, Solarwinds SIEM, TriGeo, Log and Event Manager.
NetSuite, EasyStreet, Legacy Texas Bank, and Energy Federal Credit Union, to name a few.
| Author info | Rating | Review Summary |
|---|---|---|
| Managed Services Engineer at Loop1 Systems | 3.5 | I've used SolarWinds products for years; they're user-friendly and effective, especially NPM and the modern dashboard. While Security Event Manager offers useful features, it needs deeper log analysis and faster support. I'd rate it seven out of ten. |
| Enterprise Cloud Infrastructure Engineer at Safaricom | 4.0 | Integrating SolarWinds Security Event Manager with other teams was quick, taking one or two days for infrastructure deployment, but networking all service centers required two to three weeks. While threat detection works well, enhancing those features would ease my workload. |
| CEO at Greeneris Sp. z o.o. | 4.0 | I use SolarWinds Security Event Manager to monitor our network and correlate data. While it's cost-effective and meets our on-premises requirements, it needs improved customization, especially with third-party vendors, and an enhanced UI for the on-premise version. |
| SQL Server and MongoDB DBA at KVK | 3.5 | I use SolarWinds Security Event Manager to monitor various IT components, including Windows, SQL, and IBM servers, appreciating its versatility. However, its complexity makes installation and maintenance challenging, requiring significant effort to standardize monitoring configurations. |
| System and Network Administrator at El Sadat City Language School | 4.0 | I began using SolarWinds Security Event Manager due to job requirements. It's an effective tool for threat management with a user-friendly interface, but installation is challenging, costly, and compatibility with other software is limited, impacting overall adaptability. |
| Software Engineer at a comms service provider with 51-200 employees | 4.0 | We use SolarWinds Security Event Manager primarily for centralized log collection to meet audit requirements. It's effective in server, network, and log monitoring, but costly. We switched from PRTG due to its lack of comprehensive features for audit compliance. |
| Solutions Architect at ostec | 4.0 | No summary available |
| Technical Operations & Management Professional at RMC Enterprises | 3.5 | No summary available |
