No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Security Network IPS vs LogRhythm UEBA [EOL] comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Security Network IPS
Average Rating
7.2
Reviews Sentiment
6.8
Number of Reviews
4
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (25th)
LogRhythm UEBA [EOL]
Average Rating
7.0
Reviews Sentiment
6.5
Number of Reviews
11
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Jacob_Koithra - PeerSpot reviewer
Project & Program manager at Shell Grp
User-friendly and has a good blocking feature but is quite expensive
Defining the new security rules and policies sometimes becomes a challenge. Integration with other platforms becomes a challenge as well. I'd like to see more integration with other tools and technologies. XGS 7100 has an end of support for the 30th of December 2022. Many are losing support. All the products of the XGS, including XGS 3100, 4100, 5100, and 7100, support is ending in December 2022. We need to know what is the plan post that? Do we need to spend money on them? Will that be extended? There has been no communication on the website either. It's an expensive device.
Venda E - PeerSpot reviewer
Cloud Option Engineer at a tech vendor with 10,001+ employees
Behavior analytics has improved insider threat detection and reduces false positives for our team
The best features LogRhythm UEBA [EOL] offers are its behavioral balancing, baselining, risk scoring, and correlation with SIEM events, and what stands out most is risk scoring, which gives clear visibility into which user behaviors are genuinely risky and helps our team to focus on the highest priority threats without drowning in noise. Risk scoring helps us to quickly identify which users' activity needs immediate attention by clearly ranking threats based on impact and likelihood; it changes our day-to-day operations by reducing time spent on low-risk alerts and allowing the team to prioritize investigations and response actions more effectively and consistently. LogRhythm UEBA [EOL] has positively impacted our organization by improving our ability to detect insider threats and compromised accounts earlier, resulting in better security visibility, reduced false positives, and faster investigations and response times, which helped the team operate more effectively with greater confidence. I observed a noticeable reduction in false positive alert volume, which shortened the investigation time per incident, improving the mean time to detect and respond, and helping identify high-risk user activities earlier, which prevented potential security incidents from escalating.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is its simplicity."
"The initial setup is simple."
"IPS has helped us in understanding more about the latest threats out there and made us realize that we need to be proactive when it comes to security rather than reactive."
"Signature based analysis and preventing different types of network attacks."
"This is definitely a product that I recommend, especially for organizations that want a quick integration of data from the transaction systems, with a very low cost of operations."
"The blocking feature is great; it acts as an in-line blocker, and any malicious traffic that you see, or anything really, it can block the traffic."
"It has a lot of features. It has file integration monitoring."
"The capability of pinpointing specific cyber incidents is a valuable feature for us."
"Licensing is on a yearly basis, and it's not expensive compared to its competitors."
"I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools."
"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."
"The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location."
"It is easy to monitor users and that is how the solution is adding value to our firm."
"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."
 

Cons

"The configuration of this product is complex. It could be made more user friendly."
"In terms of scalability, I would say that it is a little on the poor side."
"The management server can be made more user friendly and also the database configuration could be made simpler."
"I'd like to see more integration with other tools and technologies."
"It's an expensive device."
"In the future, I would like to see a hybrid option so that we can work both on-premises and in the cloud."
"It would be helpful if there were more guidance provided for integrating with unsupported devices."
"What needs improvement in LogRhythm UEBA is the pricing. Here in Asia, for example, in Sri Lanka, pricing is the primary concern, and this is the only area for improvement I see in the product."
"Better dashboarding. At the moment, the dashboard only has an hour."
"The UI could be improved a little bit."
"In general, if something needs to be improved in the algorithm, it would be the dashboards."
"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."
"The solution is very expensive. There are also costs beyond the standard licensing fee."
"It should have better mitigation with other solutions and be tightly integrated with other solutions. It has to be improved."
 

Pricing and Cost Advice

"The cost of operations is very low."
"It is quite a budget-friendly product."
"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."
"Licensing is on a yearly basis. It's not expensive compared to its competitors."
"The pricing is nice when compared to other products in the industry."
"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
920,043 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Performing Arts
11%
Manufacturing Company
11%
Outsourcing Company
9%
Comms Service Provider
12%
Retailer
11%
Outsourcing Company
10%
Construction Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise4
Large Enterprise4
 

Questions from the Community

Ask a question
Earn 20 points
What needs improvement with LogRhythm UserXDR?
In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...
What is your primary use case for LogRhythm UserXDR?
I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools.
What advice do you have for others considering LogRhythm UserXDR?
I would not necessarily recommend LogRhythm due to its complexity and lack of modularity. I would always recommend Splunk to users since it is a powerful solution. Combining it with other solutions...
 

Also Known As

Security Network Intrusion Prevention System, IBM Security Network Protection, XGS, GX
LogRhythm UserXDR, LogRhythm Enterprise UEBA
 

Overview

 

Sample Customers

Equifax, Christian Hospital Centre
Information Not Available
Find out what your peers are saying about Darktrace, Fortinet, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS). Updated: October 2026.
920,043 professionals have used our research since 2012.