No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Security QRadar vs NNT Log Tracker Enterprise comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Security QRadar
Ranking in Log Management
5th
Ranking in Security Information and Event Management (SIEM)
2nd
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
218
Ranking in other categories
User Entity Behavior Analytics (UEBA) (3rd), Endpoint Detection and Response (EDR) (12th), Security Orchestration Automation and Response (SOAR) (5th), Managed Detection and Response (MDR) (7th), Extended Detection and Response (XDR) (10th)
NNT Log Tracker Enterprise
Ranking in Log Management
55th
Ranking in Security Information and Event Management (SIEM)
53rd
Average Rating
8.2
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Log Management category, the mindshare of IBM Security QRadar is 4.5%, up from 3.6% compared to the previous year. The mindshare of NNT Log Tracker Enterprise is 0.9%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
IBM Security QRadar4.5%
NNT Log Tracker Enterprise0.9%
Other94.6%
Log Management
 

Featured Reviews

HarshBhardiya - PeerSpot reviewer
SOC Engineer at a outsourcing company with 10,001+ employees
Have managed daily asset and alert monitoring effectively but have encountered limitations with manual processes and interface usability
It's still very manual and doesn't work on its own. It's still in an early stage and not on par where we can consider it a really successful detection system. The accuracy is not there. The UI could be better when compared to Sentinels where we can use flags and tagging. It could be much more user-friendly. IBM Security QRadar has all features and is fully competitive with other SIEM tools, but when it comes to user-friendliness, a new user takes time to get used to it. More intuitive, user-friendly interfaces and more helpful documentation would be beneficial. The query searching and data fetching could be faster. In large to very large organizations with around 5,000 or 6,000 assets or beyond, even with proper configurations and RAM and hardware backing up, the query is fairly slow.
JT
Senior Infra Manager at a tech vendor with 10,001+ employees
Great for PCI compliance but issues with stability and large amounts of data
I mainly use this solution to meet PCI compliance The automation of compliance reports and the correlation of the log have been major improvements.  The most valuable feature is the predefined reports for PCI compliance. The correlation suite needs to be improved. I also think they need to…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"IBM Qradar's ability to simplify the number of events, not only on a technical level but by making that information easy to pan through the orchestration deduplication. It is very impressive given that we have hundreds of devices that send event logs through."
"The most valuable features are the versatility of this solution and the variety of things you can do with it."
"I would recommend the solution to others."
"QRadar's stability is great because it is always live and is always catching and monitoring all the information that we need."
"The product is great; it does good correlation for events, it does good general analysis, and it has good apps as well."
"The vulnerability management aspect is the most valuable feature."
"It's very easy and initiative."
"QRadar shows very effective correlations. If you combine all the logins plus user behavior and the current intelligence, it gives a very good correlation for business. I think it reduces the false positives in user activity monitoring because there is a lot of social information to correlate with other data."
"The most valuable feature is the predefined reports for PCI compliance."
"The Change Tracker tool is very good and will reduce your overall workload."
"File integrity monitoring is a very important function."
"The FIM features in the Change Tracker and the Log Tracker are the most valuable."
"This is a very easy-to-use interface with a quick ramp-up time."
"The automation of compliance reports and the correlation of the log have been major improvements."
"Customer Service: The service we've seen from NNT to date has been extraordinarily good."
"If you want to deploy a SIEM and you want it to be simple, and not deal with much maintenance or help from the OEM, then I would say that NNT is the one."
 

Cons

"The solution is clunky."
"The solution is expensive compared to other products."
"It is not app based."
"IBM QRadar could improve the plugins and threat detection."
"I would like for them to develop a detection management solution. It does not have a detecting management solution in it, you have to buy it as it is, on top of the extended solution."
"They have to build more quantitative monitoring, profiling, and make it more predictive."
"They keep on adding products based on a simple feature set that they can do real well, but they can't integrate them into the rest of the security economy."
"We sometimes get an error about the hard drive. Approximately once in two months, we can't find the logs, and they go missing, which is a terrible issue. We are getting support for this issue from our support company."
"There are some issues with the stability - the correlation engine has failed multiple times, and the reports sometimes take too long, so we have to involve the tech team to get them."
"For the NNT Log Tracker and Change Tracker, they have to make their knowledge base available online because there is very little information available on the internet."
"Only one minor deployment issue came up and it was resolved quickly. No other areas of improvement come to mind yet."
"I would like to see the integration of AI technology, so rather than manually monitoring the logs, the tool will understand it and take care of it."
"The correlation suite needs to be improved."
"It is able to identify the vulnerability, however, they need an option to auto-mitigate."
 

Pricing and Cost Advice

"It's too expensive. The licensing is also a little bit difficult to understand because you have to license it per event and per number of flows."
"On a scale of one to ten, I rate the price a one, where one is an extremely expensive product, and ten is a cheap product."
"In terms of additional costs, it depends on the subscription that you choose. There are plenty of options to choose from."
"IBM has subscriptions plans that run for one year."
"The maintenance costs are high."
"It could be cheaper, but the value itself is far more important for us than the price. Typically, our clients have yearly subscriptions."
"Most of the time, it is easier and cheaper to buy a new product or the QRadar box."
"IBM Security QRadar is a very expensive tool."
"We have selected a perpetual license along with support."
"Consider both their on-premises solution and their hosted solution. Both are reasonably priced."
"NNT's pricing is moderate - I would rate their pricing two-and-a-half out of ten."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
908,877 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Construction Company
10%
Outsourcing Company
8%
Computer Software Company
8%
Construction Company
22%
Manufacturing Company
9%
Outsourcing Company
8%
Healthcare Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business92
Midsize Enterprise39
Large Enterprise107
No data available
 

Questions from the Community

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is your experience regarding pricing and costs for IBM Security QRadar?
I am overall satisfied with the licensing cost for IBM Security QRadar.
Ask a question
Earn 20 points
 

Also Known As

IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, IBM QRadar Advisor with Watson
No data available
 

Overview

 

Sample Customers

Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.
Wonga, WHSmith
Find out what your peers are saying about IBM Security QRadar vs. NNT Log Tracker Enterprise and other solutions. Updated: August 2026.
908,877 professionals have used our research since 2012.