No more typing reviews! Try our Samantha, our new voice AI agent.

IBM X-Force Exchange vs LogRhythm SIEM comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM X-Force Exchange
Average Rating
8.2
Reviews Sentiment
8.6
Number of Reviews
4
Ranking in other categories
Threat Intelligence Platforms (TIP) (30th)
LogRhythm SIEM
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
176
Ranking in other categories
Log Management (11th), Security Information and Event Management (SIEM) (12th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. IBM X-Force Exchange is designed for Threat Intelligence Platforms (TIP) and holds a mindshare of 1.4%, down 1.6% compared to last year.
LogRhythm SIEM, on the other hand, focuses on Security Information and Event Management (SIEM), holds 2.7% mindshare, down 3.3% since last year.
Threat Intelligence Platforms (TIP) Mindshare Distribution
ProductMindshare (%)
IBM X-Force Exchange1.4%
Recorded Future6.0%
Anomali3.9%
Other88.7%
Threat Intelligence Platforms (TIP)
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
LogRhythm SIEM2.7%
Splunk Enterprise Security8.0%
IBM Security QRadar5.6%
Other83.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

JohnTamakloe - PeerSpot reviewer
Solutions Architect at ostec
A threat intelligence platform aiming to enhance its intelligence
It falls under the category of AI-embedded threat intelligence, which makes detection more efficient by reducing the rate of false positives and improving the overall detection rate. When the threat intelligence alone doesn’t provide enough information, we use other methods to verify the threat. For example, IBM has its threat intelligence team and tools. If the threat intelligence doesn’t yield much information, the tool has a framework that can identify suspicious activity. We then use our judgment and experience to implement compensating controls, whether for a potentially malicious patch, IP address, or any other threat. Customers benefit from it, even if they’re not directly integrating it. Through our service, they receive the benefits of the integration. Overall, I rate the solution a nine out of ten.
RS
Engineer Information Security at N-Able (Pvt) Ltd
Advanced threat detection has improved investigations but complexity and resource use need refinement
LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat better and more matured in Wazuh compared to LogRhythm SIEM. Additionally, the parsers that I write for LogRhythm SIEM tend to get quite complex for log parsing, while with Wazuh, I can achieve a similar parser with much less complexity. Those are some of the pain points that some of our customers have been expressing. If LogRhythm SIEM could make a lightweight version of their solution, that would be quite competitive because some of my customers have a very large need but refuse to go with LogRhythm SIEM due to its complexity and high resource intensity. Therefore, they have been moved to Wazuh, which I am deploying for them. Even though LogRhythm SIEM has extremely good capabilities, their resource utilization is too heavy for certain customers, so if they could make a separate, lightweight version, that would be quite beneficial.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is you have the expertise of human experience directly involved. There is a team of experts."
"This product has helped to increase staff productivity."
"IBM X-Force has shortened our lifecycle for cyber security investigations, allowing me to quickly leverage a tool that gives quick visibility, quick understanding, quick investigation, quick drill down, and the ability to close offenses and issues as fast as I can."
"It's quite integratable so you can actually integrate and get IP malware and URL information. It also gives you some form of intelligence into what you're trying to investigate or what you're trying to understand."
"One of the fastest ways to cut costs is reducing staff, and this product can reduce staff by 70 percent."
"Our security program's maturity has been transformational for my staff."
"Provides visibility into the network."
"The LogRhythm AIE (Advanced Intelligence Engine) is very good at alerting my SOC to events of interest and potential security issues without flooding my team with noise."
"We take in around 750 million logs a day. We have a lot of products and that would be a lot of different panes of glass that we would have to look through otherwise. By centralizing, we can triage and take steps much more quickly than if we tried to man that many interfaces that come with the products."
"The most valuable features of the solution are network monitoring, user behavior analytics, and log collection."
"The customer service team is excellent and they have resolved anything we have thrown at them in a timely fashion."
"It gives us insight into our entire installation, where we are multiple sites, going as far as the East Coast to the Central West Coast."
"It is a really good product with good support."
 

Cons

"I would like to see better integration with other systems, solutions, and vendors."
"You have to look for the new information from X-Force. X-Force will provide it but you have to look for it. We need clearer visibility."
"It is very expensive."
"We would like to have more AI capabilities to detect threats and improve its productivity from a cybersecurity standpoint."
"I do think there is room for improvement because the system is still running on the Windows Server platform. The problem with running on Windows is that it is not that good for scaling and providing for big deployment environments."
"There have been issues with the hardware which has resulted in the LRM going down a few times."
"The Web Dashboard UI maybe can improve more to indicate some of what Splunk is doing, because I also compare with other SIEM products."
"Though we had some issues initially in terms of technical support, the expertise of technical people, but I am seeing that they have improved a lot now, so a lot of our questions and queries get solved with the technical support."
"The log storage capacity should be increased."
"We usually do end up having to remind technical support about our issues, get back in touch with them to see what the status is on our tickets."
"It will definitely help if the parsing side would be much easier, meaning it would be better if we could easily make adjustments on the parser, both on standard and non-standard log sources."
"The ability to customize certain features of the product."
 

Pricing and Cost Advice

"One of the fastest ways to cut costs is reducing staff, and this product can reduce staff by 70 percent."
"Cost is clearly a consideration, but the important thing is what we do with the data and how we protect it."
"If you don't have your staff, absolutely look into the co-pilot and factor that into your cost evaluation."
"The product is inexpensive than other tools."
"LogRhythm's pricing and licensing is extremely competitive and it's one of the top three reasons we continue to invest in the platform."
"The setup and licensing for small and medium size businesses is straightforward, though when it comes to the enterprise it pays to keep in mind the possibility for complications given all the extras and add-ons that may be required."
"In the context of our country, the price of this solution is too high."
"LogRhythm's licensing is based on MPS. There are some add-on features like advanced UEBA, the cloud component for advanced UEBA, and SIEM."
"The nice thing about LogRhythm is you can either use the agents, getting a certain number of agents with your license depending on how you want to go, and those agents do a lot of cool things, or you can use CIS Log host, then you have like an unlimited number of them."
"We have seen a measurable decrease in the mean time to detect and respond to threats. As it comes out new features and new releases, the window is becoming a lot narrower because you can pivot a lot more with the data. Therefore, the new features and enhancements are reducing that."
report
Use our free recommendation engine to learn which Threat Intelligence Platforms (TIP) solutions are best for your needs.
917,743 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
18%
Outsourcing Company
11%
Construction Company
11%
Comms Service Provider
8%
Construction Company
11%
Financial Services Firm
10%
Outsourcing Company
9%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise39
Large Enterprise83
 

Questions from the Community

Ask a question
Earn 20 points
What is the difference between log management and SIEM?
Rony, Daniel's answer is right on the money. There are many solutions for each in the market, a lot depends upon your ability to manage such tools and your budget. A small operation may be best s...
What needs improvement with LogRhythm NextGen SIEM?
LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat bette...
What is your experience regarding pricing and costs for LogRhythm SIEM?
I find LogRhythm SIEM affordable, as it is a bit less costly than QRadar, although I have not been involved in negotiation charges; however, from the manager's approval, I see it as affordable.
 

Also Known As

X-Force Exchange, X-Force
LogRhythm NextGen SIEM, LogRhythm, LogRhythm Threat Lifecycle Management, LogRhythm TLM
 

Overview

 

Sample Customers

Information Not Available
Macy's, NASA, Fujitsu, US Air Force, EY, Abbott, HD Supply, SAB Miller, UCLA, Raytheon, Amtrak, Cargill
Find out what your peers are saying about Recorded Future, Anomali, SOCRadar and others in Threat Intelligence Platforms (TIP). Updated: October 2026.
917,743 professionals have used our research since 2012.