No more typing reviews! Try our Samantha, our new voice AI agent.

LevelBlue USM Anywhere vs SolarWinds Security Event Manager comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 24, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LevelBlue USM Anywhere
Ranking in Security Information and Event Management (SIEM)
29th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Log Management (28th), Endpoint Detection and Response (EDR) (37th), Compliance Management (14th)
SolarWinds Security Event M...
Ranking in Security Information and Event Management (SIEM)
37th
Average Rating
7.8
Reviews Sentiment
5.7
Number of Reviews
27
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Security Information and Event Management (SIEM) category, the mindshare of LevelBlue USM Anywhere is 1.5%, up from 1.0% compared to the previous year. The mindshare of SolarWinds Security Event Manager is 1.0%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
USM Anywhere1.5%
SolarWinds Security Event Manager1.0%
Other97.5%
Security Information and Event Management (SIEM)
 

Featured Reviews

Kris Nawani - PeerSpot reviewer
Co-Founder/Director at Bangkok MSP Company Limited
Offers complete coverage without the need to install additional software
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…
Yashokanth Partkunan - PeerSpot reviewer
Managed Services Engineer at Loop1 Systems
Has supported client needs efficiently but requires deeper analysis features and faster support
The log analyzing capability of SolarWinds Security Event Manager should go into more depth than the current environment. More modification and enhancements are required on the dashboard side in order to make it closer to optimal performance. From observation and feedback from users, they need more functionality related to monitoring, and in-depth analyzing needs to be improved.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I highly recommend AlienVault USM for anybody that is seeking a SIEM solution that is easy to implement and easy to manage."
"The most useful feature is the customization for alarms, alerts, and reports."
"AlienVault's "Overview" dashboard makes it very easy to see everything going on in your network that needs your immediate attention."
"Having everything in a central place has been helpful."
"AlienVault gave our organization a centralized tool to manage our security with its intrusion detection, asset management, vulnerability assessments, along with all of its other features, it has become an invaluable asset for our small organization."
"It allows for a lot of out-of-the-box features: vuln scanning, HIDS/HIPS, and IDS."
"We're using it more for reporting, that's all. We're using it to help our customers to pass any kind of audits that they receive."
"We’ve had 100% uptime since installation."
"The most valuable feature is the ease of use for the end user."
"It will identify things in your network that you just didn't know were going on."
"If you have no monitoring tool in place, SolarWinds SIEM is a good place to start and very inexpensive."
"It performs network behavior monitoring, log monitoring, and disaster recovery monitoring."
"It has in-depth monitoring capabilities and an easy way for setting up dashboards."
"The most valuable feature is the reporting."
"The solution helps you monitor database instances, application instances, other customer application things, Linux servers, IBM servers, and Oracle servers."
"The solution helps me to go back in time and search for different events. For example, if you wanted to know who activated an account; you could go back in time and find out."
 

Cons

"I would say the menus could use some tweaking and custom rule creation could be made simpler."
"The web UI can be clunky at times, with poor error handling."
"The reporting and dashboards have room for improvement."
"AlienVault must improve their correlation feature. Some of the events do not match with the correlation rules and some of the correlation events are false-positive."
"ROI has not yet been measured."
"Its reporting tools need improvements."
"Technical Support: We received average support. As observed, the support engineers take a long time for issue resolution."
"It would be great if there was a feature to add in watch lists, like McAfee or QRadar have -- to keep track of IPs, domain, etc. that I have identified as being malicious."
"One of the drawbacks of being so flexible is that it is also a fairly complicated software application to install, configure, and maintain."
"There is no correlation made between log entries, so no threat information is presented."
"Not very scalable in my opinion. That's why I'm investigating new SIEM replacement."
"The product should improve the ease with which you can create event alerts. They are not as hard now but you need to have an easier way."
"I think the product can use some improvement on the reporting side. The reporting could be easier and more robust."
"The company had to use a third party for the implementation of the solution."
"Under the new system, it is not upgradable the way they say. When you try to do an upgrade, it doesn't really work unless you dump everything and start from scratch. You lose a lot of your nodes. Whenever you set your nodes up and everything else, they don't want to bring those nodes back in, so you have to really go back and restructure all your nodes. I went from version 6.5 to version 6.6 and then to version 6.7. I then went to version 2019, and now it is version 2020. It would be good if we can upgrade without having to delete everything and start from scratch. They can maybe build more KPIs and other things for the dashboard. Some of the other systems already have built-in KPIs. SolarWinds is starting to catch up, but it is not there yet. They can include some of the business or industry standards for tracking the time, that is, the meantime to detect (MTTD) and the meantime to resolve (MTTR). They can also find a way to build a KPI that measures the number of instances of port scans experienced in a week or a month."
"We used the support from SolarWinds Security Event Manager and they are knowledgeable but challenging to get in contact with them."
 

Pricing and Cost Advice

"So far, I feel the product's pricing is a good value. The technology is decent. You get what you pay for. I think it's fair."
"I don't know exactly, but I know it is based on the number of logs and the retention duration, such as 30 days or something like that. So, the smallest package is about 500 a month for 30 days of logs. There is a virtual machine. You need resources for it. It is a log collecting VM. They provide the software, and you just have to load a virtual machine. So, you're going to incur some CPU RAM and storage for wherever this log collecting appliance is running, which typically is in our cloud and on our platform for the customer."
"It has good pricing."
"Use the AlienVault team. They are helpful and the documentation that they provide is second to none."
"Its price is in the medium to upper range."
"​The price point is good.​"
"The licensing fees are dependent on usage."
"They charge a license based on the storage. ATT AlienVault USM is a less expensive solution than IBM QRadar."
"The pricing model would benefit from having package deals with other SolarWinds products."
"Licensing is on devices, so if you have many, then this may be high."
"Licenses can only be purchased in blocks of fifty at a time."
"The price of SolarWinds Security Event Manager is reasonable."
"It is in the appropriate mid-range. It is not as expensive as some of the other solutions. It is also not cheap."
"We do a yearly license renewal. For a year, the solution costs roughly $500,000 USD. There are no costs beyond this yearly fee."
"The tool is available at a good price for customers compared to other solutions in the market. I rate the product's price as an eight out of ten."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
914,109 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
20%
Outsourcing Company
18%
Comms Service Provider
8%
Financial Services Firm
7%
Construction Company
12%
Outsourcing Company
12%
Financial Services Firm
11%
Manufacturing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business65
Midsize Enterprise29
Large Enterprise25
By reviewers
Company SizeCount
Small Business19
Midsize Enterprise3
Large Enterprise7
 

Questions from the Community

What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
What is your primary use case for AT&T AlienVault USM?
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools.
What needs improvement with SolarWinds Security Event Manager ?
The log analyzing capability of SolarWinds Security Event Manager should go into more depth than the current environment. More modification and enhancements are required on the dashboard side in or...
What is your primary use case for SolarWinds Security Event Manager ?
I work with all SolarWinds products mostly, including Network Configuration Manager and NPM. I am a reseller. I usually recommend SolarWinds products for Loop1. It's for the bigger ones; we are the...
What advice do you have for others considering SolarWinds Security Event Manager ?
I am still dealing with SolarWinds products and use most of their solutions. User-friendly configuration is key, and the configurations are simple, not complex. The only important part is what we d...
 

Also Known As

AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
SolarWinds LEM, Solarwinds SIEM, TriGeo, Log and Event Manager
 

Overview

 

Sample Customers

Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
NetSuite, EasyStreet, Legacy Texas Bank, and Energy Federal Credit Union, to name a few.
Find out what your peers are saying about LevelBlue USM Anywhere vs. SolarWinds Security Event Manager and other solutions. Updated: September 2026.
914,109 professionals have used our research since 2012.