LogRhythm SIEM vs Palo Alto Networks AutoFocus comparison

Why PeerSpot?

The compared Exabeam and Palo Alto Networks solutions aren't in the same category. Exabeam is ranked #13 in SIEM , with an average rating of 7.2, and holds a 2.7% mindshare in the category. Palo Alto Networks is ranked #20 in TIPT , with an average rating of 6.0, and holds a 1.4% mindshare. Additionally, 89% of Exabeam users are willing to recommend the solution, compared to 87% of Palo Alto Networks users who would recommend it.

LogRhythm SIEM

Read 176 LogRhythm SIEM reviews

17,667 Views
11,484 Comparison Views

89% willing to recommend

Palo Alto Networks AutoFocus

Read 7 Palo Alto Networks AutoFocus reviews

2,199 Views
1,847 Comparison Views

87% willing to recommend

LogRhythm SIEM

Palo Alto Networks AutoFocus

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between LogRhythm SIEM and Palo Alto Networks AutoFocus based on real PeerSpot user reviews.

Find out what your peers are saying about Splunk, IBM, Microsoft and others in Security Information and Event Management (SIEM).

To learn more, read our detailed Security Information and Event Management (SIEM) Report (Updated: September 2026).

Buyer's Guide

Security Information and Event Management (SIEM)

September 2026

Download the complete report

Helped 913,683 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

LogRhythm SIEM

Average Rating

8.2

Reviews Sentiment

6.4

Number of Reviews

176

Ranking in other categories

Log Management (11th), Security Information and Event Management (SIEM) (13th)

Palo Alto Networks AutoFocus

Average Rating

7.4

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Threat Intelligence Platforms (TIP) (20th)

Mindshare comparison

While both are Security Software solutions, they serve different purposes. LogRhythm SIEM is designed for Security Information and Event Management (SIEM) and holds a mindshare of 2.7%, down 3.3% compared to last year.
Palo Alto Networks AutoFocus, on the other hand, focuses on Threat Intelligence Platforms (TIP), holds 1.4% mindshare, up 1.3% since last year.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
LogRhythm SIEM	2.7%
Splunk Enterprise Security	7.8%
IBM Security QRadar	5.6%
Other	83.9%

Security Information and Event Management (SIEM)

Threat Intelligence Platforms (TIP) Mindshare Distribution
Product	Mindshare (%)
Palo Alto Networks AutoFocus	1.4%
Recorded Future	6.1%
Anomali	3.9%
Other	88.6%

Threat Intelligence Platforms (TIP)

Featured Reviews

Rajin Sandira

Engineer Information Security at N-Able (Pvt) Ltd

Advanced threat detection has improved investigations but complexity and resource use need refinement

LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat better and more matured in Wazuh compared to LogRhythm SIEM. Additionally, the parsers that I write for LogRhythm SIEM tend to get quite complex for log parsing, while with Wazuh, I can achieve a similar parser with much less complexity. Those are some of the pain points that some of our customers have been expressing. If LogRhythm SIEM could make a lightweight version of their solution, that would be quite competitive because some of my customers have a very large need but refuse to go with LogRhythm SIEM due to its complexity and high resource intensity. Therefore, they have been moved to Wazuh, which I am deploying for them. Even though LogRhythm SIEM has extremely good capabilities, their resource utilization is too heavy for certain customers, so if they could make a separate, lightweight version, that would be quite beneficial.

Read full review

Tejas Jain

Principle Cloud Architect at a tech services company with 11-50 employees

Seamless integration into existing ecosystem empowers effective threat detection

The most valuable feature of Palo Alto Networks AutoFocus is its seamless integration into the Palo Alto Networks ecosystem, allowing the threat intelligence feeds to be automatically consumed without manual effort. It uses the STIX format, which is automatically understood by the firewalls. AutoFocus also excels in behavioral analytics and reputation scoring, providing thorough threat analysis.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The scalability is very good."

"We have NetFlow information going into it, so we can examine a lot of traffic patterns and anomalies, especially if something stands out and is not the baseline. This helps a lot."

"We are migrating from a different product (Curator) to this product, and we think LogRhythm is better than the older product that we were using."

"I don't feel like we just bought a product with LogRhythm, I felt that we bought a team."

"The most valuable feature is that we can alternate incident automations."

"For us, LogRhythm has given us the kind of insight we need to understand when those threats either are being recon-ed, found out, or when they're really trying a brute force attack to get at us."

"So far, my experience has been seamless."

"It seems like it will scale easily with the way our environment is set up."

More LogRhythm SIEM pros

"The feature that I like best is the dashboard."

"Palo Alto Networks AutoFocus has had a positive impact on my company as we can reduce the cost for the SOC investment, and we can also get good feedback on how to strengthen our network from the expertise people available."

"It integrates well with other solutions and provides good threat intelligence in terms of external threats."

"It is very easy to install and set up AutoFocus."

"I am impressed with the tool's integration of Palo Alto products which serves as a platform for security."

"I would rate Palo Alto Networks AutoFocus a ten out of ten."

"It's a very good solution, it identifies critical attacks and alerts you."

"The most valuable feature is alerting."

More Palo Alto Networks AutoFocus pros

Cons

"LogRhythm's SOAR and NDR features don't stack up well against competitors. maybe integrating theme functionality as the other do. But in general, it's okay."

"My big thing is the easability. I don't like to go to two different systems. The fat client that you have to install to configure it, then the web console which is just for reporting and analysis. These features need to collapse, and it needs to be in a single solution. Going through the web solution in the future is the way to do it, because right now, it is a bit cumbersome."

"The web and on-premise console interface should be the same instead of having a separate engine for each."

"I think a must-have feature would be better reporting. The reports do not provide information such as, who are your top ten end users generating the most activity within the environment, or appliances, per se, so that's very limited."

"Right now I know there's a big issue with reporting. It's challenging, at least for us, to do some of the reporting within the system itself."

"I would like to see support added for Exchange 2016, and Check Point OPSec Lea."

"We do about 750 million a day and some days we do 715 million. Some days we do 820 million or 1.2 billion. But there's no way to drill in and find out: "Where did I get 400,000 extra logs today?" What was going on in my environment that I was able to absorb that peak? I have no way to identify it without running reports, which will produce a long-running PDF that I have to somehow compare to another long-running PDF... I would like to see like profiling behavior awareness around systems like they've been gunned to do around users with UEBA."

"Better correlation of all events: We seem to get a lot of misinterpreted data coming from multiple sources."

More LogRhythm SIEM cons

"There were one or two instances where firewalls were not getting the threat intelligence feeds."

"It would be helpful to have better documentation for configuring and installing the solution."

"Palo Alto Networks AutoFocus is not affordable."

"It must be on-premises as well; it must have a server on-premises. It is a completely cloud-based product at present."

"It would be better if they used the threat intelligence feeds directly from their side and changing the verdict instead of us requesting it."

"I would like the tool to see more integration with Cortex XDR. There is no real reason to keep them separate."

"I would like to have more technical documentation that contains greater detail on the types of threats that are occurring."

Pricing and Cost Advice

"In the context of our country, the price of this solution is too high."

"The license cost is around $10 per MPS."

"When it comes time to renew, they say, "This is what you are using. This is what we can do for you." So, they work with you on pricing."

"The pricing is very reasonable and accessible compared to other products in the market but I am not very sure about the exact licensing cost per year for our company."

"The product is inexpensive than other tools."

"On a scale of one to ten, I'd rate the pricing of this solution as a seven - not too expensive but not cheap either. Regarding licensing costs, it varies depending on factors like being a partner or an end user, but there are no additional costs aside from standard licensing fees for the basic SIEM solution."

"I would rate the pricing 4 out of 5. There are no additional costs to the standard licensing fees."

"It is a very cost-effective solution."

More LogRhythm SIEM pricing and cost advice

"The solution is reasonably priced."

"It is expensive."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

913,683 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

12%

Outsourcing Company

10%

Financial Services Firm

Comms Service Provider

Performing Arts

14%

Outsourcing Company

11%

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	38
Midsize Enterprise	39
Large Enterprise	83

By reviewers
Company Size	Count
Small Business	5
Large Enterprise	4

Questions from the Community

What is the difference between log management and SIEM?

Rony, Daniel's answer is right on the money. There are many solutions for each in the market, a lot depends upon your ability to manage such tools and your budget. A small operation may be best s...

See all answers

What needs improvement with LogRhythm NextGen SIEM?

See all answers

What is your experience regarding pricing and costs for LogRhythm SIEM?

I find LogRhythm SIEM affordable, as it is a bit less costly than QRadar, although I have not been involved in negotiation charges; however, from the manager's approval, I see it as affordable.

See all answers

What needs improvement with Palo Alto Networks AutoFocus?

I feel that Palo Alto Networks AutoFocus can improve, especially since most of the OEMs are implementing MDR, Managed Service feature, which is still not available with Palo Alto. The MDR feature i...

See all answers

What is your primary use case for Palo Alto Networks AutoFocus?

I use Palo Alto Networks AutoFocus for threat monitoring, and it is provided by the OEM itself. I use the threat data correlation feature, which correlates with Cortex. We can use it for data corre...

See all answers

What advice do you have for others considering Palo Alto Networks AutoFocus?

As a partner with Palo Alto Networks, my email is Sarvajit at bsrgroup.in. My job title is Technical Manager. I confirm that we will publish these reviews on peerspot.com in written or audio format...

See all answers

Comparisons

IBM Security QRadar vs LogRhythm SIEM

Compared 6% of the time

Splunk Enterprise Security vs LogRhythm SIEM

Compared 6% of the time

Devo vs LogRhythm SIEM

Compared 3% of the time

USM Anywhere vs LogRhythm SIEM

Compared 3% of the time

Elastic Security vs LogRhythm SIEM

Compared 3% of the time

More LogRhythm SIEM Competitors

TrendAI Tipping Point vs Palo Alto Networks AutoFocus

Compared 10% of the time

Recorded Future vs Palo Alto Networks AutoFocus

Compared 10% of the time

Cisco Threat Grid vs Palo Alto Networks AutoFocus

Compared 7% of the time

ZeroFOX vs Palo Alto Networks AutoFocus

Compared 7% of the time

Kaspersky Threat Intelligence Portal vs Palo Alto Networks AutoFocus

Compared 3% of the time

More Palo Alto Networks AutoFocus Competitors

Product Reports

Buyer's Guide

LogRhythm SIEM

September 2026

Download LogRhythm SIEM product report

Buyer's Guide

Threat Intelligence Platforms (TIP)

August 2026

Download Palo Alto Networks AutoFocus product report

Also Known As

LogRhythm NextGen SIEM, LogRhythm, LogRhythm Threat Lifecycle Management, LogRhythm TLM

Palo Alto Threat Intelligence Management

Overview

LogRhythm SIEM offers advanced threat intelligence, scalable deployment, and streamlined log management. It enhances security posture with AI-driven threat detection and comprehensive monitoring.

LogRhythm SIEM stands out for its AI-driven threat correlation, ease of log aggregation, and robust reporting. Offering real-time visibility and analytics through consistent navigation and dashboards, it integrates with security components for enhanced monitoring and response. Advanced threat intelligence and customizable alerts streamline processes and bolster security. While it faces challenges with log parsing, reporting, and dashboard intuitiveness, plans to enhance cloud integration and transition to Linux are noted.

What are the standout features?

AI Threat Correlation: Employs AI to correlate threats for efficient detection.
Log Aggregation: Simplifies the collection of logs from multiple sources.
Scalable Deployment: Offers flexible scaling to accommodate growth.
Robust Reporting: Provides detailed analysis for informed decisions.
Advanced Threat Intelligence: Engages cutting-edge techniques to assess threats.

What benefits and ROI can users expect?

Improved Security Posture: Enhanced threat detection and response.
Streamlined Processes: Automation leads to efficiency gains.
Comprehensive Compliance: Facilitates adherence to regulatory standards.
Centralized Log Management: Unified log overview aids in quick insights.

In industries like banking and finance, organizations utilize LogRhythm SIEM for centralized log management, security monitoring, and compliance. It helps detect insider threats, analyze server logs, correlate events, and monitor user behaviors. Appreciated for log ingestion and anomaly identification, it ensures robust cybersecurity and incident response by integrating data from multiple sources.

Exabeam

Palo Alto Networks AutoFocus delivers valuable threat intelligence with features like simplified search and alerting, seamless integration into Palo Alto platforms, and advanced threat detection, supporting network security efforts.

AutoFocus is recognized for its user-friendly dashboard, facilitating efficient threat detection and intelligence through features like reputation scoring and behavioral analytics. Integration with other Palo Alto Networks tools enhances threat management capabilities. Users highlight a need for more detailed technical documentation and direct integration of threat intelligence feeds. Enhancements in integration with Cortex XDR and zero-day vulnerability coverage are also suggested. Offering managed detection and response features and revising the pricing model can enhance its market position.

What are the key features of Palo Alto Networks AutoFocus?

User-friendly dashboard: Simplifies threat management and visualization.
Advanced threat detection: Utilizes behavioral analytics and reputation scoring.
Integration capabilities: Seamless with Palo Alto Networks tools.
Threat tag searching: Facilitates granular investigations.
Custom exports and reports: Supports comprehensive data analysis.

What benefits should users consider when evaluating AutoFocus?

Comprehensive security intelligence: Enhances threat detection and alert management.
Efficient integration: Leverages Palo Alto Networks environment for seamless operation.
Detailed threat reports: Supports informed decision-making.
Effective threat correlation: Improves network security posture.
Enhanced alert capabilities: Facilitates proactive threat response.

Enterprises in industries such as finance and healthcare often utilize Palo Alto Networks AutoFocus for robust network security. The tool aids in identifying and correlating threats, leveraging integration with Palo Alto products for enhanced monitoring. Unit 42's proprietary intelligence further supports threat analysis, bolstering network security frameworks through efficient data correlation and integration with security playbooks.

Palo Alto Networks

Sample Customers

Macy's, NASA, Fujitsu, US Air Force, EY, Abbott, HD Supply, SAB Miller, UCLA, Raytheon, Amtrak, Cargill

Telkom Indonesia

Buyer's Guide

Security Information and Event Management (SIEM)

September 2026

Download Free Report

Find out what your peers are saying about Splunk, IBM, Microsoft and others in Security Information and Event Management (SIEM). Updated: September 2026.

DOWNLOAD NOW

913,683 professionals have used our research since 2012.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.