Rapid7 InsightIDR vs SolarWinds Security Event Manager comparison

Rapid7 InsightIDR vs. SolarWinds Security Event Manager

Download the complete report

Helped 885,264 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Rapid7 InsightIDR

Ranking in Security Information and Event Management (SIEM)

21st

Average Rating

8.4

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (10th), Endpoint Detection and Response (EDR) (34th), Threat Deception Platforms (8th), Extended Detection and Response (XDR) (20th)

SolarWinds Security Event M...

Ranking in Security Information and Event Management (SIEM)

35th

Average Rating

7.8

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of March 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Rapid7 InsightIDR is 2.1%, down from 2.6% compared to the previous year. The mindshare of SolarWinds Security Event Manager is 1.0%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Rapid7 InsightIDR	2.1%
SolarWinds Security Event Manager	1.0%
Other	96.9%

Security Information and Event Management (SIEM)

Featured Reviews

SohailHyder

Head Of Cyber Security at Super Secure

Has supported compliance needs for mid-sized organizations but lacks customization and advanced integration

If we pitch Rapid7 InsightIDR against solutions such as SIEMs from Splunk or LogRhythm, it is not as customizable as a SIEM solution is. This is where it can improve if we keep in front the feature sets of a complete SIEM solution. Most common in the market is QRadar, but it is depleting now. It has been taken over by some other products such as Splunk and LogRhythm. If we compare these things with Rapid7 InsightIDR, then there are definitely some gaps that need to be filled. Data retention is also one concern because Rapid7 InsightIDR is cloud-based and operates on a subscription model. Whatever data you want to retain, it has to be paid for separately or it has a cost. Other solutions that are on-premises can have their own infrastructure or they provide some data retention for a month or in some capacity-wise, they provide that solution to them which makes them more attractive.

Read full review

Yashokanth Partkunan

Managed Services Engineer at Loop1 Systems

Has supported client needs efficiently but requires deeper analysis features and faster support

The log analyzing capability of SolarWinds Security Event Manager should go into more depth than the current environment. More modification and enhancements are required on the dashboard side in order to make it closer to optimal performance. From observation and feedback from users, they need more functionality related to monitoring, and in-depth analyzing needs to be improved.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The web interface is great — very useful and user-friendly."

"Features for user behavior analytics and the rules for attack review are good."

"InsightIDR helps us investigate an environment to discover information about incidents."

"It improves because several sensors are deployed within the on-premise environment. It can be very efficient if the customer implements and operates it effectively."

"The incident case management is the most valuable feature. Even though there's always something I find I would like to add to that feature, the ability to quickly sort through all the logs, network and endpoint data, etc., and add it to an incident case as part of the investigation, is nice. Having it automatically timeline that additional data into the original incident timeline, and correlate it to other notable events and activities on the network, results in a huge improvement in our overall confidence that we've quickly traced down the right source of an issue."

"Enables the use of honey pots, honey users, and honey files to monitor for suspicious patterns."

"Rapid7 InsightIDR is budget-friendly and has a good market position because not everybody can afford to go for LogRhythm or Splunk or QRadar."

"This is a great product and the team is very willing to work with companies."

More Rapid7 InsightIDR pros

"The solution helps you monitor database instances, application instances, other customer application things, Linux servers, IBM servers, and Oracle servers."

"It has in-depth monitoring capabilities and an easy way for setting up dashboards."

"It has in-depth monitoring capabilities and an easy way for setting up dashboards. I can expand in various areas, or I can reduce areas. It supports different types of breakdowns, filters, and rules. It is very simple for an out-of-the-box type of product. It doesn't take a lot of time to figure it out, which is unlike some of the solutions that I have looked at. It meets all the aspects."

"The most valuable feature is the ease of use for the end user."

"It's easy to build rules and actions based on the logs and event types we collect with the software."

"The solution helps me to go back in time and search for different events. For example, if you wanted to know who activated an account; you could go back in time and find out."

"User-friendly configuration is key, and the configurations are simple, not complex."

"The most valuable feature of SolarWinds Security Event Manager is the analysis and the knowledge about the incidence that we trace."

More SolarWinds Security Event Manager pros

Cons

"I'd like to see a mobile application included and some feature related to the generality of segregation for internal users that access the application."

"It would be useful to import threat intelligence in YARA format along with known incorrect email addresses."

"Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one."

"Personally, I feel it would greatly benefit from more supported log sources."

"The APIs can be further improved in Rapid7."

"I'd like to be able to get the compliance report within the solution which is currently not possible."

"The reporting is the weakest aspect. There needs to be multi-level grouping for events (for example, group by user and destination)."

"There are certain limitations with Rapid7 that I am working on."

More Rapid7 InsightIDR cons

"SolarWinds should improve its correlation capabilities. The correlation does not automatically detect and reduce the events fast enough."

"Under the new system, it is not upgradable the way they say. When you try to do an upgrade, it doesn't really work unless you dump everything and start from scratch. You lose a lot of your nodes. Whenever you set your nodes up and everything else, they don't want to bring those nodes back in, so you have to really go back and restructure all your nodes. I went from version 6.5 to version 6.6 and then to version 6.7. I then went to version 2019, and now it is version 2020. It would be good if we can upgrade without having to delete everything and start from scratch. They can maybe build more KPIs and other things for the dashboard. Some of the other systems already have built-in KPIs. SolarWinds is starting to catch up, but it is not there yet. They can include some of the business or industry standards for tracking the time, that is, the meantime to detect (MTTD) and the meantime to resolve (MTTR). They can also find a way to build a KPI that measures the number of instances of port scans experienced in a week or a month."

"The only issue is the pricetag. SolarWinds is a costly solution."

"The company had to use a third party for the implementation of the solution."

"There is no correlation made between log entries, so no threat information is presented."

"Training for this solution needs to be improved, as new employees are sometimes unfamiliar with the product."

"The solution was a little slow when running some larger queries."

"The query capability in this solution needs improvement."

More SolarWinds Security Event Manager cons

Pricing and Cost Advice

"Rapid7 InsightIDR is a cheaply priced product. On a scale of one to ten, where one is very expensive, and ten is very cheap, I rate the product's price at seven or eight."

"The solution has a mid-range price point in the market"

"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."

"It is on a yearly basis. For our own company, for about 250 users, it was 16,000 euros a year."

"The pricing is good, and it is not very expensive."

"The pricing and licensing are competitive."

"It is a reasonably priced solution."

"Rapid7 InsightIDR's pricing is reasonable but we have challenges with the Minimum Order Quantity. It is not reasonable for customers who have less than one hundred devices. If they can reduce Minimum Order Quantity, it is good. You have to pay around 5000-6000 dollars per year for the product. The pricing includes maintenance and support costs."

More Rapid7 InsightIDR pricing and cost advice

"The tool is available at a good price for customers compared to other solutions in the market. I rate the product's price as an eight out of ten."

"Licenses can only be purchased in blocks of fifty at a time."

"Licensing is on devices, so if you have many, then this may be high."

"The pricing model would benefit from having package deals with other SolarWinds products."

"The price of SolarWinds Security Event Manager is reasonable."

"It is in the appropriate mid-range. It is not as expensive as some of the other solutions. It is also not cheap."

"We do a yearly license renewal. For a year, the solution costs roughly $500,000 USD. There are no costs beyond this yearly fee."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

885,264 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

10%

Financial Services Firm

Manufacturing Company

Government

Financial Services Firm

12%

Manufacturing Company

11%

University

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	5
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	19
Midsize Enterprise	3
Large Enterprise	7

Questions from the Community

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

What is your experience regarding pricing and costs for Rapid7 InsightIDR?

The product pricing is very cheap.

What needs improvement with Rapid7 InsightIDR?

What is your experience regarding pricing and costs for SolarWinds Security Event Manager ?

The tool is available at a good price for customers compared to other solutions in the market. I rate the product's price as an eight out of ten.

What needs improvement with SolarWinds Security Event Manager ?

What is your primary use case for SolarWinds Security Event Manager ?

I work with all SolarWinds products mostly, including Network Configuration Manager and NPM. I am a reseller. I usually recommend SolarWinds products for Loop1. It's for the bigger ones; we are the...

Microsoft Sentinel vs Rapid7 InsightIDR

Comparisons

Compared 5% of the time

Splunk Enterprise Security vs Rapid7 InsightIDR

Compared 5% of the time

Rapid7 InsightVM vs Rapid7 InsightIDR

Compared 4% of the time

CrowdStrike Falcon vs Rapid7 InsightIDR

Compared 4% of the time

Darktrace vs Rapid7 InsightIDR

Compared 3% of the time

More Rapid7 InsightIDR Competitors

Splunk Enterprise Security vs SolarWinds Security Event Manager

Compared 13% of the time

Wazuh vs SolarWinds Security Event Manager

Compared 7% of the time

IBM Security QRadar vs SolarWinds Security Event Manager

Compared 7% of the time

ManageEngine Log360 vs SolarWinds Security Event Manager

Compared 7% of the time

LogRhythm SIEM vs SolarWinds Security Event Manager

Compared 4% of the time

More SolarWinds Security Event Manager Competitors

Product Reports

Rapid7 InsightIDR

Download Rapid7 InsightIDR product report

SolarWinds Security Event Manager

Download SolarWinds Security Event Manager product report

SolarWinds Security Event Manager report

Also Known As

InsightIDR

SolarWinds LEM, Solarwinds SIEM, TriGeo, Log and Event Manager

Overview

Parsing hundreds of trivial alerts. Managing a mountain of data. Manually forwarding info from your endpoints. Forget that. InsightIDR instantly arms you with the insight you need to make better decisions across the incident detection and response lifecycle, faster.

Rapid7

When TriGeo was acquired by SolarWinds, TriGeo SIM became known as SolarWinds Log & Event Manager. This product is a leading Security Information and Event Management (SIEM) product and log management solution, which provides log collection, analysis, and real-time correlation.

SolarWinds

Sample Customers

Liberty Wines, Pioneer Telephone, Visier

NetSuite, EasyStreet, Legacy Texas Bank, and Energy Federal Credit Union, to name a few.

Rapid7 InsightIDR vs. SolarWinds Security Event Manager