Exabeam Reviews

I'm an IT specialist and we are resellers of Exabeam. We have it deployed as an on-premise demo test cluster for customer POC. We use it mainly for management and for CM use cases to enable an overview of security events as well as user analytics. 

With E8, the advanced analytics has a really great overview of user behavior. I like the timeline feature the most.

The product could be improved by implementing cost use cases. I believe if it were more flexible it would be a better product. 

For additional features, I'd like to see more visibility in the networking.

We've been using the latest version of this product for the past six months. 

It's a stable product, no problems. 

Our company doesn't have a huge infrastructure behind the product at the moment, so it's difficult for me to comment about scalability, but I have seen customer references that state it scales really nicely. They are now working on the last big infrastructure and I know that inherently it scales well. The product is mostly for software security use cases, but in our company, only a handful of people use the product, perhaps three or four. In terms of our customers, I would estimate there to be between 10 and 15 users. It would mainly be infrastructure admin and security analysts using the solution.

I haven't needed to make contact with technical support. 

In production, we are actually still using QRadar in our own company simultaneously with Exabeam.

Setting up the system was relatively easy - it took about a day. Adjusting the information was an ongoing process, so I can't really give a good estimate on that.

We evaluated LogRhythm and Splunk as possible options but in the end, we went with Exabeam - it was the right choice for us taking into account the needs of our customers and projected future needs.

I would recommend the product. I don't have any warnings or anything negative to tell anyone, because there are really no problems with the solution. You can pretty much make it up as you go.

I would rate this product an eight out of 10. 

We used Exabeam as a log aggregation platform. We had a SIEM platform, Exabeam, that was ingesting logs from various vendors hosting EDR solutions on behalf of our clients. Exabeam allowed us to parse logs from sources like CrowdStrike, Palo Alto, or Windows logs, all into one platform.

The UI was very clean. Its identity and access management were robust. We had many colleagues interacting with it, and when I was adding parsing rules or configuring other changes, I could propagate those changes in real-time very fast.

One area that needs improvement is interacting with Exabeam's API. There was a headache regarding the API; the documentation wasn't clear, and the syntax wasn't very precise. This situation arose when we needed to retrieve a list of public IPs to block, and it required interacting with Exabeam's API on the cloud platform.

I worked with Exabeam for about three months during an internship engagement at Grant Thornton. The last time I used it was more than a year ago.

The solution is stable.

There was a fair bit of latency when accessing it via a web browser. The platform seems to be very application intensive, which led to some pet peeves regarding latency.

The customer support was quite good. They had a solid customer support platform, and their responses were always very instantaneous. Early in my internship, we needed access to the platform to start learning, and Exabeam’s customer support quickly provided us with accounts with lower privileges.

Positive

In my own setup, I use the Elk Stack: Elasticsearch, Logstash, and Kibana, which I am more accustomed to.

I'd rate the solution six out of ten.

The most valuable feature of Exabeam Fusion SIEM is the easy-to-use user interface.

I have been using Exabeam Fusion SIEM for approximately one month.

The stability of Exabeam Fusion SIEM is good.

Exabeam Fusion SIEM can scale with the enterprise script.

I have not contacted the support from Exabeam Fusion SIEM. There is a lack of Indonesian support, it would benefit us to have more support for the customers.

The initial setup of Exabeam Fusion SIEM is complex because it needs to integrate with the SIEM solution, but after this is complete it is straightforward.

There is an annual license required to use Exabeam Fusion SIEM. The price of the solution should be reduced.

I have had several experiences with similar solutions to Exabeam Fusion SIEM and Exabeam Fusion SIEM has an easier-to-use user interface.

 I rate Exabeam Fusion SIEM a nine out of ten.