The most valuable feature is user behavior analytics (UBA).
The EPS and FPS graphs are helpful.
The collecting of logs and processes is very good.
The most valuable feature is user behavior analytics (UBA).
The EPS and FPS graphs are helpful.
The collecting of logs and processes is very good.
The support process needs to be improved.
Every SIEM solution has issues with plugins, as they have to connect to different log systems. It can affect security, infrastructure, and other things. IBM should continue to expand its database and cover as many systems as possible.
I have been using IBM QRadar for about one year.
QRadar is a very stable product.
The whole process for support is something that needs to be improved. You have to create a case, export the log and attach it to the case, then an engineer will clarify what you need to export and attach it to the ticket or support case, and so on. When you're working with a system that does not have good bandwidth, it makes it even more stressful. It is a lot of work and it should be easier to do.
My colleague has worked more with support and the feedback that I have heard is that they are quite good. It's the process that I am complaining about.
The initial setup is pretty straightforward. We had several logs to integrate so it took a week and perhaps a few days.
I would rate this product a nine out of ten.
We are a system integrator and IBM QRadar is one of the security and monitoring products that we implement for our clients. It is used for monitoring applications such as Windows virtual desktop access (VDA) and computer-managed instruction (CMI).
We are using the platform version, which I like.
We have had problems with networking.
I have been using QRadar for about half a year.
We have not tried to scale because it is installed all in one machine.
The initial setup was easy and it took one day to install it.
Overall, I like this product and I think that the features are good enough.
I would rate this solution a seven out of ten.