LogRhythm NetMon Reviews

Name: LogRhythm NetMon
Brand: LogRhythm
Rating: 3.8 (11 reviews)

Vendor: LogRhythm

3.8 out of 5

11 reviews
100% willing to recommend

135 followers

Start review

What is LogRhythm NetMon?

Identify Emerging Threats on Your Network in Real Time

Get the LogRhythm NetMon Buyer's Guide and find out what your peers are saying about LogRhythm NetMon, Zabbix, SolarWinds NPM and more!

LogRhythm NetMon is the #58 ranked solution in best Network Monitoring Tools. PeerSpot users give LogRhythm NetMon an average rating of 7.6 out of 10. LogRhythm NetMon is most commonly compared to Zabbix: LogRhythm NetMon vs Zabbix. LogRhythm NetMon is popular among the large enterprise segment, accounting for 65% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 27% of all views.

Helped 849,686 peers since 2012

Featured LogRhythm NetMon reviews

AshishDubey

Product manager at Tata Communications Ltd

I have not worked much on LogRhythm NetMon to be able to comment on what needs improvement in the product since there is another team in our company that is working on the solution presently. LogRhythm NetMon's pricing model is an area of concern that should be made a little bit cheaper in comparison to the other players in the market currently. With players like IBM QRadar that propose QNI or Darktrace in the market, LogRhythm NetMon needs to consider a reduction in its pricing model.

Read full review

KeithGalleros

Information Security Analyst at Detecon Al Saudia Company Limited

The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for easier management. I'd also like to see LogRhythm NetMon improve in terms of cost efficiency, especially regarding adding new products that may overlap in functionality. Specifically, I would appreciate enhanced detection and response capabilities directly integrated into NetMon to avoid needing additional rules or tools from LogRhythm. Regarding integration capabilities, I think NetMon's current agent-based approach is limiting. Integrating with protocols like Gflow and Netflow would be better, allowing seamless integration with our existing network equipment. This would solve the problem of agent-based restrictions and improve overall integration.

Read full review

KuldeepBurra

Co-Founder & Managing Director at Halainfosec

The selling point for LogRhythm is the SIEM solution, SOAR, and competitive pricing against QRadar, Sentinal, Splunk, or any other tool in the market. We started using LogRhythm started back in 2013. When I joined, we only had six or seven clients, but then, in a span of two and a half years, we increased our client base from seven to 33. We're always happy with the services and the product. There were no issues. We've integrated LogRhythm with EDR, email security solutions, and DLP. We've not found any specific issues with that. Overall, I rate the solution an 8 out of 10.

Read full review

LogRhythm NetMon mindshare

As of April 2025, the mindshare of LogRhythm NetMon in the Network Monitoring Software category stands at 0.3%, down from 0.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Network Monitoring Software

PeerResearch reports based on LogRhythm NetMon reviews

Type	Title	Date
Category	Network Monitoring Software	Apr 30, 2025	Download
Product	Reviews, tips, and advice from real users	Apr 30, 2025	Download
Comparison	LogRhythm NetMon vs Zabbix	Apr 30, 2025	Download
Comparison	LogRhythm NetMon vs Auvik Network Management (ANM)	Apr 30, 2025	Download
Comparison	LogRhythm NetMon vs Datadog	Apr 30, 2025	Download

Title	Rating	Mindshare	Recommending
Zabbix	4.2	13.0%	95%	106 interviews Add to research
SolarWinds NPM	4.1	4.7%	92%	158 interviews Add to research

Valuable Features

LogRhythm NetMon offers log aggregation, analytics, and seamless log processing. Its ease of use and visibility into network traffic are highlighted, with features like traffic analysis, customization dashboards, and protocol monitoring. The solution's correlation and AI capabilities enhance threat detection. Users appreciate the bundled package offering extensive insight into network and user activities, leveraging AI-based security operations for threat management, compliance, and correlation.

"The initial setup is straightforward because we can deploy an open server."
"LogRhythm NetMon's most impressive feature is that it's a bundled package, so you're not just relying on monthly data; you get a six-month view for more comprehensive indicators of compromise. This dual approach is precious. We implement LogRhythm NetMon in our cybersecurity strategy mainly for compliance and correlation of network, user, and decision activities, particularly for network firewalls and access control."
"It has a very strong artificial intelligence engine."

Room for Improvement

LogRhythm NetMon users suggest several improvements, including better integration with third-party tools and other products, enhanced customization for analytics, and improved training and documentation. They mention the need for quicker console access and reduced lag time. Users also desire more built-in features for network visualization and operational monitoring. Concerns are raised about lacking support for recent software releases and limitations of the current pricing model and agent-based integration approach.

"The platform's integration features often need to be improved."
"The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for easier management."
"Some of the automated tasks we can perform on QRadar cannot be performed on LogRhythm because the solution has limitations."

Pricing

The pricing for LogRhythm NetMon may include additional expenses for support.

"The product is expensive for smaller companies."
"I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships."
"LogRhythm's licensing part is something that depends on the license you want since they offer it on a perpetual and subscription basis."

Popular Use Cases

Users primarily deploy LogRhythm NetMon for monitoring irregular network traffic, analyzing its origin, type, and flow. They utilize it for correlating data with other logs to assess threats and enhance network security and performance. NetMon is applied in traffic analysis, DPA, network forensics, and real-time analytics. It supports monitoring IP addresses, HTTP, HTTPS, DNS traffic, and detecting abnormal activities. Organizations employ NetMon in cloud environments, assisting multiple clients with network utilization reporting.

Service and Support

LogRhythm NetMon's customer service is often praised for its quick response, resolving issues in one or two days. Some users note the support is always timely compared to others, with a few exceptions experiencing delays. Technical support is regarded as excellent for its helpfulness and availability, offering useful community resources and deep analytics tools. Although some find the responsiveness lacking, the overall sentiment is positive, highlighting efficient and knowledgeable assistance.

Deployment

Initial setup experiences with LogRhythm NetMon varied. Some found it complex due to inexperience with SIEMs or needing multiple staff for deployment, while others described it as straightforward, with quick integration taking a few hours. Deployment often involved certified engineers, managing a distributed system, and required setting up dashboards. Familiarity with infrastructure facilitated the process, highlighting differences in individual experiences. Partners and internal teams played crucial roles in assisting with initial configurations.

Scalability

LogRhythm NetMon shows promising scalability with easy collector additions and minimal effort. Users are pleased with its capability to support multiple companies and users. However, scalability is contingent on proper sizing, and some find it limiting for advanced monitoring or extensive network expansion. Security teams and users have experienced seamless integration, while others need more time to explore its full potential.

Stability

Users report LogRhythm NetMon as stable, experiencing improvements after upgrading. The upgraded version 7.25 shows significant stability enhancements, with no performance issues or accessibility challenges. Some express satisfaction with its quick installation and proprietary nature, while others mention efficient PCAP capturing and a stable experience rated positively. A few face minor challenges but note no performance degradation or outages. The platform's stability appears consistent and reliable for different environments.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our LogRhythm NetMon Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

27%

Computer Software Company

22%

Government

10%

Insurance Company

10%

Real Estate/Law Firm

Manufacturing Company

Wholesaler/Distributor

Aerospace/Defense Firm

Outsourcing Company

University

Healthcare Company

Transportation Company

Comms Service Provider

Logistics Company

Compare LogRhythm NetMon with alternative products

Learn more about LogRhythm NetMon

Transform your physical or virtual system into a network forensics sensor in a matter of minutes for free with LogRhythm's NetMon Freemium. Your investigations will come together effortlessly with extensive corresponding metadata, full packet capture, and customizable advanced correlation.. Detect network-based threats with real-time network monitoring and big data analytics

Get the visibility you need with NetMon.

LogRhythm NetMon was previously known as LogRhythm Network Monitor .