2022-02-06T07:24:06Z

What needs improvement with IBM QRadar Advisor with Watson?

Miriam Tover - PeerSpot reviewer
  • 0
  • 12
PeerSpot user
5

5 Answers

James Riffenburg - PeerSpot reviewer
Consultant
Top 10
2022-10-18T18:35:39Z
Oct 18, 2022

The solution can be improved by lowering the cost and bettering their technical support.

Search for a product comparison
Ahmed Hossam - PeerSpot reviewer
Real User
Top 10
2022-06-26T13:06:01Z
Jun 26, 2022

Integration could be better. They should make it easy to integrate with other solutions.

RR
Real User
Top 20
2022-05-12T06:53:59Z
May 12, 2022

The AQL queries could be better. With the queries, there's an option for you to create dashboards based on the queries that they have. The documentation that is available for AQL queries is not well received. They could maybe look at how Microsoft is leveraging AQLs from a Sentinel perspective and create more documentation and training materials and make those more available to the general public. They have to facilitate more learning opportunities. Microsoft has something called Playground where you have some sample logs and where you can learn how to work on all this stuff, however, there is nothing like that for IBM. They really could make it more generalized and accessible to the general analyst population. Technical support should be improved.

SD
Real User
Top 5
2022-04-25T09:34:06Z
Apr 25, 2022

IBM QRadar Advisor with Watson could be more user-friendly. You need some skills and understanding of what you're looking at, especially if you're going to draw down specific information. Massive improvement is required in reporting. IBM QRadar Advisor with Watson is not a tool that is known for its reporting capability. It's a highly operational tool that you use for monitoring, you can sit and you can watch your alerts, whether it's flows or EPS, and you set up your playbooks directly. It is not a reporting tool. It is the worst possible tool to ever expect any reporting. It's unfortunate it's not a great reporting tool. In a future release, there could be a bit more intelligence in terms of predictive accuracy and overall predictions. I haven't been too close in the last two, three, or four months, but I certainly would expect that their technology would be simplified to provide predictive analytics as opposed to retrospective looking back and analyzing past historic data.

SU
Real User
2022-02-06T07:24:06Z
Feb 6, 2022

The IBM support can be better. It's an aspect that needs improvement. In future iterations, I'd like to see an advance in office management, the out-of-the-box use cases that are provided. That needs to be part of the requirement.

Learn what your peers think about IBM Security QRadar. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
765,234 professionals have used our research since 2012.
IBM Security QRadar is a security and analytics platform designed to defend against threats and scale security operations. This is done through integrated visibility, investigation, detection, and response. QRadar empowers security groups with actionable insights into high-priority threats by providing visibility into enterprise security data. Through centralized visibility, security teams and analysts can determine their security stance, which areas pose a potential threat, and which areas...
Download IBM Security QRadar ReportRead more

Related Q&As