LogRhythm NextGen SIEM Platform Reviews

Comprehensive threat detection and log management is simple. I absolutely love the UI.

The interface is extremely intuitive and the tool offers great correlated insights, which are easy for the user to interpret.

Scalability could be an issue. There are few opportunities for customization and flexibility.

Deployment of the tool can also prove to be cumbersome and requires some enhancements.

LogRhythm SIEM helps us address the challenge of managing and analyzing vast amounts of log and event data generated by diverse systems and applications. ith its centralized log and event management capabilities, LogRhythm SIEM simplifies incident investigation and forensics. It provides security analysts with the necessary tools and context to investigate security incidents, conduct forensic analysis, and perform root cause analysis, leading to faster and more accurate incident resolution.

Event management and log management function is easy to use

We had a problem with the DELL server and it was hard to back up the log

Managing and securing our logs

The LogRhythm web interface makes things easy to visualize and search, and newer case/incident management provides a great overall solution.

Searching older/archived logs is a bit cumbersome.

LogRhythm correlates event log data from many different devices and device types and meets logging retention requirements.

How logrhythm offers appliance, cloud and software install. This helps when you depend on a data center to provide infrastructure to spin up VM's. Also how we can customize dashboards for different teams. Restrict what other teams can see. How can we remove unwanted logs from being captured thus making appliance faster. Integration with Microsoft, such Azure and O365, specially the security components.

Integration with not well known devices, such mikrotik. I could leverage API, but there are not much information on how to use API. This is not Logrhythm fault, but I would like to see more local groups that are using Logrhythm to collaborate so we can discuss issues or features that can benefit each other.

Logrhythm has integration with many software and appliances. Sometimes integrations are not easy, but once integration is done, Logrhythm can pretty much alert on anything.

Alerts, that's the core for us, data storage and plus nice dashboards that we can broadcast to upper management. Also how we can customize dashboards for different teams. Support is amazing. Incident response is great, Logrhythm community is amazing. Pro support is great too. It has helped spot attacks on web services, DMZ, web pages, network equipment ans users.

LogRythm NextGen SIEM is a very useful addition to the security infrastructure. Through LogRythm it is possible to monitor all the devices within the network and get real-time alerts regarding security incidents. Investigating a security incident through LogRythm is very easy because the tool grabs the necessary information and provides it to the user. The suggested response increases the speed of the response. LogRythm also has very interactive interfaces which make it easy to use.

There is nothing bad to say about this product.

I would recommend LogRythm for use in an organizational enviornment.

LogRythm allows us to easily monitor, track and resolve security incidents.

LogRhythm is one of the best SIEM solutions i have used so far. it provide security analysts ability to perform quick drill down investigations and do deep analysis of the security incidents. It has a easy to use UI design and performing investigations on the LogRhythm is very easy. Quick filters in the investigations are also very helpful in investigations.

Ability to integrate all the major product and services logs, as well as support for all the one offs.

It has a user-friendly dashboard. Therefore, even a beginner can easily understand and monitor the dashboard. Also, I like to dark theme of the LogRhythm.

It was competitively priced compared to other SIEM solutions and they helped with the entire deployment so that was greatly appreciated.

The best part of the SIEM is the quick review of logs. Customer service responses quickly, and continues until the problem is resolved. Installation was not difficult, but configuration is the biggest challenge. Linux systems are simple to configure for log forwarding but the Windows side required some research and trial and error. There are some components in my network that had to be upgraded to integrate with the SIEM.

Actually, the correlation is a little bit difficult thing. So, you should have a good knowledge of that. Also, somewhat expensive when compared with other similar products.

Product implementation is somewhat difficult and we faced some log parsing issues when the logs were forwarded from Arcsight SIEM log forwarder to the LogRhythm log Collectors.

I don’t like the login screen. I just think it doesn’t fit well with a security management tool. Also, LogRhytm needs to improve with its documentation. There are too many tutorials written, but maybe adding video content with the most common issues could work better. Also, the information showed when an alarm rings should be configurable, in order to show only the priority data.

The professional service guys are great. They always seem to be up for a challenge. We've had some interesting items pop-up where those guys will dig right in to attempt to get what we need via an alarm, dashboard, or report.

LogRhythm AI engine rules and alarm system is very helpful to detects malicious activities quickly. Use-Cases can create with various functionalities that is very helpful while creating effective use cases.Another super feature is LR search option. we could run a log search with different type of filters for given time period. LR event search feature always helps to catch AI engine rules and also logs that became events.This feature very helpful while incident investigating.

LogRhythm is very flexible, you can either run it virtually, on your own hardware or using an Appliance. It is straightforward to set up exactly how you want it, whether you are an IT department or a stand-alone SOC.

Customer support is amazing & I had some P1 & P2 cases with them & got support immediately

Nothing so far but they should have trial option available for future customers

Have a call with Sales team & go for a demo

Monitoring Network

UI is amazing & easy to use. They have proper documentation & training available

No trial available like other SIEM products

Amazing SIEM , may be one of the best currently

Incident Response,

Reduce response time

I actually prefer it over Splunk. Clean and simple layout, easy on the eyes. Threat Activity map is great!

Some of the general downside aspects would include cost and continued cost to operate and own a copy of this software.

Problems that I am solving include determining and neutralizing threat actors and having a clearer picture overall of the threat landscape.

You can correlate logs and create actions

There are many programs needed to run the software

If you need a Correlation of logs and create appropriate action for an event

Overwhelming of logs from different devices