IBM Security QRadar SIEM vs. SolarWinds Security Event Manager (SEM)

IBM Security QRadar SIEM

SolarWinds Security Event Manager (SEM)

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
IBM Security QRadar SIEM	Score 8.9 out of 10	N/A	IBM Security QRadar is security information and event management (SIEM) Software.	N/A
SolarWinds Security Event Manager (SEM)	Score 8.0 out of 10	N/A	SolarWinds LEM is security information and event management (SIEM) software.	N/A

Pricing

IBM Security QRadar SIEM

SolarWinds Security Event Manager (SEM)

Editions & Modules

No answers on this topic

Offerings

Pricing Offerings
IBM Security QRadar SIEM	SolarWinds Security Event Manager (SEM)
Free Trial
Yes	Yes
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

Additional Details

—

More Pricing Information

Community Pulse
	IBM Security QRadar SIEM	SolarWinds Security Event Manager (SEM)
Considered Both Products	IBM Security QRadar SIEM Marcos Vinícius Cunha Information Security Chose IBM Security QRadar SIEM Due to its performance, it is a more practical way to analyze and respond to an incident. It is a graphic with good interaction and multiple integrated platforms. Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM I would always recommend Splunk over IBM Security QRadar SIEM unless you're trying to save money or only onboarding and normalizing well known data sources. IBM Security QRadar SIEM doesn't seem to handle RBA and complicated, chaining correlation rules very effectively and if I … Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM We chose IBM Security QRadar SIEM not only because it was a leader but because it convinced us it was a solid product suitable for multiple scenarios but most importantly we needed a really secure and powerful software for our infrastructure. Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM IBM Security QRadar SIEM has been quite a revolutionary siem solution compared to its counterparts. Be it the use case building to maintaining log source integrations, Qradar has proved to be one of the most efficient and easy to use solution. Having IBM SOAR along with the … Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM Because is easy to use and if you don't have analysts with database language skills IBM Security QRadar SIEM is easy to use in comparison to Splunk. Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM Because they are the best and most used tools in the Cyber Security market for event correlation. Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM It provides practicality by containing several domains in a single tenant and being able to subdivide them in a single place, in addition to the fact that the price is very competitive in the market. Incentivized Helpful? Saulo Prado /security Specialist Chose IBM Security QRadar SIEM The QRadar licensing process is based on EPS (Events Per Second) and there are no limitations on event collection, regardless of the origin of the logs. This becomes an advantage as the price is agreed between the parties before purchase, so you have knowledge of what you can … Incentivized Helpful? Janette Iris Contreras Reyes Gerente de Monitoreo y Respuesta a Incidentes Chose IBM Security QRadar SIEM friendly tool With reasonable costs with ease of integration Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM We select a IBM Security QRadar SIEM because is better to integrate a our SIEM QRADAR. Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM I still don't have experience with other SIEM solutions. Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM ArcSight is more difficult to understand and administer, and it looks more like a box for programming and needs a lot of high-level skills personnel. IBM Security QRadar SIEM is well suited for organization cybersecurity in large and medium organizations. IBM Security QRadar … Incentivized Helpful? Umair Javed soc Chose IBM Security QRadar SIEM Qradar is on my top choice because I have hands-on experience on it. on qradar it is much easier to investigate in case of any incident happend. Incentivized Helpful? Brandon Lowry Cyber Security Specialist Chose IBM Security QRadar SIEM IBM Security QRadar SIEM offers a wide range of features and capabilities, such as behavioral analysis, event correlation and incident management, making it a robust and effective choice. Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM Rapid7 InsightIDR and Paladion Incentivized Helpful? NILESH KUMAR SOC Analyst Chose IBM Security QRadar SIEM QRadar's open architecture is easy to integrate with a wide range of security tools and third-party applications, which are available at the IBM X-force library to enhance overall flexibility. Its powerful analytics and correlation capabilities provide advanced threat detection … Incentivized Helpful? Kenhy Dalglish Suarez Jaimes Senior Chose IBM Security QRadar SIEM QRadar is simpler when it comes to threat hunting Incentivized Helpful? Piyush Mittal Senior Manager Chose IBM Security QRadar SIEM I would take below parameters to say IBM Security QRadar SIEM is better than other SIEM tools such as netwitness SIEM" 1) Easy to Use Incentivized Helpful? Rahul Deshmukh Security Solutions Architect Chose IBM Security QRadar SIEM I found that IBM Security QRadar SIEM has better threat detection methods and the identification of cyber kill chains followed by attackers. Analysis of the data gives visibility that other SIEM solutions need to improve. Integration in IBM Security QRadar SIEM is also better … Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM User friendly and use case management portal which helps to get brief idea about security posture based on mitre mapping is best thing i have experienced in qradar. Incentivized Helpful? Mahmoud younis cybersecurity engineer Chose IBM Security QRadar SIEM price, to be honest IBM Security QRadar SIEM package is very good for most customers than Splunk and Sentinel Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its … Incentivized Helpful? MM Marco Mondelli Senior Security Specialist Chose IBM Security QRadar SIEM It's in the middle of this chart, Splunk from my point of view it's still the best SIEM actually and Sentinel it's very easy to use. Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM IBM Qradar is cheaper and also easy to use. For splunk you need dedicated team of experts. Incentivized Helpful? Verified User Anonymous Chose IBM Security QRadar SIEM As a part of core security service provider, we could not stand with the tools that are used as a generic data processor. The compliance, log reading and events are well managed in QRadar compared to other tools Incentivized Helpful?	SolarWinds Security Event Manager (SEM) Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) The compare well against the others - the pricing models for all but Splunk (free version) are based on EPS/TB consumed... the problem they pose is guesstimating the price tag per month. SolarWinds Security Event Manager gets around that. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) It came down to price on this one. SolarWinds gave us a great break on it. For the features that we were looking for, SolarWinds is a great value for our dollar. As far as features go, we were looking for some Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) easier to use than Splunk, light linux core Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Not applicable Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) This was the first product we used in this category and we are very happy with it. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Solarwinds Security Event Manager (SEM) is the best solution for price/performance. The solution has an easily understandable architecture and also the solution can be installed easily. The solution is a very stable and fast solution for our company size. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Ease of deployment Good UI Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Fortianalzyer can only do logs from FortiGate so usefulness is limited. Elasticsearch was a lot slower than Solarwinds and the filters were a lot harder to set up and use. The connectors for SEM were far more stable. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Splunk was a pretty good product but the licensing structure needed a lot of work. They changed the structure three times that I am aware and I still had problems understanding LogRhythm had a lot of issues correlating users to IP addresses, the mappings were frequently wrong … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) We found that SolarWinds performed poorly when the Architecture included many large data centers spread across the globe. When evaluating the SolarWinds Security Event Manager (SEM) solution we quickly realized that we needed a distributed architecture with log aggregation to … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) We chose this product because of its integration to SolarWinds Orion. We were Threat Monitor users previously. This product has been a great substitute. Dollars to dollars this product performs fairly well. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) SEM is much better value proposition due to being priced by node and not by size of the event database. It's also much easier to configure that splunk and needs much less infrastructure to run. Out of the box SEM beats splunk on functionality. We looked at many products and … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) I find Tripwire Log Center to be adequate and stable but it lacks the graphics and the unified UI that you can have with SolarWinds products. It is also not as simple to set up and operate. One more advantage that SolarWinds products have is the THWACK forum, a big user base … Incentivized Helpful? KS Kim Schroeder CTO (Chief Technical Officer) Chose SolarWinds Security Event Manager (SEM) SolarWinds Security Event Manager (SEM) is more of a complete, turn key approach to event management. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) It is a bit hard to compare, since Cortex XDR is kind of a different starship, with endpoint protection and such, and not really great for auditing Windows Event Logs. ELK stack on the other hand is free in some of it's editions but seems much similar then Cortex. SolarWinds SEM … Incentivized Helpful? Tim Short Infrastructure Administrator Chose SolarWinds Security Event Manager (SEM) We picked SolarWinds because of the better price point, integration with other SolarWinds products, and the ease of training. Because we were already familiar with the SolarWinds way of doing alerts and reports, it made this product a nice fit for our company and it has great … Incentivized Helpful? Brandon Demko Systems Administrator Chose SolarWinds Security Event Manager (SEM) We had an older version of SolarWinds SEM, however, it was not being utilized. Incentivized Helpful? AR Adam Radics Production Data Systems Superintendent Chose SolarWinds Security Event Manager (SEM) This was recommended to us by a vendor. As we were using other SolarWinds products, we did not analyze many options. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) The first reason is the ease of installation. Unlike competitor, SEM was running and partially deployed within a day. With the defaults already in the SEM, it's super easy to get result quickly, without a consultant. Also, it's not too resource-intensive, and does not … Incentivized Helpful? AG Alex Giralias System Support Engineer Chose SolarWinds Security Event Manager (SEM) SolarWinds SEM was selected because it integrates with VMAN on the Orion platform and allows all monitoring information and alerts to be aggregated in one place. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Several clients have moved away from LogRhythm because of cost. SEM offers the best ROI for the function. Its interface is much cleaner then LogRhythm. However, there is a steeper learning curve with SEM. The ease of search and data integrity offered by SEM is definitely a … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) I know the Qradar is not the right SIEM tool to compete with Solarwinds SEM but when we looked from a cost, audit & compliance perspective (which are major for many customers), we knew the log management and compliance with regulation would be achieved with SEM. But no machine … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) SolarWinds provides support so when you have problems you don't need to turn to information bases as you can just get a hold of SolarWinds support. I would say another reason for getting SEM is that it is generally easier to configure and easier to learn than the other … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) I have additionally used Netwrix Auditor, which has some similarity with SolarWinds SEM. I use both hand in hand, but typically use the SEM first since it is easier to manage. With Netwrix custom searches are more complex than customer searches in the SEM. The SEM makes it easy … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) We implemented SolarWinds Security Event Manager to replace our Cisco MARS appliance. We found the Cisco MARS appliance cumbersome and difficult to connect to and use, as well as very costly from a support and maintenance perspective. SolarWinds Security Event Manager has more … Incentivized Helpful?

Features

IBM Security QRadar SIEM

SolarWinds Security Event Manager (SEM)

Security Information and Event Management (SIEM)

Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
	IBM Security QRadar SIEM 8.5 Ratings 9% above category average	SolarWinds Security Event Manager (SEM) 8.9 Ratings 14% above category average
Centralized event and log data collection	9.90 Ratings	9.00 Ratings
Correlation	8.60 Ratings	8.00 Ratings
Event and log normalization/management	9.50 Ratings	8.00 Ratings
Deployment flexibility	7.80 Ratings	10.00 Ratings
Integration with Identity and Access Management Tools	8.90 Ratings	8.00 Ratings
Custom dashboards and workspaces	7.50 Ratings	9.00 Ratings
Host and network-based intrusion detection	9.70 Ratings	10.00 Ratings
Data integration/API management	9.00 Ratings	00 Ratings
Behavioral analytics and baselining	7.60 Ratings	00 Ratings
Rules-based and algorithmic detection thresholds	8.00 Ratings	00 Ratings
Response orchestration and automation	7.70 Ratings	00 Ratings
Reporting and compliance management	7.90 Ratings	00 Ratings
Incident indexing/searching	8.90 Ratings	00 Ratings

Best Alternatives
	IBM Security QRadar SIEM	SolarWinds Security Event Manager (SEM)
Small Businesses	LevelBlue USM Anywhere Score 3.8 out of 10	LevelBlue USM Anywhere Score 3.8 out of 10
Medium-sized Companies	Sumo Logic Score 9.4 out of 10	Sumo Logic Score 9.4 out of 10
Enterprises	Sumo Logic Score 9.4 out of 10	Sumo Logic Score 9.4 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	IBM Security QRadar SIEM	SolarWinds Security Event Manager (SEM)
Likelihood to Recommend	8.4 (0 ratings)	8.0 (0 ratings)
Likelihood to Renew	7.3 (0 ratings)	7.3 (0 ratings)
Usability	9.1 (0 ratings)	8.0 (0 ratings)
Support Rating	8.1 (0 ratings)	7.5 (0 ratings)
Ease of integration	8.1 (0 ratings)	- (0 ratings)

User Testimonials
	IBM Security QRadar SIEM	SolarWinds Security Event Manager (SEM)
Likelihood to Recommend	QRadar is very well suited on environments where there are not multiple tenants or domains, we do have success on this kind of scenario. IBM Security QRadar SIEM is less appropriate for environments with multiple tenants, specially when each tenant represent a different End Costumer (such as for MSSP companies), those environments require a high amount of rules and building blocks replications, since each tenant will have its own "BB definitions", servers, rules exception, etc. Also, some information, such as EPS count or EPS dropped are generated by QRadar's own log sources, which takes place on default domain, therefore users associated with different domain can not have access to those logs, even when the information is related to other domain's environment. For example, even if Event Collector 1 is associated to Domain A, the log informing its dropped EPS is generated by System notification, log source that must be associated to Default domain. Incentivized Verified User Anonymous Read full review	Solarwinds SEM is great for generating reports for investigation purposes. Once you set up the connectors you can walk away and the product runs without needing maintenance. It was however pretty difficult to create the reports and alerts when now starting out and it can be very intimidating for new users. Incentivized Verified User Anonymous Read full review
Pros	Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action. Facilitates security incident investigation and forensic analysis. Provides a real-time view of security events, enabling immediate incident response. Can integrate with external threat intelligence sources to enrich data and improve threat detection. Enables the generation of detailed and customized reports. Incentivized Brandon Lowry Cyber Security Specialist Read full review	SolarWinds easily provides the much needed visibily into changes in an Active Directory (AD) environment. Email alerting can be configured to alert a team if an account is locked out, disabled by another users, or if users and/or computers accounts are created. SolarWinds allowed a searchable audit feature. Microsoft Windows can be configured to log many different parts of a system, but search those logs can be difficult. SEM allows you to search for specific users or events. Incentivized Adam Morrison Director of IT Engineering Read full review
Cons	Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources. While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete. IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting. Incentivized NP Neel Patel Sr Cloud Architect Read full review	Compared to other SIEMs, there are features that are missing. Machine learning, automatic event correlation, ability to correlate multiple sources together. The UI is clunky, and the New event log analyzer page felt really disjointed from the rest of the product. In my experience, the dashboards were almost unusable. They persisted across login per device, and even then they sometimes would reset and go back to the ''Getting Started'' look. Incentivized Verified User Anonymous Read full review
Likelihood to Renew	With the arrival of IBM Security QRadar SIEM at our company, we have a better vision of all the security needs that may arise, it is a very safe software to use that prevents threats from damaging our IT environment, it is impossible to change it for another software. Incentivized Paige Jenkins Senior Telecommunications Specialist Read full review	It is pretty likely that we will renew SEM when the time comes up. It is easy to use and maintain so there isn't much of a need to replace this product. It is also a pretty fair price for the capabilities provided by the SEM Incentivized Verified User Anonymous Read full review
Usability	As a grade I give 8 as QRadar is not easy to learn. It requires some time to master it. It also needs a team of people actively working on the product. Once you learn to use it the software works very well and it is easy to correlate and understand detected threats. It only takes time to learn how to use it well and configure it properly. Incentivized Verified User Anonymous Read full review	It is very good - but you get what you pay for. The intent is not for a Fortune 500 that needs more "heavy lifting" with SolarWinds Security Event Manager & for whom the price tag is not (much of) a consideration. Incentivized Verified User Anonymous Read full review
Support Rating	Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm Incentivized Abhishek Kumar Assistant Manager Read full review	The quality of support can vary depending on whom you end up speaking with. I was fortunate enough to work with a support representative who was very familiar with the product. He had even authored some of the support documentation on the website. On the flip side, I had two other experiences where I was simply directed to online training material. Incentivized Brandon Demko Systems Administrator Read full review
In-Person Training	The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us. Incentivized Verified User Anonymous Read full review	No answers on this topic
Online Training	The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us. Incentivized Verified User Anonymous Read full review	No answers on this topic
Implementation Rating	Initial patience is required to learn how to use the product, and it takes a dedicated team to use it. One person is not enough, and it's not enough to just set it up and check it once in a while. It has to be used daily and kept under control to be used effectively Incentivized Verified User Anonymous Read full review	No answers on this topic
Alternatives Considered	I would always recommend Splunk over IBM Security QRadar SIEM unless you're trying to save money or only onboarding and normalizing well known data sources. IBM Security QRadar SIEM doesn't seem to handle RBA and complicated, chaining correlation rules very effectively and if I had to write a custom add-on for custom data, I found it easier to do so in Splunk. Incentivized Verified User Anonymous Read full review	The compare well against the others - the pricing models for all but Splunk (free version) are based on EPS/TB consumed... the problem they pose is guesstimating the price tag per month. SolarWinds Security Event Manager gets around that. Incentivized Verified User Anonymous Read full review
Return on Investment	Like any cybersecurity product, any money you don't lose on a prevented attack is money that you saved Most of the apps are free and provides great enrichment like User Behaviour Analytics Top quality alerts gives enormous value to the "passive" data that flows into the infrastructure Incentivized Verified User Anonymous Read full review	It saves a lot of time when we had issues trying to figure out where the user account lockout was coming from. With it being an affordable SIEM, we are able to have the ability to do the actions associated with a SIEM and the advantages of not “breaking the bank account”. Incentivized Verified User Anonymous Read full review
ScreenShots	IBM Security QRadar SIEM Screenshots	SolarWinds Security Event Manager (SEM) Screenshots