IBM Security QRadar SIEM vs. Splunk Enterprise

IBM Security QRadar SIEM

284 Reviews and Ratings

Splunk Enterprise

476 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
IBM Security QRadar SIEM	Score9 out of 10	N/A	IBM Security QRadar is security information and event management (SIEM) Software.	N/A
Splunk Enterprise	Score8.5 out of 10	N/A	Splunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.	N/A

Pricing

IBM Security QRadar SIEM

Splunk Enterprise

No answers on this topic

No answers on this topic

Pricing Offerings
IBM Security QRadar SIEM	Splunk Enterprise
Free Trial
Yes	Yes
Free/Freemium Version
No	Yes
Premium Consulting/Integration Services
No	No

No setup fee

No setup fee

—

—

Community Pulse
Key User Insights
	IBM Security QRadar SIEM	Splunk Enterprise
Considered Both Products	IBM Verified User Chose IBM Security QRadar SIEM Both solutions are similar in functionality and reputation; however, our team was able to get a better combination of security tools from IBM that would have provided us with end-to-end capabilities for our security requirements. Additionally, our existing team already had … Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM QRadar and Splunk are comparable SIEMs. It just all depends on the nature of your environment and preference. Incentivized Helpful? Bruce Perlmutter System engineer in Engineering (Computer Networking, 1001-5000 employees) Chose IBM Security QRadar SIEM Splunk is more of a log manager. Incentivized Helpful? Izidio Loyola Andolfato da Rosa Senior Analyst in Information Technology at Paraná Banco S/A (Financial Services, 501-1000 employees) Chose IBM Security QRadar SIEM We chose QRADAR, because Splunk needed more time for creating parsings and creating correlations between different systems. Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM I would always recommend Splunk over IBM Security QRadar SIEM unless you're trying to save money or only onboarding and normalizing well known data sources. IBM Security QRadar SIEM doesn't seem to handle RBA and complicated, chaining correlation rules very effectively and if I … Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM We chose IBM Security QRadar SIEM not only because it was a leader but because it convinced us it was a solid product suitable for multiple scenarios but most importantly we needed a really secure and powerful software for our infrastructure. Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM Because they are the best and most used tools in the Cyber Security market for event correlation. Incentivized Helpful? Kenhy Dalglish Suarez Jaimes Senior in Information Technology at EY (Information Technology & Services, 10,001+ employees) Chose IBM Security QRadar SIEM QRadar is simpler when it comes to threat hunting Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM User friendly and use case management portal which helps to get brief idea about security posture based on mitre mapping is best thing i have experienced in qradar. Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its … Incentivized Helpful? Marco Mondelli Senior Security Specialist in Engineering at Accenture (Telecommunications, 1001-5000 employees) Chose IBM Security QRadar SIEM It's in the middle of this chart, Splunk from my point of view it's still the best SIEM actually and Sentinel it's very easy to use. Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM IBM Qradar is cheaper and also easy to use. For splunk you need dedicated team of experts. Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM As a part of core security service provider, we could not stand with the tools that are used as a generic data processor. The compliance, log reading and events are well managed in QRadar compared to other tools Incentivized Helpful? ısa baser Security Engineer in Information Technology at BGA Cyber Security (Computer & Network Security, 51-200 employees) Chose IBM Security QRadar SIEM roi (return of investment) is better for Qradar SIEM. Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM Much less manual work and easier integration. Incentivized Helpful? Tobin Mathew SIEM Admin in Information Technology at CyberProof (Information Technology & Services, 10,001+ employees) Chose IBM Security QRadar SIEM More User-friendly in creating use cases. Managing offenses. Identifying issues more easily. Everything is accessible in fingertip. Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM We chose QRadar based on its flexibility and open platform for integrations. Compared to the other tools that we review QRadar just had the most of the features that we felt were relevant. Incentivized Helpful? Muhammed Ali CETİN Information Technology Security Engineer in Information Technology at Yapı Kredi Teknoloji (Banking, 10,001+ employees) Chose IBM Security QRadar SIEM IBM is more user-friendly if we compare it with ELK stack and ArcSight. Much reliable, and have better Support. Onboarding data, creating correlation searches, and easier to integrate with 3rd party solutions as well. LogOps projects and less time-consuming products. Qradar … Incentivized Helpful? Muhannad Zarour Senior Cybersecurity Consultant/Trainer in Information Technology at IT Security C&T (Information Technology & Services, 11-50 employees) Chose IBM Security QRadar SIEM Very close competition but IBM QRadar stands out; other IBM products support the cybersecurity monitoring and IR function. Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM User friendly interface and easy to install and implementation. A lots of Log source types ( more than 400) and DSM Editor with standard regexp. Demo version IBM Qradar CE help to practice and learn how it's work and allow you to test scripts before applying them on deployment … Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM It was on the easier side for use and can be stable. Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM Overall each of these platforms have great features and need to be properly reviewed and tested for your specific needs Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM The product price, ease of deployment and support availability Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM With IBM supplying this solution, you're inherently getting the globally recognized IBM support environment as well. As an enterprise solution, Qradar is among stiff competition but the reliability and availability make it a cut above the rest. While I also recommend … Incentivized Helpful?	Cisco Allan Crittenden Edwards Security Analyst in Information Technology at Eastern Michigan University (Higher Education, 1001-5000 employees) Chose Splunk Enterprise We had an old version of QRadar before Splunk. It was difficult to customize and difficult to pull in our data sources. It wound up being neglected and not providing value for us as an institution. We have also looked into other things like AlienVault but in general, the … Incentivized Helpful? Verified User Chose Splunk Enterprise More features and easy to manage once configured and setup correctly. Stronger correlation engine compared to other products. Easily integrates with ServiceNow for ticket creation, automation, and building workflows. Helps in AiOPS more, as compared to other tools. Provides … Incentivized Helpful? Kenneth Taitingfong Splunk Architect / Engineer in Information Technology at CRGT Inc. (Information Technology and Services, 1001-5000 employees) Chose Splunk Enterprise Splunk is certainly much more versatile than either of these three products. Unless ArcSight makes a "connector" for your product, you will be required to use Flex Connectors which is an additional license and apparently requires some serious development. Without Logger, you … Incentivized Helpful? Nitin Umbardand Director Cybersecurity Business in Information Technology at Benelec Infotech Pvt Ltd (Computer & Network Security, 51-200 employees) Chose Splunk Enterprise Able to show more than Log data in Splunk views, we tested several plug-ins during a small pilot, and we were able to bring O/S (Win/Unix/Linux) & APM data metrics into the same views as Logged data. I've seen others use it to visualize a wider range of data types, too...better … Incentivized Helpful?
	Would buy again
	No answers on this topic	No answers on this topic
	Delivers good value for the price
	No answers on this topic	No answers on this topic
	Happy with the feature set
	No answers on this topic	No answers on this topic
	Lived up to sales and marketing promises
	No answers on this topic	No answers on this topic
	Implementation went as expected
No answers on this topic	No answers on this topic

Features

IBM Security QRadar SIEM

Splunk Enterprise

Comparison of Security Information and Event Management (SIEM) features of IBM Security QRadar SIEM and Splunk Enterprise
Feature	IBM Security QRadar SIEM 8.5 69 Ratings	Splunk Enterprise 7.1 56 Ratings
Centralized event and log data collection	9.927 Ratings	9.055 Ratings
Correlation	8.669 Ratings	9.054 Ratings
Event and log normalization/management	9.527 Ratings	9.555 Ratings
Deployment flexibility	7.827 Ratings	7.050 Ratings
Integration with Identity and Access Management Tools	8.965 Ratings	6.051 Ratings
Custom dashboards and workspaces	7.569 Ratings	5.956 Ratings
Host and network-based intrusion detection	9.725 Ratings	4.939 Ratings
Data integration/API management	9.07 Ratings	8.06 Ratings
Behavioral analytics and baselining	7.648 Ratings	5.96 Ratings
Rules-based and algorithmic detection thresholds	8.049 Ratings	7.56 Ratings
Response orchestration and automation	7.75 Ratings	7.05 Ratings
Reporting and compliance management	7.947 Ratings	6.46 Ratings
Incident indexing/searching	8.97 Ratings	6.57 Ratings

User Ratings
	IBM Security QRadar SIEM	Splunk Enterprise
Likelihood to Recommend	8.4 (89 ratings)	7.8 (73 ratings)
Likelihood to Renew	7.3 (4 ratings)	10.0 (17 ratings)
Usability	9.1 (1 ratings)	8.2 (6 ratings)
Availability	- (0 ratings)	10.0 (1 ratings)
Support Rating	8.1 (62 ratings)	8.4 (17 ratings)
Online Training	- (0 ratings)	8.0 (1 ratings)
Implementation Rating	- (0 ratings)	9.0 (2 ratings)
Ease of integration	8.1 (58 ratings)	- (0 ratings)
Product Scalability	- (0 ratings)	9.1 (1 ratings)