IBM QRadar Reviews in June 2026: User Ratings, Pros & Cons

"Single pane security solution"

What do you like best? It comes with a hybrid strategy that really helped us to integrate our multi could as well as on premise infrastructure with it for seamless security vulnerabilities monitoring. What do you dislike? The integration process with Azure is bit messy. What problems are you solving with the product? What benefits have you realized? Malicious traffic, DDoS Threat detection, Admin user vulnerability.

"IBM QRadar seems to be it.IBM QRadar seems to be it.IBM QRadar seems to be it."

What do you like best? I like how it integrates TI with SIEM Solution, so it will make it as a single dashboard. The visualization looks great, the automation seems great.IBM QRadar seems to be it.IBM QRadar seems to be it.IBM QRadar seems to be it.IBM QRadar seems to be it.IBM QRadar seems to be it. What do you dislike? It needs more information for the integration part, Splunk provides it with their apps, for example if you want to integrate splunk with any solution such as Cisco ISE, ...

"Complete SIEM solution"

What do you like best? Huge variety of integrations available with multiple mechanisms What do you dislike? Visibility of data is not really good in finding the context of offenses Recommendations to others considering the product: A complete SIEM solution with multiple integrations and apps available to integrate but at the cost of less graphical context and visibility What problems are you solving with the product? What benefits have you realized? Compliance Correlation Visibility on ...

"A good product at optimum cost"

What do you like best? Ease of use to navigate. Correlation engine is good. What do you dislike? Rule creating functionality is limited. You can only create rules as per specified template of QRadar. For you to create rule by yourself by writing some query you have to learn AQL. If I have to learn AQL what is the point of QRadar rule template then. Why not allow rule creating using AQL only. Recommendations to others considering the product: It is a good product but considering changing ...

"QRadar helping university IT department with the many threats that are bombarding it"

What do you like best? I like QRadar's intuitiveness and ease of use. As a member of the IT department I use QRadar daily to look for anomalies and troubleshoot issues. QRadar helps all our staff from the systems and network teams to the security analysts. What do you dislike? There are some search features that are disappointing. If I put a filter on a search, but make a mistake with it, I have to delete the filter and then add the proper one instead of just editing the one I made the ...

"One of the best SIEM systems I worked with"

What do you like best? The GUI is nice and easy to understand.. What do you dislike? The complexity of creating new rules could sometimes be frustrating. Recommendations to others considering the product: You will need lots of external service provider hours to work and manage the Qradar SIEM. What problems are you solving with the product? What benefits have you realized? We use us as a monitoring system and security events alerting system and vulnerability scanner.

"IBM QRADAR"

What do you like best? QRADAR provides excellent display of logs which is convenient for user to understand. What do you dislike? IBM QRADAR certification is expensive for young professionals., there should be price cutting in it. What problems are you solving with the product? What benefits have you realized? I can save my infrastructure from outside cyber threats.

"A one stop solution for all your SIEM needs"

What do you like best? Offenses, Out of the box support for so many devices, Custom Rules, Fast searches, Apps What do you dislike? User Interface, it could definitely be better. What problems are you solving with the product? What benefits have you realized? Improving the security posture and monitoring of all kind of anomalies and suspicious activity inside my environment.

"QRadar is a great SIEM solution"

What do you like best? -Vulnerability Assessment -Viewing information about historical correlation runs, Historical correlation What do you dislike? API Integrations with some products and unsupported for SE linux Recommendations to others considering the product: I strongly recommended it. Because it fulfills our requirements. This is not a one of SIEM, this SIEM solution is perfect for collecting all logs from devices and endpoints and it maximizes visibility on the network, removes ...

"Good and user friendly"

What do you like best? First of all, this tool has documentation for everything even for writing regex. Ibm security learning academy helps us with the video tutorials. Sample use cases. Ibm support is there to help us if we face any issue. Overall it is very easy and user friendly to use. What do you dislike? Some of the dsm are not there. For that we have to raise RFE and it will take months to develop in their end. But as from customer requirement, we need to ask permission regarding ...