IBM QRadar Reviews in May 2025: User Ratings, Pros & Cons

"Easy to learn for beginners"

What do you like best? IBM QRadar is a very good tool for the beginners. It has a good UI which allows us to get the information required easily. The tabs provide an easy overview of the events. What do you dislike? It doesn't provide all the details required. The raw data isn't enough for detailed analysis! What problems are you solving with the product? What benefits have you realized? We are able to determine which event is getting triggered more often and are able to check what is happening.

"Threat analysis at its best"

What do you like best? It is better than other SIEM out there in the market currently What do you dislike? A touch on the costlier side and need to have good back ground in SIEM to use this Recommendations to others considering the product: The SIEM system in the market currently with lot more potential to grow in the right direction What problems are you solving with the product? What benefits have you realized? Advanced and persistent threat detection

"QRadar Review - Rick Jesse"

What do you like best? Ease of use. The ability to quickly find information. Rules are fairly straight forward to create and/or edit. What do you dislike? Auto detecting log sources are sometimes inaccurate, leading to duplicate and sometimes triplicate log sources. DSMs have a lot of issues with parsing for certain log sources, and there is a lack of some common DSMs. Specific reports can be difficult to create, the time series reports specifically give us the most issues. What problems ...

"Undecided"

What do you like best? Nothing particular. Layout is similar to other SIEM applications. What do you dislike? searching is not intuitive. Quick filter doesn't offer any tips or command/syntax help. What problems are you solving with the product? What benefits have you realized? We haven' identified business problems to solve yet.

"QRadar Newbie."

What do you like best? I like the discussed inter-operability between QRadar and other data sources that can be used as feeds or a database. I also like that it can be tailored to any environment with not too much effort if the environment is mature. What do you dislike? We have run into a timestamp issue whereby QRadar timestamps an event when it receives the data and creates an alert based on that timestamp vs when the event actually happened on the Network. Recommendations to others ...

"Flexible, fast, data-intensive, and evolving at a rapid pace"

What do you like best? The fact that it natively deals with flows and log sources. The QRadar app exchange is just putting the platform on steroids and expanding its capabilities limitlessly. The correlation and offense engine is very powerful, as is the framework for integrating threat and intel feeds. Tight integration with QVM, Forensics. What do you dislike? The dashboards need more visualization options and flexibility. What problems are you solving with the product? What benefits have ...

"IBM QRadar "

What do you like best? Honestly the best thing about IBM QRadar is the support. It's a very complex tool and can be very daunting to newer admins. But an email here or there or a ticket can get almost any question possible answered in a friendly and professional manner. What do you dislike? It's a very complex tool and can be daunting for new admins not familiar with it. Depending on the situation there can be a bit of a steep learning curve. Recommendations to others considering the ...

"IBM QRadar "

What do you like best? Honestly the best thing about IBM QRadar is the support. It's a very complex tool and can be very daunting to newer admins. But an email here or there or a ticket can get almost any question possible answered in a friendly and professional manner. What do you dislike? It's a very complex tool and can be daunting for new admins not familiar with it. Depending on the situation there can be a bit of a steep learning curve. Recommendations to others considering the ...

"Glad to be using QRadar"

What do you like best? The ease of searching through massive amounts of data What do you dislike? Not easy to deploy log sources especially wincollect, we have never been able to get auto log source creation to work correctly What problems are you solving with the product? What benefits have you realized? Compliance and security monitoring

"Good tool"

What do you like best? It helps find and apply info easily Its one of the best tools been used What do you dislike? There is nothing in particular that is disliked about this What problems are you solving with the product? What benefits have you realized? Notable benefits are there it helps in interacting, conveying problem solving