IBM QRadar Reviews in May 2025: User Ratings, Pros & Cons

"Above average product"

What do you like best? Best in creating use cases. You need not to be a query master to create use case. Just need to have a logic. Hence, much user friendly. What do you dislike? Scaling, integration with other products is a bit difficult and for minor help IBM support keeps on pushing to take their professional services help(which comes at a cost). Recommendations to others considering the product: Professional services should be ease out for cusromers and a lot more competitive offerings ...

"I recommend IBM, since it is easy to use interface and easy to search"

What do you like best? The interface is very straight forward and live events is easy to read What do you dislike? creating correlation rule inside the interface is not easy Recommendations to others considering the product: Make sure to understand the architecture of IBM before implementing it What problems are you solving with the product? What benefits have you realized? Security incidents

"Recommended one for SOC."

What do you like best? Customisation as per requirement and details of information in events and logs. What do you dislike? I think technical support could have been better. What problems are you solving with the product? What benefits have you realized? Monitoring the logs of devices and fine tuning those devices with best practices.

"Excellent product that works using infrastructure logs"

What do you like best? Dashboards give good insights to management and technical workers. Event monitoring improves if the logs provided to qradar are specific. What do you dislike? Unable to expand storage easily using lvm. Recommendations to others considering the product: It's a really nice product, specially when you use threat intelligence component and Watson analyzer What problems are you solving with the product? What benefits have you realized? Infrastructure security, threat ...

"QRadar is still a Leader in SIEM Technology"

What do you like best? It's scalability and advanced correlation capabilities to detect cyber threats. User Interface is prety easy to use for user level analysts and for SIEM Administrators as well. I worked as an Analyst and you can easily drill down on an alert and investigate thoroughly with available logs and search for more related logs and create your investigation with searching related artifacts and create watchlists , alerts. Easily integrate with most of industry standard tools, ...

"Qradar is a best tool if you are looking for SIEM solutions. It's great tool for threat hunting."

What do you like best? It's great tool for threat hunting & log analysis What do you dislike? It's complex somewhat , difficult to analyse the logs. What problems are you solving with the product? What benefits have you realized? We use for log reporting & Analysis

"QRadar feedback"

What do you like best? vendor direct integration 2FA support for login What do you dislike? threat intelligence need more improvement What problems are you solving with the product? What benefits have you realized? better visibility

"Number 1 Recommendation for Monitoring"

What do you like best? 1. The Console is very User Friendly like any new user can use it with ease. 2. IBM Qradar Team provide the Communtity Edition for newbie for learning without expiration which is on of the best service. What do you dislike? IBM Qradar supports is not up to the mark most of the time if we raise ticket. It takes long to get resolve our problem. What problems are you solving with the product? What benefits have you realized? Reduce Threats, Real time monitoring, Compliance

"IBM Qradar review"

What do you like best? QRadar is one of the best SIEMs around for large organisations dealing with huge amount of network traffic, although setting it up is a bot challenging but it makes up for it in long term durability What do you dislike? Pricing for a single tenent is not worth it. What problems are you solving with the product? What benefits have you realized? I have set it up as a SIEM solution

"A good tool with easy deployment and configuration."

What do you like best? Visibility achieved through SIEM solution What do you dislike? Applications integration which is not easy. What problems are you solving with the product? What benefits have you realized? Integration of all security assets on one console