Are you using a SIEM product? If yes, which one and what has been your experience so far w.r.t  1. Implementation 2. Effectiveness 3. TCO

163 viewscircle icon1 Upvotecircle icon3 Comments
Sort by:
VP of IT Operations in Software5 years ago

We keep cycling through different options. The SaaS models for this get expensive fast, or you sacrifice data because of cost.  The on prem or open source options require a lot of dedicated time to configure.

Chief Security Officer in Software5 years ago

Elastic and Splunk. Easy, effective, but expensive.

Principal Information Security Officer in Education5 years ago

Elastic SIEM with DIY customizations.
1. Fairly straightforward OOTB.
2. Very.  Does exactly what we ask it to do.
3. TCO is much better than the RSA Security Analytics / Netwitness SIEM it replaced.

Lightbulb on1

Content you might like

Yes, we have many27%

Yes, we have a few62%

We have some but don’t really enforce them8%

We don’t have policies in place to protect documents1%

View Results

Compliance requirements25%

Operational objectives65%

Ease of implementation8%

Cost

View Results