Try our new research platform with insights from 80,000+ expert users
Sentinel Logo

Sentinel Reviews

Vendor: OpenText
3.8 out of 5
Leave a review

What is Sentinel?

Sentinel is a full-featured Security Information and Event Management (SIEM) solution that simplifies the deployment, management and day-to-day use of SIEM, readily adapts to dynamic enterprise environments and delivers the true "actionable intelligence" security professionals need to quickly understand their threat posture and prioritize response.

Get the Sentinel Buyer's Guide and find out what your peers are saying about Sentinel, CrowdStrike Falcon, Wazuh and more!
Sentinel is the #13 ranked solution in top Security Information and Event Management (SIEM) solutions. PeerSpot users give Sentinel an average rating of 7.6 out of 10. Sentinel is most commonly compared to CrowdStrike Falcon: Sentinel vs CrowdStrike Falcon. Sentinel is popular among the large enterprise segment, accounting for 54% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 13% of all views.
Buyer's Guide
Sentinel
August 2025
Get the report
Helped 866,088 peers since 2012

Featured Sentinel reviews

Read more reviews

Sentinel mindshare

As of August 2025, the mindshare of Sentinel in the Security Information and Event Management (SIEM) category stands at 3.6%, up from 2.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Sentinel3.6%
Wazuh11.8%
Splunk Enterprise Security9.4%
Other75.2%
Security Information and Event Management (SIEM)

PeerResearch reports based on Sentinel reviews

TypeTitleDate
CategorySecurity Information and Event Management (SIEM)Aug 28, 2025Download
ProductReviews, tips, and advice from real usersAug 28, 2025Download
ComparisonSentinel vs Splunk Enterprise SecurityAug 28, 2025Download
ComparisonSentinel vs WazuhAug 28, 2025Download
ComparisonSentinel vs Microsoft SentinelAug 28, 2025Download
Suggested products
TitleRatingMindshareRecommending
CrowdStrike Falcon4.34.7%96%132 interviewsAdd to research
Wazuh3.711.8%80%48 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

Sentinel users value its Correlation Engine for policy rule generation, business intelligence for tracking activities, streamlined integration, and automation features. Its scalability, intuitive web interface, and threat visibility enhance security operations. Advanced querying supports tailored responses to threats. Anomaly dashboards facilitate zero-day attack identification, while email alerts improve monitoring efficiency. The user-friendly GUI and native integration promote ease of use. Sentinel ensures smooth connections, leveraging cloud-based capabilities to enhance threat detection.
  • "In my opinion, Sentinel's best features include that it's a very easy product to use, it's very simple, and the after-sale service is very good."
  • "We can do advanced hunting queries and modify SQL queries to get desired results based on the rules triggering over the console."
  • "The solution lets us get all the logs properly and regularly monitor customer infrastructure."

Room for Improvement

Sentinel requires enhancements in its Correlation Engine, device support, and agent development flexibility. Users find the Java desktop app and WMI integration cumbersome, preferring full web-based management. Cloud connectivity needs expansion beyond Microsoft, Google, and Amazon. The platform's user interface and dashboards are criticized for lacking simplicity and flexibility. Extensive Unix scripting skills are needed, and documentation on security aspects is insufficient. Its integration with various cloud systems and customization options also demand improvement.
  • "Price is always a consideration, so the price would be nice if it were lower."
  • "There are still a few vendor-specific devices for which Sentinel needs to work on integration, such as Netskope devices."
  • "I rate Sentinel a six out of ten for scalability."

ROI

Sentinel ensures ROI by monitoring user behavior to forestall malicious activities, reducing extra security expenses. Integration features contribute to financial benefits. Clients generally experience favorable financial outcomes, frequently within a lease timeframe, often under three years. Calculating financial gains from antivirus services remains challenging since potential losses, if absent, aren't quantifiable.

Pricing

Sentinel is described as a subscription-based solution with pricing perceived as moderate to expensive, most suitable for large organizations. Licensing offers flexibility, occasionally providing discounts for long-term partners. Sentinel typically requires a support contract with NetIQ for maintenance, with upgrades available annually. Pricing is aligned with competitors, yet challenges arise with currency exchange for some users. Additional packages, like Sentinel Rapid Deployment, cater to specific needs but entail separate costs.
  • "Sentinel is moderately priced."
  • "Sentinel is a subscription-based solution."
  • "Sentinel's slightly on the expensive side."

Popular Use Cases

Sentinel is used for log collection, filtering, and security management. Its primary use includes investigating suspicious activities, such as unauthorized access or unusual behaviors, by integrating with systems like Active Directory. Users appreciate its simple interface and its role in monitoring security events and managing alarms. It serves as a hub for IT and security teams and supports integration with other tools, offering enhanced threat detection capabilities and advanced query modifications.

Service and Support

Sentinel customer service is generally well-received, although there are mixed feelings about support. Some appreciate the human touch and knowledgeable engineers, while others face challenges in obtaining timely help. Support staff's ability varies, with backend support seen as more effective. High priority cases receive quick attention, but less urgent issues can take longer. Access to a dedicated engineer with a support contract is beneficial. Experiences suggest inconsistent service levels across inquiries.

Deployment

Sentinel's initial setup experience varied among users. Some found it complex due to network variables and custom integrations, especially with Azure architecture, while others described it as straightforward or easy, particularly those familiar with Linux. Duration for deployment ranged from minutes to a few months, depending on familiarity and complexity. Virtual appliances and guided processes facilitated setup for some, and team sizes for management varied. Proper guidance made basic integrations simpler with well-known devices.

Scalability

Many users report Sentinel as highly scalable, especially when cloud-based and integrated with Identity Manager or User Application Portal. It scales efficiently up to 24,000 events per second; beyond that level, additional technologies like Hadoop can enhance scalability. Some face challenges due to technical expertise or specific requirements, but scalability is often rated positively. Enterprise businesses benefit from it, especially for large-scale operations. Due to pricing dynamics, it's popular among diverse sectors.

Stability

Sentinel is noted for being stable and reliable, with several users highlighting its strong performance and minimal downtime. Some mention needing more RAM, particularly with Java issues, and concerns over network changes requiring restarts. There are occasional regional outages related to updates, but users find the system robust. Many rate its stability highly, citing support for high event volumes without facing significant issues. Despite a few network-related challenges, Sentinel maintains a positive reputation for stability.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Sentinel Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business8
Midsize Enterprise3
Large Enterprise4
By reviewers
By visitors reading reviews
Company SizeCount
Small Business107
Midsize Enterprise85
Large Enterprise222
By visitors reading reviews

Top industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
9%
Manufacturing Company
8%
Government
7%
Retailer
5%
Comms Service Provider
5%
University
5%
Insurance Company
5%
Healthcare Company
4%
Performing Arts
4%
Hospitality Company
3%
Wholesaler/Distributor
3%
Media Company
3%
Outsourcing Company
3%
Construction Company
3%
Educational Organization
3%
Real Estate/Law Firm
2%
Energy/Utilities Company
2%
Non Profit
2%
Consumer Goods Company
2%
Recreational Facilities/Services Company
2%
Transportation Company
2%
Legal Firm
1%
Logistics Company
1%
Marketing Services Firm
1%
Non Tech Company
1%
Aerospace/Defense Firm
1%

Compare Sentinel with alternative products

Go!

Learn more about Sentinel

Sentinel was previously known as NetIQ Sentinel, Novell SIEM.

Sentinel customers

Faysal Bank, GaVI, Handelsbanken, ISC Mªnster, Lambeth Council, Swisscard, The Municipality of Siena, Tukes, University of Dayton, University of the Sunshine Coast

Related articles

Julia Miller - PeerSpot reviewer
Top SIEM Solutions & Success Stories: Strengthening Cybersecurity in Diverse Industries
Read more

Related questions

  • 182
What Solution for SIEM is Best To Be NIST 800-171 Compliant?
  • 57
When evaluating Security Information and Event Management (SIEM), what aspect do you think is the most important feature to look for?
  • 102
What are the main differences between Nessus and Arcsight?
  • 32
What's The Best Way to Trial SIEM Solutions?
  • 139
Which is the best SIEM solution for a government organization?
  • 814
What is the difference between IT event correlation and aggregation?
  • 65
What Is SIEM Used For?
  • 40
RSA-EMC vs. other SIEM products?
  • 349
What Questions Should I Ask Before Buying SIEM?
  • 124
What are the pros and cons of internal SOC vs SOC-as-a-Service?

Product Categories

Product Categories
Security Information and Event Management (SIEM)

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs Sentinel Logo
CrowdStrike Falcon vs Sentinel
Wazuh vs Sentinel Logo
Wazuh vs Sentinel
Microsoft Sentinel vs Sentinel Logo
Microsoft Sentinel vs Sentinel
Splunk Enterprise Security vs Sentinel Logo
Splunk Enterprise Security vs Sentinel
IBM Security QRadar vs Sentinel Logo
IBM Security QRadar vs Sentinel
Elastic Security vs Sentinel Logo
Elastic Security vs Sentinel
Cortex XSIAM vs Sentinel Logo
Cortex XSIAM vs Sentinel
Rapid7 InsightIDR vs Sentinel Logo
Rapid7 InsightIDR vs Sentinel
LogRhythm SIEM vs Sentinel Logo
LogRhythm SIEM vs Sentinel
Fortinet FortiSIEM vs Sentinel Logo
Fortinet FortiSIEM vs Sentinel
Google Chronicle Suite vs Sentinel Logo
Google Chronicle Suite vs Sentinel
ManageEngine Log360 vs Sentinel Logo
ManageEngine Log360 vs Sentinel
Coralogix vs Sentinel Logo
Coralogix vs Sentinel
Stellar Cyber Open XDR vs Sentinel Logo
Stellar Cyber Open XDR vs Sentinel
Adlumin Cybersecurity vs Sentinel Logo
Adlumin Cybersecurity vs Sentinel
See all alternatives
 
Sentinel Reviews Summary
Author infoRatingReview Summary
Manager, Customer Success at Coltek Business Soltuions3.5I've used Sentinel for five to six years as our go-to antivirus. It's simple to use, stable, and integrates well. Pricing could improve, but overall it's reliable and scalable, earning it a solid seven out of ten.
Security Engineer at a financial services firm with 10,001+ employees4.0In our SOC operations, Sentinel offers comprehensive threat detection when used with Microsoft Defender, allowing advanced hunting and tailored SQL queries. It faces integration issues with certain devices and experiences regional outages, but outperforms previous solutions like RSA and ArcSight.
Technology Specialist at a government with 51-200 employees4.5I deployed Sentinel for a government department to collect and analyze logs, enhancing security operations. The threat intelligence and alert setup were valuable, but improvements in reporting and dashboard analytics would be beneficial. We used Microsoft Azure for deployment.
Service Provider at a comms service provider with 10,001+ employees4.5We use Sentinel to efficiently manage security events, enjoying its smart analysis and seamless Microsoft integration, though more customization and mixed deployment options would help. Clients experience ROI within three years, but flexibility and hosting options need improvement.
Senior Specialist: Solution Architecture at a tech services company with 501-1,000 employees4.0No summary available
Compliancy, Security & Identity consultant at TMD informatisering BV4.5No summary available
Principal Solution Architect at a comms service provider with 51-200 employees4.0I use Sentinel to monitor integration processes, finding it simple yet outdated and not user-friendly. Despite its age, the product offers ROI through integration capabilities, though improvements are needed for better usability in complex environments.
CEO at ITCORE5.0No summary available