No more typing reviews! Try our Samantha, our new voice AI agent.

Change Auditor for Windows File Servers vs LogRhythm SIEM comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Change Auditor for Windows ...
Ranking in Log Management
58th
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
2
Ranking in other categories
No ranking in other categories
LogRhythm SIEM
Ranking in Log Management
11th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
176
Ranking in other categories
Security Information and Event Management (SIEM) (13th)
 

Mindshare comparison

As of September 2026, in the Log Management category, the mindshare of Change Auditor for Windows File Servers is 0.5%, up from 0.2% compared to the previous year. The mindshare of LogRhythm SIEM is 3.0%, up from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
LogRhythm SIEM3.0%
Change Auditor for Windows File Servers0.5%
Other96.5%
Log Management
 

Featured Reviews

KF
Senior Operations Manager at Procter & Gamble
Provides granular queries of security logs and real-time alerting helps me mitigate risks
The real-time alerting helps me mitigate risks. For example, someone adds a member to the domain admin group. We have an alert set up, so if someone does this unexpectedly, we get notified. Then, we can check and verify if the action is legitimate or a potential threat to the environment.
RS
Engineer Information Security at N-Able (Pvt) Ltd
Advanced threat detection has improved investigations but complexity and resource use need refinement
LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat better and more matured in Wazuh compared to LogRhythm SIEM. Additionally, the parsers that I write for LogRhythm SIEM tend to get quite complex for log parsing, while with Wazuh, I can achieve a similar parser with much less complexity. Those are some of the pain points that some of our customers have been expressing. If LogRhythm SIEM could make a lightweight version of their solution, that would be quite competitive because some of my customers have a very large need but refuse to go with LogRhythm SIEM due to its complexity and high resource intensity. Therefore, they have been moved to Wazuh, which I am deploying for them. Even though LogRhythm SIEM has extremely good capabilities, their resource utilization is too heavy for certain customers, so if they could make a separate, lightweight version, that would be quite beneficial.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution's most valuable aspect is that it can be fully integrated with Microsoft solutions and it doesn't impact the productivity order."
"In terms of features, the querying is great."
"Quicker ability to troubleshoot the problem, find the problem, get it fixed, and get the customers back up and using our system."
"One of the main features that I like about LogRhythm NextGen SIEM is that there are a lot of pre-built pieces. Like with our AV, we didn't have to tell it how to read the logs; they already had it pre-made. So, we essentially just had to follow their guide to get the logs imported in and set up some rules for it. We've only had to manually create the parsing rules for a few of our vendors so that we could interpret the logs correctly. Most of them had already been pre-created for us."
"Automations are very valuable. It provides the ability to automate some of our small use cases. The ability to integrate with other products that use an API is also very useful. LogRhythm has a plugin for it that we can connect and start to move down towards the path of a single pane of glass instead of having multiple or different tools."
"We are really happy with the product; we've been a customer for a number of years now and really haven't had any issues."
"The initial setup is pretty easy."
"The user interface is good."
"Everyone I have worked with knows their stuff, which is great."
"As a security organization, our challenges are discovering where our data is at, most times, and protecting it, and just having everything in a single space has been very helpful."
 

Cons

"The customer service and support could improve their approach to questioning issues. They tend to ask questions one at a time, which creates a lot of back-and-forth communication."
"The pricing could be improved. It needs to be reduced."
"I think they're limited now with this to Office 365."
"Parsing is totally controlled by LogRhythm and they do not allow any partner or any third-party to handle this part and this is a key challenge on my end."
"I have probably submitted half a dozen log parser requests, and I keep finding more stuff that we need to keep an eye on that doesn't have a definition in LogRhythm."
"Retrieving logs that have been archived can be a difficult and time consuming process."
"The product's initial setup phase is pretty complex."
"Technical support could use a little work in the terms of responding back. The feedback that we received is they do need a little more staff."
"It seems with all of the advanced features that we haven't quite figured them out. It is very complex."
"It will definitely help if the parsing side would be much easier, meaning it would be better if we could easily make adjustments on the parser, both on standard and non-standard log sources."
 

Pricing and Cost Advice

"The pricing is per user. The cost is approximately $15/user on a yearly basis. If you need to, you can always upgrade as well."
"Look for whatever will give you the most value. That's the main point. It is not one size fits all."
"LogRhythm's licensing is based on MPS. There are some add-on features like advanced UEBA, the cloud component for advanced UEBA, and SIEM."
"In comparison to the competition, they are more affordable. This allows us to do more with less."
"Look closely at the cost of licensing of other products. This should include setups and the need for support services. I did a RFQ to 2 other vendors before choosing this product."
"When it comes time to renew, they say, "This is what you are using. This is what we can do for you." So, they work with you on pricing."
"In the context of our country, the price of this solution is too high."
"If you don't have your staff, absolutely look into the co-pilot and factor that into your cost evaluation."
"It costs a great amount, but its pricing is competitive with some of the other vendors. For licensing and support, we pay about 20,000. There are no additional costs or anything like that."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
913,806 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
18%
Construction Company
16%
Insurance Company
15%
Outsourcing Company
13%
Construction Company
12%
Outsourcing Company
10%
Financial Services Firm
9%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise39
Large Enterprise83
 

Questions from the Community

Ask a question
Earn 20 points
What is the difference between log management and SIEM?
Rony, Daniel's answer is right on the money. There are many solutions for each in the market, a lot depends upon your ability to manage such tools and your budget. A small operation may be best s...
What needs improvement with LogRhythm NextGen SIEM?
LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat bette...
What is your experience regarding pricing and costs for LogRhythm SIEM?
I find LogRhythm SIEM affordable, as it is a bit less costly than QRadar, although I have not been involved in negotiation charges; however, from the manager's approval, I see it as affordable.
 

Also Known As

No data available
LogRhythm NextGen SIEM, LogRhythm, LogRhythm Threat Lifecycle Management, LogRhythm TLM
 

Overview

 

Sample Customers

Dragon Capital, Howard County MD
Macy's, NASA, Fujitsu, US Air Force, EY, Abbott, HD Supply, SAB Miller, UCLA, Raytheon, Amtrak, Cargill
Find out what your peers are saying about Change Auditor for Windows File Servers vs. LogRhythm SIEM and other solutions. Updated: September 2026.
913,806 professionals have used our research since 2012.