

LogRhythm SIEM and Google Chronicle Suite compete in the advanced threat detection and response category. Google Chronicle Suite has the upper hand due to its superior integration capabilities and scalable, cloud-based analytics.
Features: LogRhythm SIEM offers advanced threat detection, comprehensive threat hunting, and incident response capabilities. Google Chronicle Suite provides extensive data storage, scalability, and seamless integration with other Google services.
Room for Improvement: LogRhythm SIEM could enhance reporting, AI automation, and user-friendliness. Google Chronicle Suite needs better offline capabilities, more user-friendly configuration options, and improved user documentation.
Ease of Deployment and Customer Service: LogRhythm SIEM has a complex deployment process but offers excellent customer service. Google Chronicle Suite has a smoother, faster deployment with less need for customer service interaction.
Pricing and ROI: LogRhythm SIEM has higher costs but provides justifiable ROI. Google Chronicle Suite is pricey but valued for its long-term benefits.
We are a critical project for them at this moment, and they provide excellent service.
They are slow, and the initial responses often require more information rather than providing helpful solutions.
I have faced challenges with technical support from Sentinel, though Sentinel support is better than Google's, while Splunk support is also not that great.
The technical support is good; we have a separate portal for partners, and since we are paying for the service, they provide a response timeframe based on severity—critical issues are addressed within four hours, medium issues within one day, and non-urgent issues may take a couple of days.
LogRhythm SIEM is quite complex, but that complexity allows us to specifically tailor a solution to the customer while some others are not as flexible.
Customer support is very helpful and effectively solves my problems.
I rate the scalability of Google Chronicle Suite as ten out of ten.
Google Chronicle Suite is very scalable, being a cloud-based solution.
In the cloud-native space, the problem is that if you require additional devices, you might have to work on custom applications.
LogRhythm SIEM is highly scalable as it has modular components allowing me to expand storage, indexing, or other resources as needed.
LogRhythm SIEM is scalable; it can handle about 200 or 500 devices without much difference.
The scalability of LogRhythm SIEM is good enough, warranting an eight out of ten rating.
I rate the stability of Google Chronicle Suite as a nine, as I have not encountered any stability issues.
The platform needs regular updates to fix problems encountered with each quarterly patch and version release.
LogRhythm SIEM still needs improvement regarding stability, particularly in environments with heavy data consumption.
The graphical user interface could be improved to enhance user experience.
The UI is the primary challenge in need of improvement.
Google Chronicle Suite lacks near time detection.
I have noticed some problems with parsing errors, event mismatches, and data mismatching, so ensuring accurate parsing and continuous improvement according to device updates are my basic expectations as a detection engineer.
There is currently no way to determine how much data is being consumed in terms of gigabytes, terabytes, or petabytes from particular devices or environments.
If LogRhythm SIEM could make a lightweight version of their solution, that would be quite competitive because some of my customers have a very large need but refuse to go with LogRhythm SIEM due to its complexity and high resource intensity.
It's neither expensive nor cheap, and I believe it is a justified price for the features offered.
Compared to a SIEM like Microsoft Sentinel, it is much more affordable.
I experience Chronicle as less expensive and less complicated than Azure.
The license cost is around $10 per MPS.
I find LogRhythm SIEM affordable, as it is a bit less costly than QRadar.
They also combine their source solution into one product, allowing for out-of-the-box playbook creation and incident response.
The AI infused into the platform helps in investigations and rule creation.
The automated response feature allows for immediate actions like isolating infected machines or blocking malicious IP addresses.
The seamless integration for case management, along with a user-friendly dashboard user interface, makes tasks like threat hunting more efficient.
We have enough budget for cloud deployment, but we choose to keep it on-prem to ensure data privacy; cyberattacks are a concern, but data privacy is the foremost priority due to sensitive government information.
This helps SOC analysts significantly as they can monitor all log sources through a dashboard, quickly identifying which sources haven't reported within their specified timeframes.
| Product | Mindshare (%) |
|---|---|
| LogRhythm SIEM | 2.5% |
| Google Chronicle Suite | 1.2% |
| Other | 96.3% |

| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 1 |
| Large Enterprise | 6 |
| Company Size | Count |
|---|---|
| Small Business | 38 |
| Midsize Enterprise | 39 |
| Large Enterprise | 83 |
Organizations primarily leverage Google Chronicle Suite for centralized log management, threat intelligence, and endpoint security, addressing MDR requirements with continuous monitoring.
Google Chronicle Suite supports storage, security, and alert checking. Utilizing log information to generate alerts and integration with search engines, it monitors network and login issues. It is a choice for consultants on client projects, and partners handle its global resale and implementation.
What are the key features of Google Chronicle Suite?Industries employ Google Chronicle Suite for its robust security measures and log management. It is especially vital for IT, finance, healthcare, and any sector needing stringent security and compliance. Consultants find it essential for tailoring security protocols in client projects, while partners ensure seamless implementation across regions.
LogRhythm SIEM offers advanced threat intelligence, scalable deployment, and streamlined log management. It enhances security posture with AI-driven threat detection and comprehensive monitoring.
LogRhythm SIEM stands out for its AI-driven threat correlation, ease of log aggregation, and robust reporting. Offering real-time visibility and analytics through consistent navigation and dashboards, it integrates with security components for enhanced monitoring and response. Advanced threat intelligence and customizable alerts streamline processes and bolster security. While it faces challenges with log parsing, reporting, and dashboard intuitiveness, plans to enhance cloud integration and transition to Linux are noted.
What are the standout features?In industries like banking and finance, organizations utilize LogRhythm SIEM for centralized log management, security monitoring, and compliance. It helps detect insider threats, analyze server logs, correlate events, and monitor user behaviors. Appreciated for log ingestion and anomaly identification, it ensures robust cybersecurity and incident response by integrating data from multiple sources.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.