No more typing reviews! Try our Samantha, our new voice AI agent.

LogLogic vs LogRhythm SIEM comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LogLogic
Ranking in Log Management
51st
Ranking in Security Information and Event Management (SIEM)
50th
Average Rating
6.0
Number of Reviews
2
Ranking in other categories
No ranking in other categories
LogRhythm SIEM
Ranking in Log Management
14th
Ranking in Security Information and Event Management (SIEM)
11th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
176
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2026, in the Security Information and Event Management (SIEM) category, the mindshare of LogLogic is 0.9%, up from 0.2% compared to the previous year. The mindshare of LogRhythm SIEM is 2.5%, down from 3.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
LogRhythm SIEM2.5%
LogLogic0.9%
Other96.6%
Security Information and Event Management (SIEM)
 

Featured Reviews

it_user126030 - PeerSpot reviewer
Senior ICT Solutions Expert at a comms service provider with 1,001-5,000 employees
I've evaluated Splunk and IBM Q1 but LogLogic is the best choice for log management. SIEM functionality needs improvement.
If you are searching for log management solution, LogLogic is probably the best choice. The SIEM functionality is not at that level, and I suggest instead to choose another SIEM solution (eg: IBM Q1). In my experience, a good practice is to separate log management from SIEM in a way that they are two separate systems.
SumitKumar20 - PeerSpot reviewer
Security Engineer at Granicus Inc.
Tool consistently aids in effective threat detection and monitoring but could benefit from improved log source management and resource optimization
One major area for improvement in LogRhythm SIEM is the lack of volume measurement capability in terms of storage. There is currently no way to determine how much data is being consumed in terms of gigabytes, terabytes, or petabytes from particular devices or environments. This information is crucial for planning future storage needs and scalability. The system monitor (collector) agent has issues with resource consumption. Even when not actively collecting data, the agent continues to consume significant CPU and memory resources, which can be particularly problematic for small business environments with limited resources. LogRhythm SIEM could improve by adding more default device support. While they have good default settings for devices such as Palo Alto firewalls, custom log sources often require extensive work. Increasing the number of supported devices with built-in policies and functionality would reduce the need for custom work. Competitive SIEM tools often provide more comprehensive coverage for various devices and vendors.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If you are searching for log management solution, LogLogic is probably the best choice."
"Having logs in a central location helps with troubleshooting, forensic investigations, and legal investigations."
"Now, the SOC have custom dashboards, showing them a lot more useful information, puts the information in context, and they are actively using it for proactive investigations, rather than just responding to alarms."
"The vendor team was one of the best we have ever worked with and they were able to work through issues not covered in their implementation manuals quickly and without further support."
"We went with LogRhythm because of cost, administration, and ease of use when you're in the tool."
"We went through a competitive comparison of the three leading platforms out there, and it was an easy win, not only from the technology side, but from the company with its support."
"While the cost is high, the security provided is quite good, and for those who can afford it, they will pay for the peace of mind."
"Overall effectiveness is very good. I like how it is oriented to both analysts and technical support people. It's easily adopted by end users as much as by technologists."
"Customer service has been very good and it really feels like we are on the same team."
"AXON has the ability to add and compare use cases."
 

Cons

"Customer Service: On a scale of 1-5, 0. They say the right things but don't deliver when it counts."
"Definitely SIEM – other vendors have gone a lot further in developing SIEM functionality and made a lot more in this area."
"Report-building is in Crystal Reports and has a limitation."
"We have to use tech support pretty regularly and it is sometimes not very good."
"We have had some issues that have taken a long time to resolve, various technical issues that have taken longer to resolve than we desire."
"Granted, we haven't enabled the UEBA module, but we're forwarding all our proxy logs to LogRhythm and we have a really hard time pulling those proxy logs back out of LogRhythm. However, when we take LogRhythm and forward the same logs into somebody else's user-based analytics software, we get the majority of what we were missing... If we've got all our proxy logs and I go out to Google or Facebook or the like, we should be able to go in and pull that information out ten minutes later, but it's a big challenge to do that."
"One thing we have mentioned to them before is that we'd like to be able to do searches, or drill-downs, directly from an alarm. When you click it and the Inspector tab slides out, that might be a good place to be able to click the host to search for the last 24 hours. I know the search is right there but it would be even nicer to just click that and then have an option to search something there."
"The reporting aspect is difficult to use and very difficult to get your own reports."
"Retrieving logs that have been archived can be a difficult and time consuming process."
"I would like to see our vulnerabilities counter. We will be using Tenable to fill that void right now."
 

Pricing and Cost Advice

Information not available
"The license cost is around $10 per MPS."
"We have seen a measurable decrease in the mean time to detect and respond to threats. As it comes out new features and new releases, the window is becoming a lot narrower because you can pivot a lot more with the data. Therefore, the new features and enhancements are reducing that."
"We did a five-year agreement. We pay close to a quarter of a million dollars for our solution."
"It costs a great amount, but its pricing is competitive with some of the other vendors. For licensing and support, we pay about 20,000. There are no additional costs or anything like that."
"In comparison to the competition, they are more affordable. This allows us to do more with less."
"LogRhythm's pricing and licensing is extremely competitive and it's one of the top three reasons we continue to invest in the platform."
"I would recommend that whatever sales quotes to them upfront, they will probably go up. Because they are probably going to outgrow that very quickly or once they start getting everything into it, they are going to have to move up anyway."
"The support which allows more customized to the environment when we are deploying new systems is called Professional Service and is very expensive. The technical annual support and there is an annual fee."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Construction Company
12%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise39
Large Enterprise83
 

Questions from the Community

Ask a question
Earn 20 points
What is the difference between log management and SIEM?
Rony, Daniel's answer is right on the money. There are many solutions for each in the market, a lot depends upon your ability to manage such tools and your budget. A small operation may be best s...
What needs improvement with LogRhythm NextGen SIEM?
LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat bette...
What is your experience regarding pricing and costs for LogRhythm SIEM?
I find LogRhythm SIEM affordable, as it is a bit less costly than QRadar, although I have not been involved in negotiation charges; however, from the manager's approval, I see it as affordable.
 

Comparisons

 

Also Known As

No data available
LogRhythm NextGen SIEM, LogRhythm, LogRhythm Threat Lifecycle Management, LogRhythm TLM
 

Overview

 

Sample Customers

Astrium, Cerner, Children's Hospital, Effiage, Lavego, Plantronics, Skipton Building Society, The Body Shop, The Lowry, University of Manitoba
Macy's, NASA, Fujitsu, US Air Force, EY, Abbott, HD Supply, SAB Miller, UCLA, Raytheon, Amtrak, Cargill
Find out what your peers are saying about LogLogic vs. LogRhythm SIEM and other solutions. Updated: June 2026.
900,747 professionals have used our research since 2012.