No more typing reviews! Try our Samantha, our new voice AI agent.

LogRhythm SIEM vs Rapid7 InsightOps comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LogRhythm SIEM
Ranking in Log Management
15th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
176
Ranking in other categories
Security Information and Event Management (SIEM) (18th)
Rapid7 InsightOps
Ranking in Log Management
28th
Average Rating
9.0
Reviews Sentiment
6.0
Number of Reviews
10
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Log Management category, the mindshare of LogRhythm SIEM is 3.0%, up from 2.2% compared to the previous year. The mindshare of Rapid7 InsightOps is 0.8%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
LogRhythm SIEM3.0%
Rapid7 InsightOps0.8%
Other96.2%
Log Management
 

Featured Reviews

RS
Engineer Information Security at N-Able (Pvt) Ltd
Advanced threat detection has improved investigations but complexity and resource use need refinement
LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat better and more matured in Wazuh compared to LogRhythm SIEM. Additionally, the parsers that I write for LogRhythm SIEM tend to get quite complex for log parsing, while with Wazuh, I can achieve a similar parser with much less complexity. Those are some of the pain points that some of our customers have been expressing. If LogRhythm SIEM could make a lightweight version of their solution, that would be quite competitive because some of my customers have a very large need but refuse to go with LogRhythm SIEM due to its complexity and high resource intensity. Therefore, they have been moved to Wazuh, which I am deploying for them. Even though LogRhythm SIEM has extremely good capabilities, their resource utilization is too heavy for certain customers, so if they could make a separate, lightweight version, that would be quite beneficial.
reviewer1247523 - PeerSpot reviewer
Head of Sales Services Department at a comms service provider with 51-200 employees
Customization and automation streamline workflows for seamless operations
The features of Rapid7 InsightOps that I have found most valuable are the predefined policies and the use of correlation rules, which are very valuable because they eliminate the need to spend time creating those rules. This feature detects insider threats or compromised credentials by using user behavior analytics, which can collect other compromise indicators. It makes it easier to install and implement this solution because you can run it as normal behavior of users and then switch off to look for the anomalous behavior of any entities, such as laptops and others. In any violation or restricted behavior, the system will notify you that something unusual is occurring. The machine learning algorithms in Rapid7 InsightIDR for threat detection work quite effectively as part of the user entity behavior analytic model, allowing us to focus group normal typical behavior of users and then turn on the rule to spot any unexpected behavior. The automation features of Rapid7 InsightOps are quite satisfactory, as users appreciate these features, especially when integrating with the ticketing system. If something goes wrong, InsightOps will notify the ticketing system to create a ticket and assign it to the responsible person to handle the events found in the infrastructure. The customizable dashboards in Rapid7 InsightOps are quite valuable and interesting because SOC center operators spend most of their time investigating on those dashboards, making them easy to manage. Additionally, we can configure email reports for high-level talks, sending historical data without needing to look online, which is very convenient.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"LogRhythm really gave us a better understanding of what our overall risk is within our network and has opened our eyes to include other products that helped address different types of issues."
"I have found the Advanced Intelligence Engine has provided the most value to us because we can customize alarms based on our requirements and have created hundreds of alarms that notify different people for different scenarios."
"It gives us insight into our entire installation, where we are multiple sites, going as far as the East Coast to the Central West Coast."
"The scalability is very good."
"For me, the NERC compliance modules are probably the best thing, and the system monitors really pick up a lot for me, helping you get an eagle-eye view and then delve down granularly, and the ease of that is pretty amazing."
"From a performance standpoint, I have no problems recommending LogRhythm because it allows me to get in under the hood and tweak some things."
"We use this solution to examine disparate log sources and provide a cohesive method to search for anomalous behavior."
"LogRhythm lights up when an event occurs; as opposed to just giving us everything, it will piece things together for you and let you know that you probably should look at this, providing the evidence and making qualifying or investigations a little bit quicker and allowing us to close down on remediation times."
"The machine learning algorithms in Rapid7 InsightIDR for threat detection work quite effectively as part of the user entity behavior analytic model, allowing us to focus group normal typical behavior of users and then turn on the rule to spot any unexpected behavior."
"We get way more out of it than we did with SecureWorks and we pay about a third of the price."
"Once you start using InsightIDR, which works hand in glove with InsightOps, you will feel like you were operating in the stone age before."
"The most valuable feature of Rapid7 InsightOps is the search functionality."
"We can save logs as plain text."
"The ability to browse logs from multiple sources at the same time really speeds up root cause analysis."
"Integration of InsightOps with other tools, especially SIEM solutions, has generally improved operational efficiency."
"Easy to use and spend less time on setups/troubleshooting."
 

Cons

"Sometimes the error-logging is not altogether helpful. For example, on an upgrade, a systems data processor, a Windows box, was throwing an error code like 1083. Then it just stopped and it died right out of the installer and nobody looked. We searched through Google and what it means is the Windows Firewall wasn't turned on so that it could create a rule for the product. Why wouldn't they bubble up that description so that I wouldn't have to call support and I could just know, "Okay, the firewall wasn't turned on. Turn it back on. Re-run the installer and keep going.""
"The reporting aspect is difficult to use and very difficult to get your own reports."
"The user interface needs improvement. The more the user can slide around and know what's going on, the better it will be."
"We had a little bit of difficulty implementing a disaster recovery situation because it was leveraging only Microsoft native DNS and it wouldn't work with our Infoblox DNS deployment that we use in our environment. They've been working on that behind the scenes."
"My biggest issue - I know that they say they're doing it - is that the API-building is extremely important. They keep saying it's coming, it's coming. It's not coming fast enough. I don't care if they need to double their team size to get it out there quicker, the world is already in the cloud and we can't monitor it. That's a big problem for us. My boss keeps coming to me about it. That's an issue."
"We usually do end up having to remind technical support about our issues, get back in touch with them to see what the status is on our tickets."
"We don't get much use out of this product because people around here consider it to be unreliable, and it's hard to do searches."
"We do about 750 million a day and some days we do 715 million. Some days we do 820 million or 1.2 billion. But there's no way to drill in and find out: "Where did I get 400,000 extra logs today?" What was going on in my environment that I was able to absorb that peak? I have no way to identify it without running reports, which will produce a long-running PDF that I have to somehow compare to another long-running PDF... I would like to see like profiling behavior awareness around systems like they've been gunned to do around users with UEBA."
"The solution takes a little bit of time when we load the website for the first time."
"The searching capability, or when you ask real time questions, is pretty decent but it's still not up to par with, say, Splunk."
"Since I used the beta, improvements are to be expected. The dashboard options could have been clearer, but I believe it is more a problem with the limited documentation available at the time."
"There are a few things I would like to do with a few more complex queries which I am not able to do right now, because it is a SaaS solution."
"There were some difficulties in product setup, but after those issues were resolved, there were no issues."
"Improvement is needed in the dashboard of InsightOps, especially for less technical users."
"Rapid7 InsightOps could improve by making the search query better. There are times when the search query is broken and it does not find anything."
 

Pricing and Cost Advice

"I would rate the tool's pricing around eight out of ten."
"On a scale of one to ten, where one is low, and ten is high, I rate the pricing between six and seven."
"I would rate the pricing 4 out of 5. There are no additional costs to the standard licensing fees."
"Look for whatever will give you the most value. That's the main point. It is not one size fits all."
"The license cost is around $10 per MPS."
"We did a five-year agreement. We pay close to a quarter of a million dollars for our solution."
"It costs a great amount, but its pricing is competitive with some of the other vendors. For licensing and support, we pay about 20,000. There are no additional costs or anything like that."
"I have seen a measurable decrease in the mean time to detect and respond to threats. We went from not detecting them to detecting them. We can actually pick up what is anomalous in our network now."
"The product is cheap."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
11%
Financial Services Firm
10%
Outsourcing Company
10%
Manufacturing Company
8%
Manufacturing Company
14%
Construction Company
11%
Comms Service Provider
11%
Outsourcing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise39
Large Enterprise83
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise2
Large Enterprise3
 

Questions from the Community

What is the difference between log management and SIEM?
Rony, Daniel's answer is right on the money. There are many solutions for each in the market, a lot depends upon your ability to manage such tools and your budget. A small operation may be best s...
What needs improvement with LogRhythm NextGen SIEM?
LogRhythm SIEM could learn from Wazuh, as Wazuh has a built-in mechanism that allows you to write custom scripting and scripts through languages that Wazuh can then trigger, which is somewhat bette...
What is your experience regarding pricing and costs for LogRhythm SIEM?
I find LogRhythm SIEM affordable, as it is a bit less costly than QRadar, although I have not been involved in negotiation charges; however, from the manager's approval, I see it as affordable.
What needs improvement with Rapid7 InsightOps?
In my opinion, there are no specific areas of Rapid7 InsightIDR that need improvement because all solutions in the SIEM market, including InsightOps and its competitors, are doing the same things b...
What is your primary use case for Rapid7 InsightOps?
The usual use cases for Rapid7 InsightOps that I work with are to meet standard requirements such as PCI DSS and ISO standards, collecting data and protecting event logs. Rapid7 InsightOps plays a ...
What advice do you have for others considering Rapid7 InsightOps?
The integration capabilities of Rapid7 InsightIDR with other security or IT management tools are quite simple. To integrate with another solution, you just need that solution to push system logs in...
 

Also Known As

LogRhythm NextGen SIEM, LogRhythm, LogRhythm Threat Lifecycle Management, LogRhythm TLM
InsightOps, Logentries
 

Overview

 

Sample Customers

Macy's, NASA, Fujitsu, US Air Force, EY, Abbott, HD Supply, SAB Miller, UCLA, Raytheon, Amtrak, Cargill
Trimble Navigation Limited
Find out what your peers are saying about LogRhythm SIEM vs. Rapid7 InsightOps and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.