LogRhythm NDR [EOL] Reviews

My company is currently looking at how we can have a better engagement with LogRhythm so that we can propose a LogRhythm NDR solution in the market to potential buyers. Initially, NDR was not available in India. It has only been a while since LogRhythm launched NDR in India. I hope that my company can do much more business with LogRhythm NDR in the future.

I think that if it is possible to leverage on or reduce that compute sizing during the deployment of the solution, then it can save the hardware of the customer, especially if one considers the cost involved in the compute side.

From an improvement perspective, I would like LogRhythm NDR to reduce the compute size. I would also like LogRhythm NDR to improve the pricing model.

I have experience with LogRhythm NDR for a year.

It is a stable solution.

It is a scalable solution.

LogRhythm NDR is a product that is used by two or three customers of our company.

I have personally not reached out to the solution's technical support. I rate the technical support a seven out of ten.

Neutral

Though I have not extensively worked on LogRhythm NDR, I know the need for a compute side since, in the past, we had required the compute side to deploy the solution in one of our company's client's infrastructure. 

The product's setup phase was easy and not complicated.

The deployment process of LogRhythm NDR can vary between three and four weeks, depending on the skill set of the people involved in the deployment process.

For deployment of the product, you have to purchase the license from LogRhythm, and you have to ensure that the compute side is ready for LogRhythm. After you deploy NDR and sensors in the premises of our company's customer on the SPAN and TAP port, and once the logs go through throughput, you can see the logs coming to LogRhythm NDR's console.

There are certain payments to be made towards the licensing costs attached to the product yearly. The pricing of LogRhythm NDR falls under the mid-range, in my opinion.

LogRhythm NDR's features, GUI, access, and use cases are good.

I rate the overall product an eight and a half out of ten.

Our use cases are mostly for mining, telco, finance, and banking industries. 

Most NDR solutions have similar capabilities. They all work effectively, with differences mainly in pricing. LogRhythm NDR is indeed a powerful tool.

The solution doesn't require the creation of rules or use cases from scratch, which assists our delivery team in installation and deployment. Its dashboard is user-friendly. 

Integrating LogRhythm NDR into our existing security environment has been straightforward. We use Syslog for integration, and sometimes APIs are needed.

Machine learning in LogRhythm NDR helps with its use cases and rules, eliminating the need for us to develop custom solutions for each customer.

The tool has one limitation compared to its competitors. It does have a mobile app for NDR monitoring. Moreover, there is only operational training and not deployment training.                          

I have been working with the product for three years. 

I rate the tool's stability a nine out of ten. 

The solution's scalability is great since it can be deployed on VMs. I rate it a nine out of ten. 

The solution's deployment is fast and can be completed in a week. Its implementation can be done in a day or two. I rate the deployment ease a nine out of ten. 

The tool costs are two million rupees for 5000 users. 

I think it's a bit excessive for the mining industry at this stage because a security operation center might be too much. They require some essential tools like antivirus software or network flow monitoring. My clients are medium businesses. 

I recommend the tool due to its cybersecurity capabilities. I rate it an eight out of ten. 

We use it for cyber security. It is designed to help organizations detect and respond to security threats effectively

It reduces the need to exert significant effort to achieve results; familiarity with customization and product usage makes accessing any data quite straightforward.

It's an excellent security tool with a user-friendly interface that's easy for anyone to use. I've been using it, and even newcomers can quickly get the hang of it in just a few weeks.

There are opportunities for improvement, particularly in upgrading the expertise of local professionals and addressing support issues, which could potentially lead to cost reduction.

I have been working with it for three years.

It provides good stability and I would rate it eight out of ten.

I would rate its scalability capabilities eight out of ten. We typically collaborate with larger organizations.

I find their assistance valuable and I must commend the helpfulness of their reporting. I would rate it seven out of ten.

Neutral

I used previously Elasticsearch.

The initial setup was somewhat complex.

When installing, numerous devices come with IT and antivirus dependencies, along with considerations for network issues. The process is quick, requiring only three days. For installation and maintenance purposes, three individuals are dedicated to day-to-day operations.

When looking at the market and comparing it with other vendors, the cost seems relatively high. I'm not directly purchasing the product from LogRhythm; there are several distributors and partners involved, contributing to the increased cost.

For new users, navigating the platform can be challenging, especially if they lack experience with the OEM or the product itself. Understanding its origin, implementation procedures, and troubleshooting database issues can pose difficulties. However, once users gain familiarity and resolve any initial problems, the overall experience becomes more positive. Overall, I would rate it eight out of ten.