Splunk, Qradar, Azure Sentinel Answer from Deleted User on reddit.com
Exabeam
exabeam.com › home › explainers › best siem solutions: top 10 siem systems and how to choose 2025
Best SIEM Solutions: Top 10 SIEM systems and How to Choose 2025 | Exabeam
June 4, 2025 - Understand SIEM core features and learn about the top 10 SIEM solutions including Exabeam, Splunk, LogRhythm and IBM QRadar.
Reddit
reddit.com › r/cybersecurity › what is the most used siem?
r/cybersecurity on Reddit: What is the most used SIEM?
June 8, 2022 -
New to cybersecurity and have been knocking out certs. I heard a lot of people refer to Splunk and have seen job listings that require knowledge of Splunk. I'm aiming for a SOC analyst position. Is Splunk the go to SIEM that most companies use? What are some secondaries that are also widely used?
Top answer 1 of 38
73
Splunk, Qradar, Azure Sentinel
2 of 38
43
Is Splunk the go to SIEM that most companies use? Splunk is the most used log manager, however I rarely see Splunk Enterprise Security deployed and actively used as a SIEM. What are some secondaries that are also widely used? I replace a lot of AlienVault installations with LogRhythm and QRadar. See also SIEM Market Share
SIEM system, what are the benefits? - Information Security Stack Exchange
Right now we have many systems ... (for example, a system that give us reports from the file servers on what and whom has changed files, how much files, and any abnormality that it found; a system that checks USB insertion on PCs and so on). I would like to find a system that I can feed all of the reports to so that I can generate a cross-reference report. As far as I have understand from the Wikipedia pages on SIEM (SIM, SEM), ... More on security.stackexchange.com
SIEM tool, which you use in your organisation - Security - Spiceworks Community
Hi Everybody, Can you suggest some Good SIEM tool, which you use in your organization ? I guess SIEM stands for Security Information and Event Management (SIEM) solution. It is a tool / product to collect event logs from various system in to a central server such as from router, firewall, Domain ... More on community.spiceworks.com
8
July 20, 2012What SIEM do you recommend?
Splunk if you have deep pockets. Whatever SIEM you choose, make sure you have an ACTUAL data strategy, with schemas, documentation, logging standards, etc. etc. All of the issues I’ve seen with SIEMs stem from a company that DOES NOT have a data culture and thinks “I’ll just log data and let the analytics sort it out….Fucking. No. More on reddit.com
188
74
November 30, 2023Onboarding SIEM solutions Best and Worst
Implemented a SIEM. Too aggressive on log ingestion to meet deadlines. Did not test load on network as I started bringing logs in nor optimize what logs are bring captured and sent. I just started grabbing all! Overloaded parts of the network. Outage. Incident meetings. Learned lessons. More on reddit.com
50
28
October 12, 2023What is a SIEM use case?
A SIEM use case is a scenario or set of conditions under which a Security Information and Event Management (SIEM) system is configured to detect, alert, and respond to potential security threats.
sprinto.com
sprinto.com › blog › siem-use-cases
SIEM use cases: How to bulletproof your business?
What’s the difference between traditional SIEM and modern SIEM?
Modern SIEMs incorporate cloud-native capabilities, AI-driven analytics, and support for dynamic environments like SaaS, containers, and hybrid clouds.
splunk.com
splunk.com › en_us › blog › learn › siem-use-cases.html
Top 10 SIEM Use Cases Today: Real Examples and Business Value | Splunk
What are the most common SIEM use cases?
Common SIEM use cases include log aggregation, threat detection, compliance reporting, insider threat monitoring, and cloud visibility.
splunk.com
splunk.com › en_us › blog › learn › siem-use-cases.html
Top 10 SIEM Use Cases Today: Real Examples and Business Value | Splunk
Videos
09:01
The SIEM Every Beginner Should Know (Simple Breakdown ...
10:27
What is SIEM Solution? | Security Information and Event Management ...
13:59
What is a SIEM? (Security Information & Event Management) - YouTube
13:27
Build Your Own SIEM: Why These Open-Source Tools Just Work - YouTube
15:08
SIEM Correlation Rules for Beginners - YouTube
12:26
SIEM Explained in Minutes | Your Quick Guide to Cybersecurity ...
SentinelOne
sentinelone.com › cybersecurity-101 › data-and-ai › siem-tools
Top 10 SIEM Tools For 2025
October 7, 2025 - Explore the Top 10 SIEM tools of 2025. Learn how SIEM works, its benefits and how to choose one of the best tools for your needs.
Microsoft
microsoft.com › en-us › security › business › security-101 › what-is-siem
What Is SIEM? | Microsoft Security
Event correlation SIEM solutions are effective because they bring together data from multiple systems across an enterprise. They analyze that data and look for patterns across different entities. For example, if there’s evidence of a compromised account and also unusual network traffic, a SIEM might identify that these two events are related and generate an alert for security teams to further investigate.
Stellar Cyber
stellarcyber.ai › home › learn › siem alerts: common types and best practices
SIEM Alerts: Common Types and Best Practices
December 20, 2023 - Anomaly Detection constitutes another vital component of those SIEM alert examples, aiming to identify deviations from anticipated behavior. This process entails analyzing historical data to establish baseline profiles for routine activities. Incoming events are then compared to these baselines, ...
GitHub
github.com › SigmaHQ › sigma
GitHub - SigmaHQ/sigma: Main Sigma Rule Repository
Detection Studio - Convert Sigma rules to any supported SIEM.
Starred by 9.9K users
Forked by 2.5K users
Languages Python 95.1% | Shell 4.9%
Swimlane
swimlane.com › home › soar vs siem: what’s the difference?
SOAR vs. SIEM: What’s the Difference?
March 18, 2025 - A perfect example is SIEM and SOAR, two terms many people use interchangeably. Although security information and event management (SIEM) and security orchestration, automation and response (SOAR) have capabilities that compliment each other, they are not the same thing.
Sprinto
sprinto.com › blog › siem-use-cases
SIEM use cases: How to bulletproof your business?
January 9, 2025 - Here are the top SIEM Use Cases: 1. HIPAA compliance 2. PCI DSS compliance monitoring 3. GDPR compliance monitoring 4. IoT device monitoring and more...
Centraleyes
centraleyes.com › home › the best siem tools to consider in 2025
The Best SIEM Tools To Consider in 2025 - Centraleyes
November 20, 2025 - SIEM software collects and categorizes data ranging from antivirus events to firewall logs, including malware activity, failed and successful logins, and other potentially harmful activities. When the software detects threatening activities, notifications are sent highlight a potential security problem. These notifications can be prioritized as low or high using predefined rules. For example, suppose a user account generates 15 failed login attempts in 10 minutes.
Splunk
splunk.com › en_us › blog › learn › siem-use-cases.html
Top 10 SIEM Use Cases Today: Real Examples and Business Value | Splunk
A correlation rule in a SIEM detects a failed login attempt followed by a successful login and subsequent privilege escalation on a critical server, all within five minutes. This sequence triggers a high-severity alert, prompting immediate investigation. In another example, Children's National Hospital utilized Splunk Enterprise Security to detect 40% more threats compared to when a SIEM solution was not implemented.
Sumo Logic
sumologic.com › home › solutions › cloud siem
Sumo Logic Cloud SIEM | Real-time detection, AI-powered response | Sumo Logic
October 14, 2024 - Parsing, log normalization and categorization are additional features of SIEM tools that make logs more searchable and help to enable forensic analysis, even with millions of log entries to sift through. ... Compliance – Streamline the compliance process to meet data security and privacy compliance regulations. For example, to comply with the PCI DSS, data security standards for merchants that collect credit card information from their customers, SIEM monitors network access and transaction logs within the database to verify that there has been no unauthorized access to customer data.
Wikipedia
en.wikipedia.org › wiki › Security_information_and_event_management
Security information and event management - Wikipedia
October 23, 2025 - With suitable correlation rules in place, a SIEM should trigger an alert at the start of the attack so that the company can take the necessary precautionary measures to protect vital systems. File Integrity and Change Monitoring (FIM) is the process of monitoring the files on your system. Unexpected changes in your system files will trigger an alert as it's a likely indication of a cyber attack. Some examples of customized rules to alert on event conditions involve user authentication rules, attacks detected and infections detected.
Top answer 1 of 5
7
Solely from the information in your question, narrowing down that list of 86 is not going to be easy - I had a quick flick through as I know a fair few of the top names. Some points:
- SIEM solutions should all be able to run log correlation type activities
- Most include device insertion logging and Tripwire type checks (or can incorpoprate Tripwire or any other SYSLOG logs)
- Most of them have reasonable user interfaces
- Most have scriptable command line interfaces
What you should do is list out the things you do want/need it to have and select on those items. If you can get it down to under ten you have a much better chance of being able to run comparison tests.
2 of 5
5
I personally use Splunk for this very thing. It has a robust search/correlation/dashboard functionality. Plus, it can run Python scripts natively so that you can generate your own data from custom sources.
For example, comparing a list of who is supposed to be working with the list of logged in users would be a trivial search.
Splunk is simply very powerful and helpful for me. It reduced 45 minutes of manual checks of various logs, reports, emails, etc down to an automatically generated email in pdf form.
ManageEngine
manageengine.com › home › siem › different types of logs in siem
6 SIEM Log types You Need to Analyze, and Why?
Using this log, a SIEM solution ... communicate with other devices across servers. Some examples include desktops, laptops, smartphones, and printers....
Varonis
varonis.com › inside out security blog › data security › what is siem? a beginner’s guide
What is SIEM? A Beginner’s Guide
September 12, 2025 - SIEM applications provide limited ... data and emails. For example, you might see a rise in network activity from an IP address, but not the user that created that traffic or which files were ......
Logsign
logsign.com › blog › 5-important-siem-reports
5 Important SIEM Reports - The List of Essential Reports
In this article, we will be looking at the five most important SIEM reports shortlisted by our experts, based on their interaction with our clients and prospective customers. While shortlisting the list of essential reports, our experts have focused on discussing the reports that have the highest likelihood of suspicious activity with minimum false positives.
Spiceworks
community.spiceworks.com › security
SIEM tool, which you use in your organisation - Security - Spiceworks Community
July 20, 2012 - Hi Everybody, Can you suggest some Good SIEM tool, which you use in your organization ? I guess SIEM stands for Security Information and Event Management (SIEM) solution. It is a tool / product to collect event logs from various system in to a central server such as from router, firewall, Domain ...
Securonix
securonix.com › home › top 10 siem use cases for remote cybersecurity
Top 10 Siem Use Cases for Remote Cybersecurity - Securonix
July 3, 2024 - Learn the top 10 SIEM use cases for enhancing remote cybersecurity, focusing on insider threats, compliance, and efficient threat management.
Gartner
gartner.com › all categories › security information and event management
Security Information and Event Management (SIEM)
ManageEngine Log360Microsoft SentinelInfraskope SIEM+Falcon Next-Gen SIEMSplunk EnterpriseSplunk Cloud PlatformSolarWinds Security Event Manager (SEM)ManageEngine ADAudit PlusGoogle SecOpsGraylog
Security Boulevard
securityboulevard.com › home › cybersecurity › analytics & intelligence › top siem use case examples
Top SIEM Use Case Examples - Security Boulevard
October 7, 2018 - Apart from allowing and denying ... An example would be connections from the outside world to the DMZ Web server, or connections by users inside the company to their favorite social media Web site....