What is the most used SIEM? : r/cybersecurity - Reddit
I would say major players are: Microsoft Sentinel, ArcSight, Qradar, LogRhythm for most widely used SIEM solutions. Splunk is heavily deployed but purists would argue it is not primarily …
I want to buy a SIEM, but I don't know which one : r/AskNetsec
2021年9月8日 · I still prefer Splunk. I used AlienVault for a few years too. We evaluated several SIEM's, and while I maintain that Splunk (without Enterprise Security) is not a SIEM, the ability …
SIEM, Splunk, IDS/ IPS : r/AskNetsec - Reddit
2020年9月25日 · The language (kusto) is similar to SPL & overall splunk is a poor siem that is overly expensive, and even more so with all of the security apps. In the next 5 years, unless …
What SIEM did you choose and why? : r/cybersecurity - Reddit
As far as Siem queries and usability I find splunk easier to search through and create dashboards. Sentinel has some capability to automatically create the queries you're after by clicking on files …
In your experience, what is the best “modern” SIEM?
2024年5月31日 · Splunk is seen as a SIEM but it's really just a log aggregation tool, you can have logs completely unrelated to Sec/Ops with dashboards, alerts, etc. Only because it was the …
What SIEM should I set up on my home lab? How should i set it up?
2022年5月8日 · splunk If you want to run Splunk Enterprise to practice searches, data ingestion, and other tasks without worrying about a license, Splunk Free is the tool for you. The Free …
SIEM (Splunk) for my network? : r/homelab - Reddit
2020年5月2日 · Echoing what others have said. Splunk free edition isn't really a siem, it's more of a log collector. There is also a limit to how many logs you can collect a day, 500MB I believe. …
r/Splunk on Reddit: Thoughts on SIEM (i.e. Splunk Enterprise …
2021年4月22日 · Thoughts on SIEM (i.e. Splunk Enterprise Security) vs XDR (i.e. Palo Alto Cortex) I have been noticing a growing trend in the adoption of XDR as a solution over SIEM. …
What SIEM do you recommend? : r/cybersecurity - Reddit
2023年11月30日 · Splunk if you have deep pockets. Whatever SIEM you choose, make sure you have an ACTUAL data strategy, with schemas, documentation, logging standards, etc. etc. All …
Splunk vs Qradar : r/Splunk - Reddit
2021年9月3日 · Splunk offers massive value for all IT users so that expands your possible ROI. Knowledge is another area since you are going to find more Splunk skills than Qradar. Finally …