LogPoint SIEM

What differentiates LogPoint SIEM from other similar products?

LogPoint delivers data and monitors both users and endpoints. In short, it researches all operations, attempts to comprehend the actions, and then performs a minimal benchmark for that. After that, it keeps an eye on the users or endpoint to look for any abnormalities. An alarm is set off if there is any deviation.

What is your favorite aspect of this product?

We bought LogPoint to replace a legacy log collection tool that was nearing the end of its useful life, but it has evolved into more. The logs from endpoints, servers, firewalls, routers, apps, etc. are collected using it. In short, it's great for security purposes. The search feature is especially useful for me. The dashboards are also helpful to our superiors.

What do you dislike most about this product?

The interface for monitoring alerts is really simple and clear. It is struggling to manage a broad picture of almost everything if there are ten identical notifications, and it takes a long time to address it all. Having an influence and getting the improvements I might need promptly or addressing the budget issue is more difficult and there is a lack of self-monitoring that would show which alert rule was just using excessive resources.

What recommendations would you give to someone considering this product?

Significantly quicker setup than that of the competition, and much simpler to begin. We employ SIEM, UEAB, and the Director for our operational monitoring across a number of domains. Many dashboards, searches, and reports are ready to use. This SIEM software is reliable. It has a strong reputation for dependability. The queries work similarly in terms of usability. Their customer support is outstanding.

What differentiates LogPoint SIEM from other similar products?

In essence, they charge me more fairly. Furthermore, it is based on the various data modules I have or the things we were monitoring, rather than starting to charge more as I do more data. It wasn't like the previous one that suddenly spikes as I start using it more, like with some other items. It starts well and then becomes more pricey. This product performed somewhat better in terms of gaining users.

What is your favorite aspect of this product?

The consolidation of all the logs is a useful aspect and the product's key feature. Logs are in text forms that are difficult to analyze since no two logs are identical, but with LogPoint, I can create a policy for gathering data. I can rapidly develop a parser to convert the logs into an organized system for analysis! It has given us far more visibility and has sped up investigations.

What do you dislike most about this product?

For MSSP or large clients, LogPoint is obviously unusable as is; a SOAR solution should be utilized in addition. The quality of the product, like with other software vendors, might be higher. Customer searching isn't as pleasant and simple as they are with a few of the rival products.

What recommendations would you give to someone considering this product?

Any organization, regardless of size, may get its cybersecurity needs to be met by LogPoint, especially those planning to use Zero Trust architecture. I would certainly suggest LogPoint to any potential customer given the integrated SIEM architecture and its features. By merging data from several log sources, such as LogPoint, it is possible to gain insights into possibly harmful or suspicious behavior.