Exabeam and Logpoint Buyer'S Guide and Reviews November 2020
Exabeam and Logpoint Buyer'S Guide and Reviews November 2020
and
LogPoint
Buyer's Guide and Reviews
November 2020
Exabeam and LogPoint
Note that this is a generic report based on reviews and opinions from the entire IT
Central Station community. We offer a customized report personalized for you based on:
• Your industry
• Company size
• Which solutions you're already considering
It includes recommendations for you based on what other people like you are researching and
using.
It takes 2-3 minutes to get the report using our shortlist builder wizard. We recommend it!
2
Exabeam and LogPoint
Contents
Overview 10
Vendor Directory 17
3
Exabeam and LogPoint
Exabeam
PROS
"I have customers that like the EUBA functionality of it." "The solution has the ability to build a session, basically." "It pulls a lot of
information together, for example, everything a user does in a specific timeframe." "It's quite helpful." [Full Review]
reviewer138
3993
"The user interface and the timelines they use are the most valuable features." "The price model is very simple so that one can
understand it easily and there are no surprises within it." [Full Review]
reviewer104
1465
reviewer132
5718
"The advanced analytics has a really great overview of user behavior." [Full Review]
reviewer900
120
4
Exabeam and LogPoint
Exabeam
CONS
"They need to focus on more of the MITRE ATT&CK Framework and coverage." "They claim they cover about 70 to 80%." "I'm not
sure if it's really quite that much, however." [Full Review]
reviewer138
3993
"We had a large volume right from the beginning and they weren't quite prepared for that." "That's something that they should think
about when it comes to customers that have a large volume to start off with." [Full Review]
reviewer104
1465
"The organzation is rigid and not flexible in the way they operate" [Full Review]
reviewer132
5718
"I believe if it were more flexible it would be a better product." [Full Review]
reviewer900
120
5
Exabeam and LogPoint
LogPoint
PROS
Lars Hillerup
Jeroen
Kroon
"The flexibility of the search feature and the solution's analytics features are the most valuable parts of the solution." [Full Review]
Giorgi-
Mikaia
"The solution offers excellent reporting features." "Our customers have been satisfied that they have been able to meet their
compliance needs by giving them a standard report." [Full Review]
Kedar
Kulkarni
6
Exabeam and LogPoint
LogPoint
CONS
Lars Hillerup
"The interface needs things like wizards that will assist with creating complex correlation rules." [Full Review]
Jeroen
Kroon
"The solution should offer more integrations and third-party solutions like incident response platforms or allow access to third-party
big data" [Full Review]
Giorgi-
Mikaia
"Nowadays the trend is going towards the ransomware and the endpoint detection and response." "So if they added something for
that, that will be very, very good." [Full Review]
Kedar
Kulkarni
7
Exabeam and LogPoint
LogPoint
"Our licensing fees are about $10,000 USD per month, which I think is fair." [Full Review]
Jeroen
Kroon
"For a hundred user deployment the cost is about $10,000." "The next year it would be the same because it's a subscription-based
license." "There are separate costs as well, for example, if a customer asks for training for their staff." [Full Review]
Kedar
Kulkarni
8
Exabeam and LogPoint
ROOM FOR
IMPROVEMENT reviewer1383993 Kedar Kulkarni
It's not a complete solution. It really focuses on Nowadays the trend is going towards ransomware
user behavioral analytics, which is a big part of the and endpoint detection and response. So if they
product. It doesn't support flow analysis. Not added something for that, that would be very
everything is left in logs, to be conveniently useful. Plus, there is a trend towards store
reviewed. However, if they had flow analysis, it's technology for security orchestration and
possible you can catch a lot of hackers looking at automated response. That would reduce the
the behavior and network flow. Things need to be workload and the product would be more mature,
cross-correlated with logs. They need real-time in terms of information. They should also work on
flow analysis. They need to focus on more of the better integration. [Full Review]
MITRE ATT&CK Framework and coverage. They
claim they ... [Full Review]
Jeroen Kroon
reviewer900120
9
Exabeam and LogPoint
Overview
SOLUTION Exabeam LogPoint
OVERVIEW The Exabeam Security Intelligence Platform LogPoint are SIEM specialists with solutions widely
provides organizations of all sizes with deployed in the Nordics, Germany, France and the
comprehensive, end-to-end detection, analytics, UK.
and response capabilities from a single security
management and operations platform. Exabeam The LogPoint solution is designed to provide you
provides elastic scalability through the use of a with the information you need by enabling you to
modern big data and machine learning collect, analyze and monitor data from your entire
architecture that ingests and analyzes data at any infrastructure for Compliance Management,
scale; all at a predictable cost. This means Information Security, Application Security
organizations no longer need to choose between Monitoring and Operational Insight.
adhering to security budgets and adding...
LogPoint is straightforward to buy, install and
manage – so will take less of your time.
SAMPLE Hulu, ADP, Safeway, BBCN Bank AP Pension, Copenhagen Airports, KMD, Terma,
CUSTOMERS
DISA, Danish Crown, Durham City Council, Game,
TopDanmark, Lahti Energia, Energi Midt, Synoptik,
Eissmann Group Automotive, Aligro, CG50...
Splunk User Behavior Analytics vs. Exabeam LogRhythm NextGen SIEM vs. LogPoint
Compared 15% of the time Compared 15% of the time
TOP INDUSTRIES,
BASED ON
REVIEWERS*
COMPANY SIZE,
BASED ON
COMPANIES
READING REVIEWS*
* Data is based on the aggregate profiles of IT Central Station Users researching this solution.
10
Exabeam and LogPoint
When looking for a Security Information and Event Management (SIEM) solution, are you more likely to pick
Exabeam or LogPoint? What are the advantages and disadvantages of each? Are there specific use cases where
one provides a better solution than the other?
11
Exabeam and LogPoint
reviewer1041465
The user interface and the timelines they use are the most valuable features. The price model is very simple so that one can
understand it easily and there are no surprises within it.
It's good at security logging in our infrastructure but not really application logging.
We had RSA earlier, we were a mature client, we had a big bang kind of start. Exabeam was really prepared there. We had some
issues that we were able to sort out. They sent very experienced engineers to help us with the issues we had. Now we have a
technical account manager. We are very pleased with it. Now, it looks much better but it's a large implementation. If you have a
large implementation with lots of data you can expect a few issues and problems. If you start off with a small implementation then
it would be a different story. We started off with loads and loads of data that we wanted to ingest. After a couple of months, things
look a lot better.
12
Exabeam and LogPoint
We did a POC with Splunk, IBM QRadar and Securonix and we came to the conclusion that Exabeam was the best option for
us. Everybody knows that Splunk is the top product but it's very expensive. The price model is based on the volume of logs of data
that you process in the system. It's very unpredictable and expensive compared to other products.
We reviewed four different vendors but before we did the evaluation, we took a deep look at our use cases to understand our
requirements so we would know the expected use cases and requirements on the system. It's important to know what you want to
use it for. For us, it was about security use cases. If you are a new customer, you should think of the use cases that you have. All of
the vendors we evaluated were good but Exabeam has a very good price model. That's where they win when they compete with
Splunk, for instance. With Exabeam, you're not restricted to the log volume. You can add as much as you like. The only limit is the
hardware. At some point, you may need to extend the hardware. We have plans to increase usage.
We had a large volume right from the beginning and they weren't quite prepared for that. That's something that they should think
about when it comes to customers that have a large volume to start off with. That's where they could try to improve their services.
We had some issues. Some of it was due to our own load balancing problems that caused a few issues. But if they had had their
expert guys on-site they would have found the error much earlier. They didn't have their best experts so I think we lost a big of
implementation time. I would've expected more attention on their side. They created tickets but that wasn't the way to work. When
you start a large implementation, they need to have their experts on-site as opposed to opening regular tickets. They need to be
on-site to fix the issues. They sent very good technical experts after a few months and it only took them half a day to figure out the
issues and after that, it worked very well. Our account manager is very senior and we are very pleased with him.
They've been very professional during the POC. We had ongoing commercial discussions.
On-premises
13
Exabeam and LogPoint
Kedar Kulkarni
The primary use case is standard compliance to help the user's ability to navigate PCI DSS compliance or GDPR compliance.
Besides that, if a user needs to do the log collection and correlation, the solution makes it easy.
The solution offers excellent reporting features. Our customers have been satisfied that they have been able to meet their
compliance needs by giving them a standard report. I understand that you can't define the custom reporting features, however.
Overall, the platform has a very good dashboard and a nice correlation engine as well.
Nowadays the trend is going towards ransomware and endpoint detection and response. So if they added something for that, that
would be very useful. Plus, there is a trend towards store technology for security orchestration and automated response. That
would reduce the workload and the product would be more mature, in terms of information. They should also work on better
integration.
14
Exabeam and LogPoint
The solution is quite stable as long as your server and the hardware is supporting it because it is a virtual kind of software solution.
So the software depends on the hardware. If your hardware is supporting it, obviously the solution will be stable. Once you install
it, you don't have to worry about it.
Scalability wise, if you are expanding the scope of the SSI devices, you just need to add the number of endpoints or number of
servers, and licenses.
We found technical support very good. But to be very honest, we did not come across any major issue as of yet. If there's that
something that we cannot solve ourselves completely, then we are totally reliant on them.
We are the resellers for multiple solutions, so we don't only sell LogPoint. It is a solution we pitch to our smaller customers.
15
Exabeam and LogPoint
The initial setup was straightforward. Usually, we can deploy the solution within three days. We usually take two days and keep an
extra day for a buffer, just for fine-tuning some policies and things like that. For a small deployment, one person is enough.
For the first two deployments, we did have help. After that, we did not need it because there is direct support from LogPoint. We
can use tickets and get help if necessary.
As long as the solution is working, and you are in compliance with all the internal audit policies, you will see a return on
investment.
The licensing structure is super. It's not like other complex environments. They work on the EPS or MPS, but they also work on a
number of devices. It's very straightforward. They have a different pricing structure for the lighter devices, so that makes it a very
cost-effective solution.
For a hundred user deployment the cost is about $10,000. The next year it would be the same because it's a subscription-based
license. There are separate costs as well, for example, if a customer asks for training for their staff.
I would recommend the solution. Go with the trial version and evaluate it first, because individual tastes may differ. I'm not the end-
user, I'm the reseller. We have managed to meet the customer's requirements for adhering to their compliance or getting the
solution onboard to their satisfaction. In the end, however, when an end-user uses the solution, they will ultimately have a
clearer idea about the pitfalls or upsides of it.
© 2020 IT Central Station
I would rate the solution eight out of ten.
To read more reviews please visit https://www.itcentralstation.com/products/comparisons/exabeam_vs_logpoint?tid=pdf_comp_29824-30073
16
Exabeam and LogPoint
Vendor Directory
Amazon AWS Security Hub Micro Focus ArcSight Enterprise Security Manager
(ESM)
AT&T AT&T AlienVault USM
Micro Focus NetIQ Sentinel
AT&T AlienVault OSSIM
Micro Focus ArcSight Interset / Intelligence
BlackStratus SIEMStorm
NETMONASTERY DNIF
Devo Devo
Netsurion Netsurion EventTracker
Elastic Elastic SIEM
NNT NNT Log Tracker Enterprise
empow i-SIEM
Odyssey Cybersecurity ClearSkies SaaS NG SIEM
Exabeam Exabeam
Oracle Oracle Security Monitoring and Analytics
FireEye FireEye Helix Cloud Service
HelpSystems HelpSystems Powertech Event Manager RSA RSA NetWitness Logs and Packets (RSA
SIEM)
IBM IBM QRadar
RSA RSA enVision
IBM IBM Watson for Cyber Security
Seceon Seceon Open Threat Management
Platform
Ignite Technologies SenSage AP
Securonix Solutions Securonix Security Analytics
Intersect Alliance Snare
SolarWinds SolarWinds Security Event Manager
IS Decisions FileAudit
SolarWinds SolarWinds MSP Threat Monitor [EOL]
LogPoint LogPoint
Splunk Splunk
LogRhythm LogRhythm NextGen SIEM
SQRRL SQRRL
Logsign Logsign
Sumo Logic JASK [EOL]
Logz.io Logz.io
SurfWatch Labs SurfWatch Labs SurfWatch
ManageEngine ManageEngine Log360
ThetaRay ThetaRay
ManageEngine ManageEngine EventLog Analyzer
TIBCO LogLogic
Masergy Masergy
Trustwave Trustwave SIEM [EOL]
McAfee McAfee ESM
VenusTech Venusense USM
17
Exabeam and LogPoint
Chart Key
Number of views Number of times compared Total number of reviews on Average words per review Average rating based on
to another product IT Central Station on IT Central Station reviews
Bar length
The total ranking of a product, represented by the bar length, is based on a weighted aggregate score. The score is calculated as follows:
For each of Reviews, Views, and Comparisons, the product with the highest count in each area gets a maximum 18 points.
Every other product gets assigned points based on its total in proportion to the #1 product in that area.
For example, if a product has 80% of the number of reviews compared to the product with the most reviews then the product's points for reviews
would be 18 * 80% = 14.4.
Both Average Rating and Words/Review are awarded on a fixed linear scale.
For Average Rating, the maximum score is 28 points awarded linearly between 6-10 (e.g. 6 or below=0 points; 7.5=10.5 points; 9.0=21 points;
10=28 points).
For Words/Review, the maximum score is 18 points awarded linearly between 0-900 words (e.g. 600 words = 12 points; 750 words = 15 points;
900 or more words = 18 points).
If a product has fewer than ten reviews, the point contribution for Average Rating and Words/Review is reduced:
1/3 reduction in points for products with 5-9 reviews, two-thirds reduction for products with fewer than five reviews.
Reviews that are more than 24 months old, as well as those written by resellers, are completely excluded from the ranking algorithm.
All products with 50+ points are designated as a Leader in their category.
1 Splunk
104,302 views 86,193 comparisons 26 reviews 406 words/review 8.2 average rating
27,788 views 15,196 comparisons 26 reviews 1,070 words/review 7.8 average rating
3 IBM QRadar
38,894 views 25,944 comparisons 23 reviews 450 words/review 8.3 average rating
18
Exabeam and LogPoint
8,320 views 3,815 comparisons 10 reviews 1,733 words/review 8.7 average rating
5 Netsurion EventTracker
2,998 views 866 comparisons 11 reviews 2,048 words/review 8.8 average rating
17,075 views 10,205 comparisons 13 reviews 403 words/review 8.3 average rating
7 Fortinet FortiSIEM
10,442 views 7,365 comparisons 10 reviews 431 words/review 7.7 average rating
8 AlienVault OSSIM
2,165 views 1,032 comparisons 13 reviews 551 words/review 7.3 average rating
4,154 views 2,646 comparisons 10 reviews 531 words/review 7.5 average rating
15,826 views 10,476 comparisons 12 reviews 378 words/review 7.2 average rating
19
Exabeam and LogPoint
VIEWS
1 Splunk 104,302
Reviews
REVIEWS
1 Splunk 26
3 IBM QRadar 23
Words / Review
WORDS /
REVIEW
1 i-SIEM 5,358
2 Devo 2,331
20
Exabeam and LogPoint
We created IT Central Station to provide technology professionals like you with a community platform to share information about enterprise
software, applications, hardware and services.
We commit to offering user-contributed information that is valuable, objective and relevant. We protect your privacy by providing an environment
where you can post anonymously and freely express your views. As a result, the community becomes a valuable resource, ensuring you get
access to the right information and connect to the right people, whenever you need it.
IT Central Station
244 5th Avenue, Suite R-230 • New York, NY 10001
www.ITCentralStation.com
[email protected]
+1 646.328.1944
21