“Integrations with service desk tools are also limited to one-way connectivity via email and SNMP,” the analyst firm said. Still, the research firm notes that SolarWinds LEM is a closed ecosystem, making it challenging to integrate with third-party security solutions such as advanced threat detection, threat intelligence feeds and UEBA tools.
It supports a variety of event sources, and offers some threat containment and quarantine control functionality that isn’t available from competing SIEMs. SolarWinds LEM offers a well-integrated solution that’s a particularly good fit for SMBs, Gartner reports, thanks to its simple architecture, easy licensing, and robust out-of-the-box content and features.
#Lansweeper vs solarwinds update#
Splunk ES Content Update was also launched in 2017, offering pre-packaged security content to Splunk ES customers to help them detect, investigate and manage specific threats. Recent additions to Splunk include version 4.0 of Splunk User Behavior Analytics (UBA), which enables customers to create and load their own machine learning models to identify custom threats and anomalies.
#Lansweeper vs solarwinds windows#
New features included single sign-on, management console updates, the ability to access the LEM manager using SSH port 22 or port 32022, Oracle Java 8 for enhanced security and improved agent integration for systems running Windows 10, and a “What’s New” widget in the Ops Center to describe new features and improvements. The most recent version of SolarWinds LEM, v6.3.1, was released on February 20, 2017. “We are seeing significant interest in expanded SIEM use cases such as advanced threat detection and incident response.” Recent SIEM product improvements “While Splunk ES offers traditional SIEM use cases such as logging, alerting, reporting, compliance and monitoring, many of our customers have moved beyond those traditional use cases to use Splunk as their security nerve center,” Splunk director of product marketing Girish Bhat said by email. The Splunkbase app store provides access to more than 1,000 apps that can be used with Splunk security solutions. The solution provides a clear visual picture of an organization’s security posture, allowing users to customize views and drill down to raw events. Splunk Enterprise Security (ES) gives users a security-specific view of data to increase detection capabilities and optimize incident response. “Tightly resourced security departments are looking for technology that is affordable, quick to deploy, easy to use/maintain, and provides immediate value.” “SolarWinds LEM is targeted at tightly resourced, budget-conscious security teams, which can typically be found in organizations with 0 to 10,000+ employees,” SolarWinds Head Geek Destiny Bertucci told eSecurity Planet by email.
SolarWinds LEM offers out-of-the-box compliance rules and reports with templates for regulated industries, a comprehensive audit trail of log and event data, and quick identification of policy violations. SolarWinds Log & Event Manager (LEM) is designed to detect suspicious activity and send automated responses, enabling efficient investigation of security events for mitigation and compliance. SolarWinds and Splunk features and options Here we look at both products’ key features and examine their respective strengths and weaknesses. Still, there are several key differentiators between the two, particularly in deployment options and target markets: SolarWinds is only available as a virtual appliance, while Splunk doesn’t offer an appliance version of its solution and SolarWinds is particularly well suited for SMBs, with robust features out of the box and straightforward licensing, while Splunk targets companies of all sizes.īoth SIEM solutions made eSecurity Planet‘s list of top 10 SIEM products. SolarWinds Log & Event Manager and Splunk Enterprise Security are popular security information and event management (SIEM) solutions, with each product’s customers voicing enthusiastic support for their offerings.
Based on nearly 300 real user experiences.
0 kommentar(er)
