#1 most frequent
United States of America
81.8%27 installations of 33
What is Blumira?
Blumira’s cloud SIEM platform offers both automated threat detection and response, enabling organizations of any size to more defend against cybersecurity threats in near real-time. It's goal is to ease the burden of alert fatigue, complexity of log management and lack of IT visibility.
Categories & Use Cases
Product Demos
Top Performing Features
Centralized event and log data collection
Effectiveness of real-time centralized event and log data collection
Category average: 9
Correlation
Correlation of logs and events to pinpoint significant threats
Category average: 8.4
Event and log normalization/management
Ability to normalize event syntax so that logs can be compared and are machine-understandable
Category average: 8.5
Areas for Improvement
Response orchestration and automation
Quality of built-in response orchestration and automation in Next-Gen SIEM
Category average: 7.1
Reporting and compliance management
Ease and quality of reporting and compliance functions
Category average: 8.3
Incident indexing/searching
Effectiveness of searching across structured and unstructured events and incidents within SIEM
Category average: 8.8
Who Buys & Uses Blumira
#2 most frequent
Canada
6.1%2 installations of 33
#3 most frequent
Australia
3.0%1 installation of 33
Fabulous for small IT teams and organizations
Use Cases and Deployment Scope
Blumira is our SIEM. We forward logs from lots of devices to Blumira via syslog and a few direct integrations. Blumira analyzes and processes those logs to look for IOCs and other risks. Blumira helps monitor activity on devices where we cannot install our antivirus agent -- effectively filling a gap in our coverage.
Pros
- The user interface (for managing, reporting) is intuitive and is easy to use
- The setup / onboarding process was very easy
- Support has been wonderful (and personal)
Cons
- We've had a few suggestions for improving some of the built-in "workflows" -- steps that we are instructed to take by Blumira for specific "findings"
- There are a few improvements about reporting I'd like to see
Return on Investment
- Now when we have a security audit or need to completed a cybersecurity insurance application, we answer "Yes" to the "Do you have a SIEM?" question.
- It has provided awareness and visibility of events and situations on our system that we were completely blind to before.
Alternatives Considered
AlienVault OSSIM, LogRhythm NextGen SIEM Platform, FortiSIEM, Graylog, LogPoint, Rapid7 InsightIDR, Sumo Logic and Securonix Next-Generation SIEM
Other Software Used
LastPass for Business, BlackBerry Protect (CylancePROTECT), BlackBerry Optics (CylanceOPTICS)
