TrustRadius Insights for Exabeam Fusion are summaries of user sentiment data from TrustRadius reviews and, when necessary, third party data sources.
Pros
Good Visibility in Security Logs: Several users have found that Exabeam Datalake provides good visibility in security logs. They appreciate the platform's ability to offer an end-to-end view of cyber threats and the clarity and reliability it offers when properly configured.
Efficient Log Ingestion: Many reviewers have praised Exabeam Datalake for its robust connector for log ingestion, which makes the process efficient. This feature saves time and effort for users, allowing them to focus on other aspects of their work.
Dashboard Feature for Risk Identification: The dashboard feature in Exabeam Datalake has been well-received by users as it allows them to identify risky behavior and assets. This capability enhances the overall security posture by providing valuable insights into potential threats or vulnerabilities.
We have been using the Exabeam suite as our SIEM solution to collect logs from different systems into a centralised location which can then be used for forensics purposes later on as well as real-time alerting on sensitive assets. Furthermore, the inbuilt case management has been the solution our analysts use to review and triage alerts as well as initiate playbooks.
Pros
Fast search times, unlike other competing solutions.
The ability for engineers to obtain access to the command line interface for troubleshooting, at least for on-premise deployments.
License is suitable for organisations with lots of logs to ingest.
Hardware required for on premise deployments is well supported.
Cons
Improvements on top of Lucene/KQL to add more search functions.
Stability of the overall deployment.
Ability to run version upgrades quicker and without data ingestion problems afterward.
More documentation and examples about the API functionality available.
Likelihood to Recommend
Due to the generous per-user licensing model and wide availability of prebuilt parsers with the ability for the vendor's support team to create custom ones promptly. Exabeam is great for when you have lots of logs to collect from different devices and manufacturers. Similarly, Exabeam excels if you have an in-house engineering team that is keen to explore the product, its components, and architecture in order to adapt it for your organisation's needs.
It is our SIEM and SOAR tool. We use it for all investigations. We use it for log retention and complance reporting. We use it for all alerting and InfoSec ticketing. With its simplicisty our help desk uses it to diagnose issues with user assets quickly and easly with very little training.
Pros
Simple graphical interface
Plan text searching, no need to know another coding language
Very very fast response
All saved logs up to 7 years instantly searchable
Not cold or frozen buckets for years old logs
Cons
More and better drop-down menus, some items in threat hunter require you know subsets.
Less dashboards, combine AA and DL without having separate logins.
More complete playbooks are already built out. You have the structure set up for templates like malware and phishing, go further and completely build them out from start to finish, most companies would just use them and not personalize their configurations.
Quarterly health checkup diagnostics of systems sent out to users.
Likelihood to Recommend
As a SIEM tool for investigations, Exabeam is the best in class. The AI assigns numeric values to observed logs them presents high scores to the analyst in a simple dashboard. We can see what is a real threat and ignore so many false positives. Exabeam is the best SIEM was used from an alert fatigue perspective. The simple interface allows other teams not just InfoSec to utilize the tool; helpdesk for asset diagnoses, HR for staffing questions, etc.
VU
Verified User
Manager in Information Technology (501-1000 employees)