{"id":189,"date":"2015-10-05T18:45:21","date_gmt":"2015-10-05T18:45:21","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=189"},"modified":"2017-09-11T11:44:45","modified_gmt":"2017-09-11T15:44:45","slug":"whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/","title":{"rendered":"What\u2019s Changed? Gartner\u2019s 2015 Security Information and Event Management (SIEM) Magic Quadrant Report"},"content":{"rendered":"

\"2015<\/a>Editor’s Note: The 2016 version of the SIEM Magic Quadrant is now out, get \u00a0a download link here<\/span>.<\/a><\/em><\/strong><\/p>\n

Analysis and research firm Gartner, Inc. has released the latest iteration<\/a> of its yearly Magic Quadrant (MQ) for Security Information and Event Management (SIEM) Report.<\/p>\n

In the 2015 MQ for SIEM (available here<\/a>) Gartner evaluates the strengths and weaknesses of 13 vendors that it considers most significant in the SIEM market\u00a0and provides readers with a graph (the Magic Quadrant) plotting the vendors based on their ability to execute and their completeness of vision. The graph is divided into four quadrants: niche players, challengers, visionaries, and leaders. Gartner does not endorse any vendor, product, or service depicted in its research publications.<\/p>\n

The 13 vendors featured in the report are, in alphabetical order, AccelOps, AlienVault, BlackStratus, EMC (RSA), EventTracker, HP, IBM Security, Intel Security (McAfee), LogRhythm, Micro Focus (NetIQ), SolarWinds, Splunk, and Trustwave.<\/p>\n

This is the tenth iteration of the report, which Gartner first introduced<\/a> way back in 2005, and it comes at a turbulent time for the SIEM market, which stands at a crossroads between traditional, full-blown SIEM solutions, and newer, big-data analytics focused solutions. In the 2015 MQ, we see legacy IT vendors retaining the edge, with HP, IBM, and Intel all ranking in the leaders quadrant, but big data-focused vendor Splunk has also found its way to the front of the pack.<\/p>\n

At Solutions Review, We read the 15 Page report, available in full here<\/a>, \u00a0and pulled a few of what we considered the most important takeaways and key market changes since the 2014 SIEM MQ.<\/p>\n


Widget not in any sidebars
<\/p>\n

How Gartner Defines SIEM<\/strong><\/p>\n

Before jumping into the big changes in this iteration of the report, we should probably clarify exactly what Gartner analysts mean when they talk about SIEM.<\/p>\n

Gartner Analysts Mark Nicolett and Amrit Williams coined the term SIEM way back in 2005, and in its newest report, Gartner defines the SIEM solutions as technology that \u201caggregates event data produced by security devices, network infrastructures, systems, and applications.\u201d SIEM technology primarily deals with log data, but can also process other forms of data, including NetFlow and network packet, says Gartner. \u201cThe data is normalized, so that events, data and contextual information from disparate sources can be correlated and analyzed for specific purposes, such as network security event monitoring, user activity monitoring, and compliance reporting.\u201d<\/p>\n

Simply put, SIEM allows real-time monitoring of security events, analytics, and historical analysis for incident investigation and compliance reporting.<\/p>\n

To be considered in Gartner\u2019s report, vendors must provide both SIM and SEM capabilities and support data from \u201cheterogeneous data sources\u201d (network devices, security devices, servers, etc). Vendors were excluded if the SIEM solutions was offered exclusively as a managed service, if SIEM product revenue was less than $13.5m in 2014, and if the products SIEM functions were primarily oriented to data from the vendor’s own products (proprietary).<\/p>\n

Point Vendors Struggle to Remain Competitive Amidst Market Consolidation<\/strong><\/p>\n

The SIEM market is large and extremely competitive. In 2015, the market has entered what Gartner calls \u201cthe broad adoption phase,\u201d which means that multiple (if not most) vendors can meet a given customer\u2019s basic log management, compliance and event monitoring needs.<\/p>\n

Entering this broad adoption phase, the market has continued to follow a trend of domination from large vendors. While Gartner notes that there were no notable acquisitions in 2014, the analysis firm notes that four large vendors\u2014 HP, IBM, Intel, and Splunk\u2014 command more than 60% of market revenue.<\/p>\n

Amidst this trend of market consolidation and domination from big vendors, Gartner has noted that many smaller point-solution vendors have struggled to maintain relevance. Of the 13 vendors included in the report, just six are point solution vendors.<\/p>\n

Despite the lack of acquisitions, there has been considerable consolidation over the past 18 months, according to Gartner. Symantec, for example, has ended the sale of its SIEM technology, while TIBCO and Tenable both \u201cno longer position their technology competitively in the SIEM space,\u201d instead choosing to market their products as complementary to full-blown SIEM. As such, both vendors have been dropped from the report. Gartner\u2019s analysts noted LogRhythm as one example of a point solution vendor that has retained a competitive edge.<\/p>\n

Here Comes the Big Data<\/strong><\/p>\n

As noted above, the SIEM market has become increasingly focused on big data analytics capabilities. As customers become increasingly focused on early breach detection (rightly so, with 92% of breaches going undetected by the breach organization, according to Gartner), many SIEM vendors have responded to customer concerns with increased development of capabilities such as threat intelligence, analytics, and anomaly detection.\u00a0 For many, that means considerable investments in big data analytics capabilities.<\/p>\n

Some vendors, such as IBM, HP, and RSA, are now developing or deploying SIEM integrations with their big data technologies, notes Gartner. Others, such as Splunk and Intel Security have already integrated such capabilities, sometimes with third party vendors. Gartner praised Splunk in particular for its app for enterprise security, which Gartner claims is a good fit for organizations requiring \u201ca SIEM platform that can be customized to support extensive analytics functions and a variety of log formats.<\/p>\n

Of course, for the time being it\u2019s impractical for companies to completely eliminate traditional SIEM capabilities in favor of big data, but it will be an interesting trend to follow in the future.<\/p>\n

Get the full report here<\/a>, or\u00a0get Gartner’s Critical Capabilities report for SIEM here.<\/a>\u00a0<\/strong><\/p>\n
Widget not in any sidebars
\n
Widget not in any sidebars
\n","protected":false},"excerpt":{"rendered":"

Editor’s Note: The 2016 version of the SIEM Magic Quadrant is now out, get \u00a0a download link here. Analysis and research firm Gartner, Inc. has released the latest iteration of its yearly Magic Quadrant (MQ) for Security Information and Event Management (SIEM) Report. In the 2015 MQ for SIEM (available here) Gartner evaluates the strengths […]<\/p>\n","protected":false},"author":24,"featured_media":187,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[43],"tags":[13,41,42],"acf":[],"yoast_head":"\nWhat\u2019s Changed? Gartner\u2019s 2015 SIEM Magic Quadrant Report<\/title>\n<meta name=\"description\" content=\"Analysis and research firm Gartner, Inc. has released the latest iteration of its yearly Magic Quadrant (MQ) for Security Information and Event Management (SIEM) Report.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What\u2019s Changed? Gartner\u2019s 2015 SIEM Magic Quadrant Report\" \/>\n<meta property=\"og:description\" content=\"Analysis and research firm Gartner, Inc. has released the latest iteration of its yearly Magic Quadrant (MQ) for Security Information and Event Management (SIEM) Report.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2015-10-05T18:45:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2017-09-11T15:44:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/10\/2015-Gartner-Magic-Quadrant-Security-Information-and-Event-Management.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"270\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jeff Edwards\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Edwards\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/\",\"name\":\"What\u2019s Changed? Gartner\u2019s 2015 SIEM Magic Quadrant Report\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/10\/2015-Gartner-Magic-Quadrant-Security-Information-and-Event-Management.jpg\",\"datePublished\":\"2015-10-05T18:45:21+00:00\",\"dateModified\":\"2017-09-11T15:44:45+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\"},\"description\":\"Analysis and research firm Gartner, Inc. has released the latest iteration of its yearly Magic Quadrant (MQ) for Security Information and Event Management (SIEM) Report.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/10\/2015-Gartner-Magic-Quadrant-Security-Information-and-Event-Management.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/10\/2015-Gartner-Magic-Quadrant-Security-Information-and-Event-Management.jpg\",\"width\":600,\"height\":270},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What\u2019s Changed? Gartner\u2019s 2015 Security Information and Event Management (SIEM) Magic Quadrant Report\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\",\"name\":\"Jeff Edwards\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"caption\":\"Jeff Edwards\"},\"description\":\"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.\",\"sameAs\":[\"https:\/\/solutionsreview.com\",\"https:\/\/x.com\/InfoSec_Review\"],\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/jedwards\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What\u2019s Changed? Gartner\u2019s 2015 SIEM Magic Quadrant Report","description":"Analysis and research firm Gartner, Inc. has released the latest iteration of its yearly Magic Quadrant (MQ) for Security Information and Event Management (SIEM) Report.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/","og_locale":"en_US","og_type":"article","og_title":"What\u2019s Changed? Gartner\u2019s 2015 SIEM Magic Quadrant Report","og_description":"Analysis and research firm Gartner, Inc. has released the latest iteration of its yearly Magic Quadrant (MQ) for Security Information and Event Management (SIEM) Report.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2015-10-05T18:45:21+00:00","article_modified_time":"2017-09-11T15:44:45+00:00","og_image":[{"width":600,"height":270,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/10\/2015-Gartner-Magic-Quadrant-Security-Information-and-Event-Management.jpg","type":"image\/jpeg"}],"author":"Jeff Edwards","twitter_misc":{"Written by":"Jeff Edwards","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/","name":"What\u2019s Changed? Gartner\u2019s 2015 SIEM Magic Quadrant Report","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/10\/2015-Gartner-Magic-Quadrant-Security-Information-and-Event-Management.jpg","datePublished":"2015-10-05T18:45:21+00:00","dateModified":"2017-09-11T15:44:45+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6"},"description":"Analysis and research firm Gartner, Inc. has released the latest iteration of its yearly Magic Quadrant (MQ) for Security Information and Event Management (SIEM) Report.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/10\/2015-Gartner-Magic-Quadrant-Security-Information-and-Event-Management.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/10\/2015-Gartner-Magic-Quadrant-Security-Information-and-Event-Management.jpg","width":600,"height":270},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/whats-changed-gartners-2015-security-information-and-event-management-siem-magic-quadrant-report\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"What\u2019s Changed? Gartner\u2019s 2015 Security Information and Event Management (SIEM) Magic Quadrant Report"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6","name":"Jeff Edwards","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","caption":"Jeff Edwards"},"description":"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.","sameAs":["https:\/\/solutionsreview.com","https:\/\/x.com\/InfoSec_Review"],"url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/jedwards\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/189"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=189"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/189\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/187"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=189"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=189"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=189"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}