The security information and event management (SIEM) market is defined by the customer's need to apply security analytics to event data in real time for the early detection of targeted attacks and data breaches, and to collect, store, analyze and report on log data for incident response, forensics and regulatory compliance. SIEM is a $1.69 billion market that grew 12.5% during 2014, with an expected growth rate of 10.9% during 2015.
IBM Security, Intel Security, HP, Splunk & LogRhythm are in the leader's quadrant of "Gartner’s Magic Quadrant for Security Information and Event Management 2015 " considering following criteria by Gartner
ü Product or service evaluates the vendor's ability and track record to provide product functions in areas such as real-time security monitoring, security analytics compliance reporting and deployment simplicity.
ü Overall viability includes an assessment of the technology provider's financial health, the financial and practical success of the overall company, and the likelihood that the technology provider will continue to invest in the SIEM technology segment.
ü Sales execution/pricing evaluates the technology provider's success in the SIEM market and its capabilities in presales activities. This includes SIEM revenue and the installed base size, growth rates for SIEM revenue and the installed base, presales support, and the overall effectiveness of the sales channel. The level of interest from Gartner clients is also considered.
ü Market responsiveness/record evaluates the match of the SIEM offering to the functional requirements stated by buyers at acquisition time, and the vendor's track record in delivering new functions when they are needed by the market. Also considered is how the vendor differentiates its offerings from those of its major competitors.
ü Marketing execution evaluates the SIEM marketing message against our understanding of customer needs, and also evaluates any variations by industry vertical or geographic segments.
ü Customer experience is an evaluation of product function and service experience within production environments. The evaluation includes ease of deployment, operation, administration, stability, scalability and vendor support capabilities. This criterion is assessed by conducting qualitative interviews of vendor-provided reference customers, in combination with feedback from Gartner clients that are using or have completed competitive evaluations of the SIEM offering.
ü Operations is an evaluation of the organization's service, support and sales capabilities, and includes an evaluation of these capabilities across multiple geographies.
Source : Gartner