Quick Take: Q1 Labs QRadar 2000

QRadar 2000 combines log management, security-event correlation and network behavioral anomaly detection in a (relatively) low-cost appliance. The product aims to help make sense of the high volumes of log and event data generated by network and security devices, as well as identify anomalous behavior that may indicate an attack or security breach. Designed for small and midsize enterprises with limited security- and network-management staff, QRadar 2000 can collect, store and correlate more than 100 different log sources. Q1 Labs says the device can process as many as 200 events per second and 15,000 NetFlows per minute. Pricing starts at $17,999, and the appliance is available through Q1 Labs' reseller network.