Number of Seats/Users: Security Event Manager offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows Security Event Manager that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from Security Event Manager. Security Event Manager reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: Security Event Manager offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from Security Event Manager. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: Security Event Manager often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Here at Spendbase our internal data shows that Security Event Manager is seen as a strong, cost‑effective SIEM choice, especially for teams focused on compliance and centralized logging.

From what Spendbase clients share, the main strengths cluster around:

• Easy deployment and setup
• Quick to get devices and agents sending logs

• Virtual appliance model is appreciated by teams with small IT staff

• Compliance and audit readiness

• Commonly used for PCI DSS, SOX, SSAE 16 and general audit logging
• Prebuilt security and compliance rule templates save a lot of time

• Reporting and dashboards help shorten and simplify audit cycles

• Centralized visibility & operations

• Single point for logs across the environment (syslog and agent‑based)
• Dashboards used heavily for:
  • Node health
  • Security alerts
  • KPI and operations monitoring

• Triggers, alerts, and email notifications based on keywords/filters are key value drivers

• Automation and workflows

• Automatic notifications and help‑ticket generation are called out as real time‑savers
• Multiple users can create their own alerts and notification rules

At the same time, our internal data also highlights recurring friction points:

• Pricing and licensing
• Perceived as “a little high”

• Minimum 30‑device license leads to overpaying for smaller environments
  → This is where Spendbase clients most often ask us to negotiate discounts or optimize license tiers.

• Scalability and performance

• Log store can grow fast; searches over large datasets can be slow

• Default storage limits (around 3 TB) push larger users to external storage strategies

• Usability and integration

• Search builder and filter logic can feel unintuitive
• Learning curve around choosing which logs to collect

• Integration with the wider SolarWinds Orion suite is viewed as incomplete; separate UI tabs are a pain for NOC dashboards

• Agent stability and configuration

• Isolated issues with agents stopping and being hard to re‑deploy
• OS‑specific filter settings can be tricky

From a Spendbase discount perspective, the best levers tend to be:
– Pushing down the effective price per device (especially under 50–100 devices)
– Securing favorable terms for storage and scaling
– Bundling with other SolarWinds tools to offset the “separate product” feel with better overall value.