The Atlas take.
Atlas judgment: This catalog entry spans a portfolio boundary that buyers must resolve before comparing features. Exabeam New-Scale SIEM is cloud-delivered, while LogRhythm SIEM remains a self-hosted offering; the corporate merger does not make them one interchangeable deployment. New-Scale’s normalized search and investigation workflows warrant a hands-on data-fidelity test, while an existing LogRhythm estate needs a concrete enhancement or migration proposal. Demand the exact product, analytics modules and hosting model in writing, then compare the operating burden and evidence continuity of that scoped proposal rather than awarding the combined portfolio every capability.
02 / DEFINE THE BOUNDARY
What you are actually evaluating.
This portfolio page deliberately distinguishes the offerings rather than treating their names as interchangeable editions of one installation. Merger history does not prove that integrations, licenses or migration paths are identical.
Names you may encounter Exabeam New-Scale · LogRhythm SIEM. Historical names do not establish current feature equivalence.
03 / THE CONTROL PATH
Where it sits. How it works.
The chosen product collects and structures events, applies analytics and exposes investigation workflows within its own deployment boundary.
- 01
Source collection
Collectors and APIs bring security records into the selected New-Scale or LogRhythm deployment.
- 02
Product-specific analytics
New-Scale documents ingestion normalization and cloud search; LogRhythm has its separate self-hosted architecture and controls.
- 03
Investigation and handoff
Analysts validate timelines and cases, with any cross-product analytics or migration explicitly contracted.
04 / WHAT EARNS ITS PLACE
Strengths, with the evidence attached.
Atlas analysis of documented capabilities; availability and behavior depend on the edition and environment.
An explicit hosting choice
Current product pages separately identify cloud New-Scale and self-hosted LogRhythm offerings.
New-Scale data and health controls
New-Scale describes a common information model, source collection and service-health/consumption visibility.
Inspect the documented capability notes
- Collect and normalize supported records for searching, detection and investigation in the selected offering.
- Use available user and entity behavior analytics to develop leads that analysts must validate against evidence.
- Organize investigation context and response workflows according to the capabilities of the contracted product.
05 / KNOW THE COMPROMISES
The tradeoffs to take seriously.
Architectural implications and procurement questions from Atlas; these are not independently measured product failures.
Migration evidence needs its own plan
The merger announcement describes continued cloud and on-premises development; it does not prove automatic content or history portability.
06 / FROM PURCHASE TO PRACTICE
Make it work in your environment.
A proposed implementation sequence. Confirm supported versions, permissions, and rollback with the current documentation.
- 01
Name the exact target
Specify New-Scale SIEM, analytics additions or LogRhythm in the bill of materials and architecture.
- 02
Validate source and use-case coverage
Check required fields, identifiers and time windows against the product actually being deployed.
- 03
Protect historical continuity
Test access to old cases and retained events before changing collection routes or decommissioning infrastructure.
07 / THE OPERATING COMMITMENT
The bill is only part of the cost.
Commercial shape
Request a product-specific quote; do not combine cloud consumption assumptions with self-hosted capacity or unlicensed portfolio features.
- Chosen SIEM and analytics module scope
- Cloud consumption or self-hosted capacity and retention
- Migration, integration and support services
08 / COMPARE THE JOB
Put these beside it.
Alternatives worth examining for the same problem. Check each offering’s scope before treating it as a substitute.
Unified Defense SIEM
Compare a cloud analytics and behavior-centered SIEM when New-Scale is the proposed route.
IBMIBM QRadar SIEM
Compare an established modular self-managed SIEM when LogRhythm hosting control is central.
09 / MAKE THE DECISION OBSERVABLE
Earn confidence through a real evaluation.
Suggested by Atlas. Agree acceptance criteria, use synthetic fixtures in an authorized environment, and capture both useful work and failed controls.
- TEST 01
Check product boundary claims
Acceptance evidence: Complete the same detection and case story in the proposed deployment and list every additional module used.
- TEST 02
Validate normalized identity
Acceptance evidence: Replay two fictional accounts with similar names and prove their events do not merge into a misleading timeline.
- TEST 03
Prove continuity through change
Acceptance evidence: Export a case and locate older events during a simulated cutover, recording permissions and any missing historical context.
START WITH ONE EXERCISE
Create fabricated after-hours sign-ins for two fictional users: one with an approved maintenance change and one without.
Evidence to look for: Show the evidence used to investigate both cases. Explain why unusual behavior is not by itself malicious and identify where the authorization context must come from.
Questions to bring to the vendor
- Which product, edition and deployment model is the proposal actually describing?
- How are entity baselines explained, reset and maintained when accounts or roles change?
- What evidence, detections and historical data can be carried through an upgrade or migration?
10 / SHOW THE WORK
Evidence, and what is still unknown.
What this research cannot establish
- No independent comparative analytics or migration benchmark was conducted.
- Confirm current packaging, product-specific retention and the availability of every advertised AI or cross-portfolio feature.
Dossier research reviewed October 18, 2026. Earlier profile references are retained for traceability; products and commercial terms change.
- Exabeam and LogRhythm merger and continued offerings ↗Lifecycle
- Exabeam New-Scale / LogRhythm SIEM official overview ↗Earlier profile reference
- Exabeam New-Scale SIEM ↗Product information
- LogRhythm SIEM ↗Product information
KEEP BUILDING YOUR JUDGMENT