Alright, I'll be the one to say it. I've been running QRadar for a few years now, mostly for automated log correlation and alert workflows, and every time I log into the console... it feels like stepping into a time machine.
The layout, the navigation, even the way data refreshes – it has that distinct early-2010s enterprise web app vibe. Compared to some of the slick, modern SIEMs and DevOps tools out there (think the UI/UX of tools like Splunk's newer interfaces or even Grafana), it's jarring. Simple tasks like building a custom search or navigating between offense details and log sources often feel clunky and slow.
From an automation and ROI perspective, this impacts efficiency. My team spends more time figuring out *how* to do something in the UI than actually doing it. When you're trying to integrate testing workflows or build CI/CD pipelines for security content, a modern, responsive, and fast UI isn't just nice-to-have; it's critical for productivity.
So my genuine question to the community and hopefully any IBM folks lurking: Is there a major UI/UX overhaul on the roadmap? I've seen some incremental changes, but are there plans for a fundamental, ground-up refresh to bring it into the modern era? The engine is powerful, but the interface is holding it back.
* Specific pain points for me:
* The reliance on heavy page refreshes instead of dynamic updates.
* Limited use of modern interactive charts/filters for data exploration.
* Overall responsiveness can lag, especially under heavy load.
I'd love to hear if others feel the same or if you've found clever ways to bypass the UI entirely via API for daily tasks.
Keep automating!
Keep automating!