TrustRadius: an HG Insights company

Splunk Enterprise Security vs. Splunk User Behavior Analytics

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Splunk Enterprise Security

    Score9.8 out of 10
    N/ASplunk Enterprise Security is an analytics-driven SIEM that helps to combat threats with actionable intelligence and advanced analytics at scale.N/A

    Splunk User Behavior Analytics

    Score5.9 out of 10
    N/ASplunk supplies security analytics as a standalone solution or priced as an add-on for users of its popular SIEM products, to protect enterprises against unknown threats and malicious behavior, via the Splunk User Behavior Analytics application.N/A
    Pricing
    Splunk Enterprise SecuritySplunk User Behavior Analytics
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Splunk Enterprise SecuritySplunk User Behavior Analytics
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    Community Pulse
    Splunk Enterprise SecuritySplunk User Behavior Analytics
    Considered Both Products
    Cisco
    Chose Splunk Enterprise Security
    Splunk enterprise is the only solution that we’ve been able to identify that provides risk based alerting, which allows our SOC to reduce analyst fatigue which would be a huge problem without it. Before RBA, there were thousands of alerts a day and it was impossible to review …
    Incentivized
    Chose Splunk Enterprise Security
    Securonix does not nearly meet the scale, extensibility, and maturity that Splunk ES offers. However, when looking at the MSP architecture options, Securonix is a much more flexible platform for multi-tenanting. So, Splunk ES for captive SOC platforms and Securonix for …
    Incentivized
    Chose Splunk Enterprise Security
    All Splunk products are easy to integrate, and they collaborate in the security of our organization.
    Incentivized
    Chose Splunk Enterprise Security
    Splunk Enterprise Security is well designed and provide many comprehensive features which able to protect and monitor the organization. The features are well being used and does not cause any performance issue. Overall the solution is quite stable. Technical support from Splunk …
    Incentivized
    Cisco
    No answer on this topic
    Key User Insights
    Would buy again
    99%
    Would buy again
    100 Answers
    No answers on this topic
    Delivers good value for the price
    94%
    Delivers good value for the price
    84 Answers
    No answers on this topic
    Happy with the feature set
    94%
    Happy with the feature set
    95 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    93%
    Lived up to sales and marketing promises
    74 Answers
    No answers on this topic
    Implementation went as expected
    91%
    Implementation went as expected
    84 Answers
    No answers on this topic
    Features
    Splunk Enterprise SecuritySplunk User Behavior Analytics
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Splunk Enterprise Security and Splunk User Behavior Analytics
    Feature
    Splunk Enterprise Security
    8.4
    102 Ratings
    8% above category average
    Splunk User Behavior Analytics
    -
    Ratings
    Centralized event and log data collection9.3100 Ratings00 Ratings
    Correlation8.699 Ratings00 Ratings
    Event and log normalization/management8.5100 Ratings00 Ratings
    Deployment flexibility8.3101 Ratings00 Ratings
    Integration with Identity and Access Management Tools7.896 Ratings00 Ratings
    Custom dashboards and workspaces9.2102 Ratings00 Ratings
    Host and network-based intrusion detection7.996 Ratings00 Ratings
    Data integration/API management8.498 Ratings00 Ratings
    Behavioral analytics and baselining7.795 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds8.596 Ratings00 Ratings
    Response orchestration and automation7.087 Ratings00 Ratings
    Reporting and compliance management8.695 Ratings00 Ratings
    Incident indexing/searching9.2101 Ratings00 Ratings
    User Ratings
    Splunk Enterprise SecuritySplunk User Behavior Analytics
    Likelihood to Recommend
    8.9
    (103 ratings)
    10.0
    (2 ratings)
    Likelihood to Renew
    9.0
    (3 ratings)
    -
    (0 ratings)
    Usability
    7.5
    (2 ratings)
    -
    (0 ratings)
    Availability
    9.1
    (1 ratings)
    -
    (0 ratings)
    Performance
    8.2
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    6.6
    (6 ratings)
    9.0
    (1 ratings)
    In-Person Training
    9.1
    (1 ratings)
    -
    (0 ratings)
    Online Training
    8.2
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    9.1
    (1 ratings)
    -
    (0 ratings)
    Configurability
    7.3
    (1 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    7.3
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    6.4
    (1 ratings)
    -
    (0 ratings)
    Product Scalability
    9.3
    (100 ratings)
    -
    (0 ratings)
    Professional Services
    9.1
    (1 ratings)
    -
    (0 ratings)
    Vendor post-sale
    8.2
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    8.2
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Splunk Enterprise SecuritySplunk User Behavior Analytics
    Likelihood to Recommend
    Cisco
    No answers on this topic
    Cisco
    No answers on this topic
    Pros
    Cisco
    No answers on this topic
    Cisco
    No answers on this topic
    Cons
    Cisco
    No answers on this topic
    Cisco
    No answers on this topic
    Likelihood to Renew
    Cisco
    No answers on this topic
    Cisco
    No answers on this topic
    Usability
    Cisco
    No answers on this topic
    Cisco
    No answers on this topic
    Reliability and Availability
    Cisco
    I'm not an ES user, but, in my implementation I usually try to prevent all service stops to guarantee High availability to the final customers.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Performance
    Cisco
    ES requires a very performant infrastructure: if it has it's performant, otherwise not. I had situation with a very performant infrastructure and I didn't notized that it was a distributed architecture, it seemed that there ware few data on my PC, othewise I experienced less performant infrastructures with less performaces.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Support Rating
    Cisco
    It's good when it's responsive, but I've had times where I had to wait quite a while for a response. But these are typically the exceptions rather than the rule. When you do get a response it is always well-informed and appropriate. I would say they've been trending better over time with this.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    In-Person Training
    Cisco
    I experienced only on-line training, but the trainers were very professional and competent. Maybe it could be more useful if they also have an experience in projects because sometimes they didn't have a real project experience to communicate to the students. Anyway, it was very interesting and I learned many thing that's very difficoult (or maybe impossible!) to have by myself, aven if I have more than 10 years of Splunk activity experience.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Online Training
    Cisco
    It was very interesting and I learned many thing that's very difficoult (or maybe impossible!) to have by myself. The only problem was that, when I worked with the Splunk Professional Services, I found some difference between the training contents and the information from PS. In addition is required a long experience on Splunk Enterprise for the data ingestion part, in other words I'm able to work with ES because I'm worling on Splunk since 11 years, otherwise I'd some problem.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Implementation Rating
    Cisco
    It's a fantatic product and it was very useful the presence of Splunk Professional Services for the Design Phase and the final Health Check.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Alternatives Considered
    Cisco
    No answers on this topic
    Cisco
    No answers on this topic
    Contract Terms and Pricing Model
    Cisco
    for my exterience, unit pricing and billing frequency are correct. As I already said, I hint to have more discount flexibility, expecially with new customers, because there are competitors less expensive and very aggressive that are dangerous. In addition the possibility to don't pay the license for the development period could be a very interesting feature for the final customers.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Scalability
    Cisco
    No answers on this topic
    Cisco
    No answers on this topic
    Professional Services
    Cisco
    I had a fantastic experience with Splunk Professional Services: they worked with us in our last SON project (a SOC migration for a very large customer) and helped to build a multi tenent environment even if ES isn't a multi tenant platform. Th Splunk PS was a very professional and competent people, he is italian and was able to speak with our italian customers.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Return on Investment
    Cisco
    No answers on this topic
    Cisco
    No answers on this topic
    ScreenShots