TrustRadius: an HG Insights company

IBM Security QRadar SIEM vs. Splunk User Behavior Analytics

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Security QRadar SIEM

    Score9 out of 10
    N/AIBM Security QRadar is security information and event management (SIEM) Software.N/A

    Splunk User Behavior Analytics

    Score5.9 out of 10
    N/ASplunk supplies security analytics as a standalone solution or priced as an add-on for users of its popular SIEM products, to protect enterprises against unknown threats and malicious behavior, via the Splunk User Behavior Analytics application.N/A
    Pricing
    IBM Security QRadar SIEMSplunk User Behavior Analytics
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    IBM Security QRadar SIEMSplunk User Behavior Analytics
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    Community Pulse
    IBM Security QRadar SIEMSplunk User Behavior Analytics
    Considered Both Products
    IBM
    No answer on this topic
    Cisco
    No answer on this topic
    Key User Insights
    Would buy again
    92%
    Would buy again
    67 Answers
    No answers on this topic
    Delivers good value for the price
    97%
    Delivers good value for the price
    61 Answers
    No answers on this topic
    Happy with the feature set
    96%
    Happy with the feature set
    70 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    86%
    Lived up to sales and marketing promises
    38 Answers
    No answers on this topic
    Implementation went as expected
    94%
    Implementation went as expected
    59 Answers
    No answers on this topic
    Features
    IBM Security QRadar SIEMSplunk User Behavior Analytics
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of IBM Security QRadar SIEM and Splunk User Behavior Analytics
    Feature
    IBM Security QRadar SIEM
    8.5
    69 Ratings
    9% above category average
    Splunk User Behavior Analytics
    -
    Ratings
    Centralized event and log data collection9.927 Ratings00 Ratings
    Correlation8.669 Ratings00 Ratings
    Event and log normalization/management9.527 Ratings00 Ratings
    Deployment flexibility7.827 Ratings00 Ratings
    Integration with Identity and Access Management Tools8.965 Ratings00 Ratings
    Custom dashboards and workspaces7.569 Ratings00 Ratings
    Host and network-based intrusion detection9.725 Ratings00 Ratings
    Data integration/API management9.07 Ratings00 Ratings
    Behavioral analytics and baselining7.648 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds8.049 Ratings00 Ratings
    Response orchestration and automation7.75 Ratings00 Ratings
    Reporting and compliance management7.947 Ratings00 Ratings
    Incident indexing/searching8.97 Ratings00 Ratings
    User Ratings
    IBM Security QRadar SIEMSplunk User Behavior Analytics
    Likelihood to Recommend
    8.4
    (89 ratings)
    10.0
    (2 ratings)
    Likelihood to Renew
    7.3
    (4 ratings)
    -
    (0 ratings)
    Usability
    9.1
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    8.1
    (62 ratings)
    9.0
    (1 ratings)
    Ease of integration
    8.1
    (58 ratings)
    -
    (0 ratings)
    User Testimonials
    IBM Security QRadar SIEMSplunk User Behavior Analytics
    Likelihood to Recommend
    IBM
    No answers on this topic
    Cisco
    No answers on this topic
    Pros
    IBM
    • Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action.
    • Facilitates security incident investigation and forensic analysis.
    • Provides a real-time view of security events, enabling immediate incident response.
    • Can integrate with external threat intelligence sources to enrich data and improve threat detection.
    • Enables the generation of detailed and customized reports.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Cons
    IBM
    • Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources.
    • While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete.
    • IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Likelihood to Renew
    IBM
    No answers on this topic
    Cisco
    No answers on this topic
    Usability
    IBM
    No answers on this topic
    Cisco
    No answers on this topic
    Support Rating
    IBM
    Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    In-Person Training
    IBM
    No answers on this topic
    Cisco
    No answers on this topic
    Online Training
    IBM
    No answers on this topic
    Cisco
    No answers on this topic
    Implementation Rating
    IBM
    No answers on this topic
    Cisco
    No answers on this topic
    Alternatives Considered
    IBM
    No answers on this topic
    Cisco
    No answers on this topic
    Return on Investment
    IBM
    No answers on this topic
    Cisco
    No answers on this topic
    ScreenShots

    IBM Security QRadar SIEM Screenshots

    Screenshot of QRadar SIEM Cloud native- Threat intelligence preview