LogRhythm UEBA vs Splunk User Behavior Analytics comparison

LogRhythm and Splunk are both solutions in the User Entity Behavior Analytics (UEBA) category. LogRhythm is ranked #11 with an average rating of 7.0, while Splunk is ranked #4 with an average rating of 7.7. LogRhythm holds a 2.2% mindshare in UBA, compared to Splunk’s 9.9% mindshare. Additionally, 55% of LogRhythm users are willing to recommend the solution, compared to 100% of Splunk users who would recommend it.

LogRhythm UEBA

Read 11 LogRhythm UEBA reviews

258 Views
220 Comparison Views

55% willing to recommend

Splunk User Behavior Analytics

Read 21 Splunk User Behavior Analytics reviews

1,423 Views
800 Comparison Views

100% willing to recommend

LogRhythm UEBA

Splunk User Behavior Analytics

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 4, 2025

Splunk User Behavior Analytics and LogRhythm UEBA compete in the user behavior analysis and threat detection category. Splunk shows an advantage due to its robust features and usability, despite higher pricing.

Features: Splunk offers excellent search capabilities, rapid data processing, and integration with various systems. Its customizable dashboards and automated reporting are significant features. LogRhythm UEBA features an intuitive dashboard and machine learning capabilities, making it ideal for tracking user behaviors and cyber incidents. It is recognized for straightforward management but has less extensive features compared to Splunk.

Room for Improvement: Splunk could improve its User Behavior Analytics by enhancing tool integration and simplifying configurations. Its pricing model is criticized for being unpredictable and high. LogRhythm could enhance its machine learning features, improve dashboard quality, and expand its use case library. Pricing in certain markets is also a concern.

Ease of Deployment and Customer Service: Splunk supports both on-premises and public cloud deployments, providing flexibility but facing occasional support continuity challenges. LogRhythm primarily operates on-premises, with satisfactory yet average-rated technical support.

Pricing and ROI: Splunk's pricing is considered expensive, with additional costs for integrations and frequent price increases, leading to a moderate ROI due to high initial costs and productivity gains. LogRhythm offers competitive pricing for small to medium businesses but may be expensive compared to solutions like IBM QRadar, with observed ROI benefits in productivity and time savings.

To learn more, read our detailed LogRhythm UEBA vs. Splunk User Behavior Analytics Report (Updated: January 2025).

Buyer's Guide

LogRhythm UEBA vs. Splunk User Behavior Analytics

January 2025

Download the complete report

Helped 838,640 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

LogRhythm UEBA

Ranking in User Entity Behavior Analytics (UEBA)

11th

Average Rating

7.0

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Extended Detection and Response (XDR) (25th)

Splunk User Behavior Analytics

Ranking in User Entity Behavior Analytics (UEBA)

4th

Average Rating

8.2

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (12th)

Mindshare comparison

As of February 2025, in the User Entity Behavior Analytics (UEBA) category, the mindshare of LogRhythm UEBA is 2.2%, down from 3.5% compared to the previous year. The mindshare of Splunk User Behavior Analytics is 9.9%, down from 11.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

User Entity Behavior Analytics (UEBA)

Featured Reviews

Sheikh Abu Ayub Azad

CEO at Trustaira

Great at managing cyber incidents; the technical support could be improved

The initial setup is easy, partly because LogRhythm is primarily based on the Windows platform. It's good to have two engineers for deployment but it can be done with one. It's more about the knowledge. Deployment is typically done in two or three different phases. It usually takes up to three full months to get good deployment. There's the initial onboarding of all the log sources, then collecting data in the data lake, followed a couple of weeks later with some minor tuning before the final tuneup.

Read full review

Subhayu Chakraborty

System Engineer at Infosys

Automatic reports streamline tasks and offers easy report gathering

The dashboard part could be improved. While using it, I noticed two options: Classic, which is adequate yet only in black and white, and another one that is more advanced or smart, though I forgot the exact term. I encountered several issues while trying to create solutions for this advanced version, which seem unrelated to query or data issues.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features are file activity monitoring and registry activity monitoring."

"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."

"I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools."

"It is easy to monitor users and that is how the solution is adding value to our firm."

"The solution's most valuable features are the graphical user interface and the reporting."

"It has a lot of features. It has file integration monitoring."

"The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location."

"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."

More LogRhythm UEBA pros

"The solution is fast, flexible, and easy to use."

"This is a good security product."

"We are really pleased with Splunk and its features. It would be practically impossible to function without it. To provide a general overview of the system, it's important to note that the standard log files are currently around 250 gigabytes per day. It would be impossible to manually walk through these logs by hand, which is why automation is essential."

"Splunk is more user-friendly than some competing solutions we tried."

"The product is at the forefront of auto-remediation networking. It's great."

"The most effective one is the integration with other vendors."

"The most valuable features are its data aggregation and the ability to automatically identify a number of threats, then suggest recommended actions upon them."

"Features like alerts and auto report generation are valuable."

More Splunk User Behavior Analytics pros

Cons

"What needs improvement in LogRhythm UEBA is the pricing. Here in Asia, for example, in Sri Lanka, pricing is the primary concern, and this is the only area for improvement I see in the product."

"The cloud version is lacking and not up to par."

"The UI could be improved a little bit."

"The search feature needs to be improved."

"It should have better mitigation with other solutions and be tightly integrated with other solutions. It has to be improved."

"The product could be user-friendly for someone who doesn’t have any prior experience working with it."

"In general, if something needs to be improved in the algorithm, it would be the dashboards."

"It would be helpful if there were more guidance provided for integrating with unsupported devices."

More LogRhythm UEBA cons

"They should work to add more built-in correlation searches and more use cases based on worldwide customer experiences. They need more ready-made use cases."

"We'd like the ability to do custom searches."

"The ability to do more complicated data investigation would be a welcome addition for pros, though the functionality now gives most people what they need."

"We want to have an automated system for bot hunting that enables us to detect anomalies predictively based on historical data. It would be helpful if Splunk included process mining as an alternative option. We have a threat workflow, but it would be useful if we could supplement that with some process mining capabilities over time."

"I would like improved downward integration with other tools such as McAfee and other GCP solutions."

"In the future I would like to see simplified statistics and analytical threats."

"The solution is much more expensive than relative competitors like ArcSight or LogRhythm. It makes it hard to sell to customers sometimes."

"The initial setup was complex because some of the configurations that we required needed customization."

More Splunk User Behavior Analytics cons

Pricing and Cost Advice

"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."

"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."

"Licensing is on a yearly basis. It's not expensive compared to its competitors."

"The pricing is nice when compared to other products in the industry."

"LogRhythm UEBA's pricing is affordable for small and medium businesses."

"It is quite a budget-friendly product."

"The licensing costs is around 10,000 dollars."

"I hope we can increase the free license to be more than 5 gig a day. This would help people who want to introduce a POC or a demo license for the solution."

"Pricing varies based on the packages you choose and the volume of your usage."

"There are additional costs associated with the integrator."

"I am not aware of the price, but it is expensive."

"My biggest complaint is the way they do pricing... You can never know the pricing for next year. Every single time you adjust to something new, the price goes up. It's impossible to truly budget for it. It goes up constantly."

See which vendors are best for you

Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.

See recommendations

838,640 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Financial Services Firm

10%

Manufacturing Company

Government

Computer Software Company

17%

Financial Services Firm

12%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about LogRhythm UserXDR?

The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance...

See all answers

What is your experience regarding pricing and costs for LogRhythm UserXDR?

I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive.

See all answers

What needs improvement with LogRhythm UserXDR?

In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...

See all answers

What do you like most about Splunk User Behavior Analytics?

The solution's most valuable feature is Splunk queries, which allow us to query the logs and analyze the attack vectors.

See all answers

What is your experience regarding pricing and costs for Splunk User Behavior Analytics?

Splunk is up to the mark in terms of pricing. However, I cannot provide specific comments on the pricing at the moment.

See all answers

What needs improvement with Splunk User Behavior Analytics?

See all answers

Comparisons

Wazuh vs LogRhythm UEBA

Compared 49% of the time

Darktrace vs LogRhythm UEBA

Compared 17% of the time

CrowdStrike Falcon vs LogRhythm UEBA

Compared 9% of the time

Cortex XDR by Palo Alto Networks vs LogRhythm UEBA

Compared 7% of the time

Microsoft Purview Insider Risk Management vs LogRhythm UEBA

Compared 7% of the time

More LogRhythm UEBA Competitors

Microsoft Purview Insider Risk Management vs Splunk User Behavior Analytics

Compared 28% of the time

Darktrace vs Splunk User Behavior Analytics

Compared 9% of the time

Exabeam vs Splunk User Behavior Analytics

Compared 9% of the time

Varonis Platform vs Splunk User Behavior Analytics

Compared 6% of the time

IBM Security QRadar vs Splunk User Behavior Analytics

Compared 6% of the time

More Splunk User Behavior Analytics Competitors

Product Reports

Buyer's Guide

User Entity Behavior Analytics (UEBA)

January 2025

Download LogRhythm UEBA product report

Buyer's Guide

Splunk User Behavior Analytics

January 2025

Download Splunk User Behavior Analytics product report

Also Known As

LogRhythm UserXDR, LogRhythm Enterprise UEBA

Caspida, Splunk UBA

Overview

LogRhythm UEBA enables your security team to quickly and effectively detect, respond to, and neutralize both known and unknown threats. Providing evidence-based starting points for investigation, it employs a combination of scenario analytics techniques (e.g., statistical analysis, rate analysis, trend analysis, advanced correlation), and both supervised and unsupervised machine learning (ML).

LogRhythm

Splunk User Behavior Analytics is a behavior-based threat detection is based on machine learning methodologies that require no signatures or human analysis, enabling multi-entity behavior profiling and peer group analytics for users, devices, service accounts and applications. It detects insider threats and external attacks using out-of-the-box purpose-built that helps organizations find known, unknown and hidden threats, but extensible unsupervised machine learning (ML) algorithms, provides context around the threat via ML driven anomaly correlation and visual mapping of stitched anomalies over various phases of the attack lifecycle (Kill-Chain View). It uses a data science driven approach that produces actionable results with risk ratings and supporting evidence that increases SOC efficiency and supports bi-directional integration with Splunk Enterprise for data ingestion and correlation and with Splunk Enterprise Security for incident scoping, workflow management and automated response. The result is automated, accurate threat and anomaly detection.

Splunk

Sample Customers

Information Not Available

8 Securities, AAA Western, AdvancedMD, Amaya, Cerner Corporation, CJ O Shopping, CloudShare, Crossroads Foundation, 7-Eleven Indonesia

Buyer's Guide

LogRhythm UEBA vs. Splunk User Behavior Analytics

January 2025

Free Report: LogRhythm UEBA vs. Splunk User Behavior Analytics

Find out what your peers are saying about LogRhythm UEBA vs. Splunk User Behavior Analytics and other solutions. Updated: January 2025.

DOWNLOAD NOW

838,640 professionals have used our research since 2012.

See our LogRhythm UEBA vs. Splunk User Behavior Analytics report.

See our list of best User Entity Behavior Analytics (UEBA) vendors.

We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.