ArcSight Intelligence vs Splunk User Behavior Analytics comparison

Cancel
You must select at least 2 products to compare!
OpenText Logo
185 views|130 comparisons
100% willing to recommend
Splunk Logo
2,321 views|1,443 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between ArcSight Intelligence and Splunk User Behavior Analytics based on real PeerSpot user reviews.

Find out in this report how the two User Entity Behavior Analytics (UEBA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed ArcSight Intelligence vs. Splunk User Behavior Analytics Report (Updated: March 2024).
768,246 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The product has a valuable interface.""The most valuable feature of ArcSight Intelligence is a single console where the entire dashboard gives all the connected details in a single place.""The ability to tailor an environment to suit our specific use cases is a major advantage of ArcSight compared to other logging servers such as Splunk.""We found the correlation engine to be very good. It takes logs from different types of devices and does the correlation in a good way.""The platform helps us improve threat detection capabilities."

More ArcSight Intelligence Pros →

"The most valuable feature is the ability to search through a large amount of data.""It's straightforward in terms of configuration and troubleshooting and log management and monitoring as well. These are the edge points in addition to it being a modular solution where you can capitalize on your current licenses with extra licensing models, which can match the customer's business requirement and it can help the customer to design or to actually plan for their own roadmap.""The product is at the forefront of auto-remediation networking. It's great.""It's easily scalable.""We are really pleased with Splunk and its features. It would be practically impossible to function without it. To provide a general overview of the system, it's important to note that the standard log files are currently around 250 gigabytes per day. It would be impossible to manually walk through these logs by hand, which is why automation is essential.""Because of some of the visualizations that we utilize, we are able to understand strange, unusual traffic on our networks.""Splunk is more user-friendly than some competing solutions we tried.""The solution is definitely scalable."

More Splunk User Behavior Analytics Pros →

Cons
"The frequency of the updates that we are getting can be improved because the number and types of incidents that are happening at the global level are far more than what we are receiving. The frequency of updates feeds related to our rules should be increased. There should be more frequent information about the new rules that are coming and the global threats that are happening. There should be better options for dashboard creation. At present, the dashboards are good, but there is scope to make them better.""We haven't found the product fully scalable.""ArcSight Intelligence is a bit slower, and its speed should be improved.""The dashboard is not user-friendly and is in black and white.""ArcSight Intelligence's pricing needs improvement."

More ArcSight Intelligence Cons →

"We'd like the ability to do custom searches.""The solution is much more expensive than relative competitors like ArcSight or LogRhythm. It makes it hard to sell to customers sometimes.""The correlation engine should have persistent and definable rules.""It could be easier to scale the solution if you are using it on-premise, not in the cloud.""The ability to do more complicated data investigation would be a welcome addition for pros, though the functionality now gives most people what they need.""The initial setup was complex because some of the configurations that we required needed customization.""If the price was lowered and the setup process was less complex, I would consider rating it higher.""There are occasional bugs."

More Splunk User Behavior Analytics Cons →

Pricing and Cost Advice
  • "Its price is average and not very high. Splunk might be a bit cheaper than this. Its licensing is on a monthly basis."
  • "The solution is expensive and only suitable for enterprise environments."
  • "ArcSight Intelligence is an expensive solution."
  • "It is an expensive platform."
  • "They offer perpetual licenses for the product."
  • More ArcSight Intelligence Pricing and Cost Advice →

  • "I hope we can increase the free license to be more than 5 gig a day. This would help people who want to introduce a POC or a demo license for the solution."
  • "My biggest complaint is the way they do pricing... You can never know the pricing for next year. Every single time you adjust to something new, the price goes up. It's impossible to truly budget for it. It goes up constantly."
  • "There are additional costs associated with the integrator."
  • "The licensing costs is around 10,000 dollars."
  • "Pricing varies based on the packages you choose and the volume of your usage."
  • "I am not aware of the price, but it is expensive."
  • More Splunk User Behavior Analytics Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
    768,246 professionals have used our research since 2012.
    Comparison Review
    Anonymous User
    Questions from the Community
    Top Answer:The platform helps us improve threat detection capabilities.
    Top Answer:The product could be improved in several areas; it currently requires significant enhancement. Compared to QRadar and Splunk, ArcSight Intelligence falls behind, placing it as the third choice among… more »
    Top Answer:We are really pleased with Splunk and its features. It would be practically impossible to function without it To provide a general overview of the system, it's important to note that the standard… more »
    Top Answer:I am not aware of the price, but it is expensive. A rough estimate would be around 150 gigabytes, given the huge amount of data. At the moment there are no additional costs for maintenance.
    Top Answer:Currently, we do not have any specific improvement projects in progress. However, we have partnered with some companies that are constantly working on improving the system. Therefore, I believe it's… more »
    Ranking
    Views
    185
    Comparisons
    130
    Reviews
    3
    Average Words per Review
    449
    Rating
    9.0
    Views
    2,321
    Comparisons
    1,443
    Reviews
    5
    Average Words per Review
    374
    Rating
    8.6
    Comparisons
    Also Known As
    ArcSight Interset / Intelligence, FileTrek, Interset UEBA, Micro Focus Interset UEBA, Micro Focus Interset, ArcSight Interset
    Caspida, Splunk UBA
    Learn More
    Splunk
    Video Not Available
    Overview

    Empower your threat hunting team to pre-empt elusive attacks with anomaly detection powered by security AI to find insider threats, zero-day attacks, and APTs.

    Splunk User Behavior Analytics is a behavior-based threat detection is based on machine learning methodologies that require no signatures or human analysis, enabling multi-entity behavior profiling and peer group analytics for users, devices, service accounts and applications. It detects insider threats and external attacks using out-of-the-box purpose-built that helps organizations find known, unknown and hidden threats, but extensible unsupervised machine learning (ML) algorithms, provides context around the threat via ML driven anomaly correlation and visual mapping of stitched anomalies over various phases of the attack lifecycle (Kill-Chain View). It uses a data science driven approach that produces actionable results with risk ratings and supporting evidence that increases SOC efficiency and supports bi-directional integration with Splunk Enterprise for data ingestion and correlation and with Splunk Enterprise Security for incident scoping, workflow management and automated response. The result is automated, accurate threat and anomaly detection.

    Sample Customers
    Accuvant, Splunk Inc., NuTech, Box, rSolutions, Voodoo Technology Limited
    8 Securities, AAA Western, AdvancedMD, Amaya, Cerner Corporation, CJ O Shopping, CloudShare, Crossroads Foundation, 7-Eleven Indonesia
    Top Industries
    VISITORS READING REVIEWS
    Financial Services Firm14%
    Computer Software Company14%
    Government12%
    Manufacturing Company9%
    REVIEWERS
    Financial Services Firm44%
    Insurance Company11%
    Government11%
    Security Firm11%
    VISITORS READING REVIEWS
    Computer Software Company14%
    Financial Services Firm14%
    Government10%
    Manufacturing Company8%
    Company Size
    VISITORS READING REVIEWS
    Small Business23%
    Midsize Enterprise9%
    Large Enterprise68%
    REVIEWERS
    Small Business31%
    Midsize Enterprise31%
    Large Enterprise38%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise12%
    Large Enterprise69%
    Buyer's Guide
    ArcSight Intelligence vs. Splunk User Behavior Analytics
    March 2024
    Find out what your peers are saying about ArcSight Intelligence vs. Splunk User Behavior Analytics and other solutions. Updated: March 2024.
    768,246 professionals have used our research since 2012.

    ArcSight Intelligence is ranked 15th in User Entity Behavior Analytics (UEBA) with 5 reviews while Splunk User Behavior Analytics is ranked 2nd in User Entity Behavior Analytics (UEBA) with 17 reviews. ArcSight Intelligence is rated 8.0, while Splunk User Behavior Analytics is rated 8.2. The top reviewer of ArcSight Intelligence writes "A user-friendly solution that can be used to integrate the logs properly with different connectors". On the other hand, the top reviewer of Splunk User Behavior Analytics writes "Easy to configure and easy to use solution that integrates with many applications and scripts ". ArcSight Intelligence is most compared with ArcSight Enterprise Security Manager (ESM), Microsoft Sentinel and Exabeam Fusion SIEM, whereas Splunk User Behavior Analytics is most compared with Darktrace, Microsoft Defender for Identity, IBM Security QRadar, Varonis Datalert and Cynet. See our ArcSight Intelligence vs. Splunk User Behavior Analytics report.

    See our list of best User Entity Behavior Analytics (UEBA) vendors.

    We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.