IBM QRadar User Behavior Analytics vs Splunk User Behavior Analytics comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between IBM QRadar User Behavior Analytics and Splunk User Behavior Analytics based on real PeerSpot user reviews.

Find out in this report how the two User Behavior Analytics - UEBA solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed IBM QRadar User Behavior Analytics vs. Splunk User Behavior Analytics Report (Updated: November 2022).
657,849 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"It'll get you from point A to B.""The timeline and machine learning features are great.""What I like about IBM QRadar User Behavior Analytics is that it uses machine learning algorithms to generate risk scoring for the user activity. I also like that it syncs with our Active Directory users, so it really has full coverage for all users in our environment.""The most valuable feature currently is security behaviors and the pdf files.""The scalability is very good. It's not a problem.""Blocks of predefined conditions can be used to configure detection rules without having to write complicated script.""I have used IBM QRadar User Behavior Analytics in a Cloud Pak on Amazon, and there it runs on top of it and is easy to assess. Additionally, I have installed processes and characters.""IBM QRadar User Behavior Analytics has easy architecture, has a good portfolio and integration."

More IBM QRadar User Behavior Analytics Pros →

"It's easily scalable.""The solution is fast, flexible, and easy to use.""The solution appears to be stable, although we haven't used it heavily."

More Splunk User Behavior Analytics Pros →

Cons
"There should be more opportunity for community kind of distribution where, for example, if there was a zero-day threat targeting companies.""QRadar UBA only keeps the data for a short while (it's refreshed every five minutes) and would be improved if this were extended to a week or month.""The dashboard and reports are not user-friendly or efficient so are of little help with threat hunting activity.""I would like to see more integration in place after the security lock.""Whenever we are upgrading or installing any type of patch, at that time we have some delays.""I don't give it a 10 because it is something we have to request. I would love it if UBA was included out of the box like Microsoft.""The solution could improve by having more out-of-the-box use cases.""IBM QRadar User Behavior Analytics could improve machine learning use cases because they are limited and most of the use cases are rule-based. They should develop more use cases, such as in Securonix or Exabeam because they will detect a threat. Using machine learning is mainly on the correlation rules, but if you think about Exabeam or Securonix, they detect using machine learning or machine learning-based algorithms."

More IBM QRadar User Behavior Analytics Cons →

"I would like improved downward integration with other tools such as McAfee and other GCP solutions.""I'm not aware of any lacking features.""We'd like the ability to do custom searches."

More Splunk User Behavior Analytics Cons →

Pricing and Cost Advice
  • "There is an annual license required for this solution."
  • "We pay approximately $40,000 to use the solution annually. This solution is a lot less expensive than Splunk."
  • "IBM QRadar User Behavior Analytics is an application framework and you can install many applications without any additional costs."
  • "QRadar UBA's price is a little more than street price and could be reduced."
  • "The solution has a licensing model that is based on events per second so it scales to need and budget."
  • More IBM QRadar User Behavior Analytics Pricing and Cost Advice →

    Information Not Available
    report
    Use our free recommendation engine to learn which User Behavior Analytics - UEBA solutions are best for your needs.
    657,849 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Integration is very easy and the reporting is good.
    Top Answer:This is a good product, although it does require some fine-tuning. The dashboard is pathetic and it takes a long time to perform a search. The graphics need to be improved. Providing good support is… more »
    Top Answer:The solution isn't overly expensive. It's quite affordable. It's not the priciest option on the market. I'm not sure of the exact cost as its not an aspect of the solution I directly deal with.
    Ranking
    Views
    2,025
    Comparisons
    1,053
    Reviews
    11
    Average Words per Review
    529
    Rating
    7.3
    Views
    7,766
    Comparisons
    5,652
    Reviews
    3
    Average Words per Review
    350
    Rating
    9.3
    Comparisons
    Also Known As
    IBM QRadar UBA, QRadar UBA, QRadar User Behavior Analytics
    Caspida, Splunk UBA
    Learn More
    Overview

    The User Behavior Analytics for QRadar (UBA) app is a tool for detecting insider threats in your organization. It is built on top of the app framework to use existing data in your QRadar to generate new insights around users and risk. UBA adds two major functions to QRadar: risk profiling and unified user identities.

    Risk profiling is done by assigning risk to different security use cases. Examples might include simple rules and checks such as bad websites, or more advanced stateful analytics that use machine learning. Risk is assigned to each one depending on the severity and reliability of the incident detected. UBA uses existing event and flow data in your QRadar system to generate these insights and profile risks of users.

    Splunk User Behavior Analytics is a behavior-based threat detection is based on machine learning methodologies that require no signatures or human analysis, enabling multi-entity behavior profiling and peer group analytics – for users, devices, service accounts and applications. It detects insider threats and external attacks using out-of-the-box purpose-built that helps organizations find known, unknown and hidden threats, but extensible unsupervised machine learning (ML) algorithms, provides context around the threat via ML driven anomaly correlation and visual mapping of stitched anomalies over various phases of the attack lifecycle (Kill-Chain View). It uses a data science driven approach that produces actionable results with risk ratings and supporting evidence that increases SOC efficiency and supports bi-directional integration with Splunk Enterprise for data ingestion and correlation and with Splunk Enterprise Security for incident scoping, workflow management and automated response. The result is automated, accurate threat and anomaly detection.
    Offer
    Learn more about IBM QRadar User Behavior Analytics
    Learn more about Splunk User Behavior Analytics
    Sample Customers
    Information Not Available
    8 Securities, AAA Western, AdvancedMD, Amaya, Cerner Corporation, CJ O Shopping, CloudShare, Crossroads Foundation, 7-Eleven Indonesia
    Top Industries
    REVIEWERS
    Financial Services Firm30%
    Computer Software Company20%
    Manufacturing Company20%
    Retailer20%
    VISITORS READING REVIEWS
    Computer Software Company18%
    Financial Services Firm14%
    Comms Service Provider12%
    Insurance Company8%
    REVIEWERS
    Financial Services Firm50%
    Insurance Company13%
    Government13%
    Security Firm13%
    VISITORS READING REVIEWS
    Computer Software Company17%
    Financial Services Firm12%
    Government11%
    Comms Service Provider9%
    Company Size
    REVIEWERS
    Small Business26%
    Midsize Enterprise11%
    Large Enterprise63%
    VISITORS READING REVIEWS
    Small Business19%
    Midsize Enterprise12%
    Large Enterprise69%
    REVIEWERS
    Small Business29%
    Midsize Enterprise36%
    Large Enterprise36%
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise12%
    Large Enterprise70%
    Buyer's Guide
    IBM QRadar User Behavior Analytics vs. Splunk User Behavior Analytics
    November 2022
    Find out what your peers are saying about IBM QRadar User Behavior Analytics vs. Splunk User Behavior Analytics and other solutions. Updated: November 2022.
    657,849 professionals have used our research since 2012.

    IBM QRadar User Behavior Analytics is ranked 7th in User Behavior Analytics - UEBA with 12 reviews while Splunk User Behavior Analytics is ranked 6th in User Behavior Analytics - UEBA with 3 reviews. IBM QRadar User Behavior Analytics is rated 7.2, while Splunk User Behavior Analytics is rated 9.4. The top reviewer of IBM QRadar User Behavior Analytics writes "It has good support and works with Linux platforms". On the other hand, the top reviewer of Splunk User Behavior Analytics writes "Easy to use with a great dashboard and a simple setup". IBM QRadar User Behavior Analytics is most compared with Securonix UEBA, Microsoft Defender for Identity, Cynet, Exabeam Fusion SIEM and One Identity Safeguard, whereas Splunk User Behavior Analytics is most compared with Darktrace, Microsoft Defender for Identity, Elastic Enterprise Search, Cisco Secure Network Analytics and Cynet. See our IBM QRadar User Behavior Analytics vs. Splunk User Behavior Analytics report.

    See our list of best User Behavior Analytics - UEBA vendors.

    We monitor all User Behavior Analytics - UEBA reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.