We performed a comparison between IBM QRadar User Behavior Analytics and Splunk User Behavior Analytics based on real PeerSpot user reviews.
Find out in this report how the two User Behavior Analytics - UEBA solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
"It'll get you from point A to B."
"The timeline and machine learning features are great."
"What I like about IBM QRadar User Behavior Analytics is that it uses machine learning algorithms to generate risk scoring for the user activity. I also like that it syncs with our Active Directory users, so it really has full coverage for all users in our environment."
"The most valuable feature currently is security behaviors and the pdf files."
"The scalability is very good. It's not a problem."
"Blocks of predefined conditions can be used to configure detection rules without having to write complicated script."
"I have used IBM QRadar User Behavior Analytics in a Cloud Pak on Amazon, and there it runs on top of it and is easy to assess. Additionally, I have installed processes and characters."
"IBM QRadar User Behavior Analytics has easy architecture, has a good portfolio and integration."
"It's easily scalable."
"The solution is fast, flexible, and easy to use."
"The solution appears to be stable, although we haven't used it heavily."
"There should be more opportunity for community kind of distribution where, for example, if there was a zero-day threat targeting companies."
"QRadar UBA only keeps the data for a short while (it's refreshed every five minutes) and would be improved if this were extended to a week or month."
"The dashboard and reports are not user-friendly or efficient so are of little help with threat hunting activity."
"I would like to see more integration in place after the security lock."
"Whenever we are upgrading or installing any type of patch, at that time we have some delays."
"I don't give it a 10 because it is something we have to request. I would love it if UBA was included out of the box like Microsoft."
"The solution could improve by having more out-of-the-box use cases."
"IBM QRadar User Behavior Analytics could improve machine learning use cases because they are limited and most of the use cases are rule-based. They should develop more use cases, such as in Securonix or Exabeam because they will detect a threat. Using machine learning is mainly on the correlation rules, but if you think about Exabeam or Securonix, they detect using machine learning or machine learning-based algorithms."
"I would like improved downward integration with other tools such as McAfee and other GCP solutions."
"I'm not aware of any lacking features."
"We'd like the ability to do custom searches."
More IBM QRadar User Behavior Analytics Pricing and Cost Advice →
IBM QRadar User Behavior Analytics is ranked 7th in User Behavior Analytics - UEBA with 12 reviews while Splunk User Behavior Analytics is ranked 6th in User Behavior Analytics - UEBA with 3 reviews. IBM QRadar User Behavior Analytics is rated 7.2, while Splunk User Behavior Analytics is rated 9.4. The top reviewer of IBM QRadar User Behavior Analytics writes "It has good support and works with Linux platforms". On the other hand, the top reviewer of Splunk User Behavior Analytics writes "Easy to use with a great dashboard and a simple setup". IBM QRadar User Behavior Analytics is most compared with Securonix UEBA, Microsoft Defender for Identity, Cynet, Exabeam Fusion SIEM and One Identity Safeguard, whereas Splunk User Behavior Analytics is most compared with Darktrace, Microsoft Defender for Identity, Elastic Enterprise Search, Cisco Secure Network Analytics and Cynet. See our IBM QRadar User Behavior Analytics vs. Splunk User Behavior Analytics report.
See our list of best User Behavior Analytics - UEBA vendors.
We monitor all User Behavior Analytics - UEBA reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
