LogRhythm UEBA vs Splunk User Behavior Analytics comparison

LogRhythm and Splunk are both solutions in the User Entity Behavior Analytics (UEBA) category. LogRhythm is ranked #10 with an average rating of 7.0, while Splunk is ranked #4 with an average rating of 7.6. LogRhythm holds a 2.0% mindshare in UBA, compared to Splunk’s 9.1% mindshare. Additionally, 55% of LogRhythm users are willing to recommend the solution, compared to 100% of Splunk users who would recommend it.

LogRhythm UEBA

Read 11 LogRhythm UEBA reviews

215 Views
88 Comparison Views

55% willing to recommend

Splunk User Behavior Analytics

Read 23 Splunk User Behavior Analytics reviews

1,183 Views
217 Comparison Views

100% willing to recommend

LogRhythm UEBA

Splunk User Behavior Analytics

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 4, 2025

Splunk User Behavior Analytics and LogRhythm UEBA compete in the user behavior analysis and threat detection category. Splunk shows an advantage due to its robust features and usability, despite higher pricing.

Features: Splunk offers excellent search capabilities, rapid data processing, and integration with various systems. Its customizable dashboards and automated reporting are significant features. LogRhythm UEBA features an intuitive dashboard and machine learning capabilities, making it ideal for tracking user behaviors and cyber incidents. It is recognized for straightforward management but has less extensive features compared to Splunk.

Room for Improvement: Splunk could improve its User Behavior Analytics by enhancing tool integration and simplifying configurations. Its pricing model is criticized for being unpredictable and high. LogRhythm could enhance its machine learning features, improve dashboard quality, and expand its use case library. Pricing in certain markets is also a concern.

Ease of Deployment and Customer Service: Splunk supports both on-premises and public cloud deployments, providing flexibility but facing occasional support continuity challenges. LogRhythm primarily operates on-premises, with satisfactory yet average-rated technical support.

Pricing and ROI: Splunk's pricing is considered expensive, with additional costs for integrations and frequent price increases, leading to a moderate ROI due to high initial costs and productivity gains. LogRhythm offers competitive pricing for small to medium businesses but may be expensive compared to solutions like IBM QRadar, with observed ROI benefits in productivity and time savings.

To learn more, read our detailed LogRhythm UEBA vs. Splunk User Behavior Analytics Report (Updated: June 2025).

Buyer's Guide

LogRhythm UEBA vs. Splunk User Behavior Analytics

June 2025

Download the complete report

Helped 856,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

LogRhythm UEBA

Ranking in User Entity Behavior Analytics (UEBA)

10th

Average Rating

7.0

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Extended Detection and Response (XDR) (25th)

Splunk User Behavior Analytics

Ranking in User Entity Behavior Analytics (UEBA)

4th

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (12th)

Mindshare comparison

As of June 2025, in the User Entity Behavior Analytics (UEBA) category, the mindshare of LogRhythm UEBA is 2.0%, down from 3.1% compared to the previous year. The mindshare of Splunk User Behavior Analytics is 9.1%, down from 11.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

User Entity Behavior Analytics (UEBA)

Featured Reviews

Sheikh Abu Ayub Azad

CEO at Trustaira

Great at managing cyber incidents; the technical support could be improved

The initial setup is easy, partly because LogRhythm is primarily based on the Windows platform. It's good to have two engineers for deployment but it can be done with one. It's more about the knowledge. Deployment is typically done in two or three different phases. It usually takes up to three full months to get good deployment. There's the initial onboarding of all the log sources, then collecting data in the data lake, followed a couple of weeks later with some minor tuning before the final tuneup.

Read full review

Subhayu Chakraborty

System Engineer at Infosys

Automatic reports streamline tasks and offers easy report gathering

The dashboard part could be improved. While using it, I noticed two options: Classic, which is adequate yet only in black and white, and another one that is more advanced or smart, though I forgot the exact term. I encountered several issues while trying to create solutions for this advanced version, which seem unrelated to query or data issues.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I can investigate attacks more quickly using machine learning tools."

"The solution's most valuable features are the graphical user interface and the reporting."

"The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location."

"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."

"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."

"The tool's most valuable feature is server threat hunting."

"The most valuable features are file activity monitoring and registry activity monitoring."

"Good capability pinpointing specific cyber incidents."

More LogRhythm UEBA pros

"Splunk User Behavior Analytics is a one hundred percent stable solution."

"The product is at the forefront of auto-remediation networking. It's great."

"This intelligent user behavior analytics package is easy to configure and use while remaining feature filled."

"Features like alerts and auto report generation are valuable."

"It is a solution that helps test and measure customer satisfaction."

"The solution is definitely scalable."

"The solution appears to be stable, although we haven't used it heavily."

"The most valuable feature is being able to take data and put it into other systems so that we could see the output, and to see where we need to apply our focus."

More Splunk User Behavior Analytics pros

Cons

"It should have better mitigation with other solutions and be tightly integrated with other solutions. It has to be improved."

"The UI could be improved a little bit."

"The cloud version is lacking and not up to par."

"LogRhythm UEBA's data aggregation needs to be improved. Open-source users do not have much documentation available. Documentation is available only for enterprise users."

"The search feature needs to be improved."

"In general, if something needs to be improved in the algorithm, it would be the dashboards."

"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."

"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."

More LogRhythm UEBA cons

"The dashboard part could be improved."

"In terms of improvements, advanced reporting could see enhancements as there are some issues with latency."

"There are occasional bugs."

"In the future I would like to see simplified statistics and analytical threats."

"The ability to do more complicated data investigation would be a welcome addition for pros, though the functionality now gives most people what they need."

"In terms of improvements, advanced reporting could see enhancements as there are some issues with latency. Additionally, there are challenges with configuration findings during lexical analysis."

"If the price was lowered and the setup process was less complex, I would consider rating it higher."

"We want to have an automated system for bot hunting that enables us to detect anomalies predictively based on historical data. It would be helpful if Splunk included process mining as an alternative option. We have a threat workflow, but it would be useful if we could supplement that with some process mining capabilities over time."

More Splunk User Behavior Analytics cons

Pricing and Cost Advice

"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."

"LogRhythm UEBA's pricing is affordable for small and medium businesses."

"It is quite a budget-friendly product."

"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."

"Licensing is on a yearly basis. It's not expensive compared to its competitors."

"The pricing is nice when compared to other products in the industry."

"The licensing costs is around 10,000 dollars."

"Pricing varies based on the packages you choose and the volume of your usage."

"I am not aware of the price, but it is expensive."

"My biggest complaint is the way they do pricing... You can never know the pricing for next year. Every single time you adjust to something new, the price goes up. It's impossible to truly budget for it. It goes up constantly."

"There are additional costs associated with the integrator."

"I hope we can increase the free license to be more than 5 gig a day. This would help people who want to introduce a POC or a demo license for the solution."

See which vendors are best for you

Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.

See recommendations

856,873 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

10%

Manufacturing Company

10%

Real Estate/Law Firm

Computer Software Company

17%

Financial Services Firm

13%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about LogRhythm UserXDR?

The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance...

See all answers

What is your experience regarding pricing and costs for LogRhythm UserXDR?

I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive.

See all answers

What needs improvement with LogRhythm UserXDR?

In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...

See all answers

What do you like most about Splunk User Behavior Analytics?

The solution's most valuable feature is Splunk queries, which allow us to query the logs and analyze the attack vectors.

See all answers

What is your experience regarding pricing and costs for Splunk User Behavior Analytics?

The pricing is based on the amount of data processed, and it is considered a high-level investment for enterprises. Costs can be cut through efficient use and implementation.

See all answers

What needs improvement with Splunk User Behavior Analytics?

High data ingestion costs can be an issue, especially for large enterprises, as Splunk charges based on the amount of data processed. Complex dashboards may require additional scripting. Some integ...

See all answers

Comparisons

Wazuh vs LogRhythm UEBA

Compared 43% of the time

Darktrace vs LogRhythm UEBA

Compared 20% of the time

Cortex XDR by Palo Alto Networks vs LogRhythm UEBA

Compared 10% of the time

Microsoft Purview Insider Risk Management vs LogRhythm UEBA

Compared 9% of the time

IBM Security QRadar vs LogRhythm UEBA

Compared 6% of the time

More LogRhythm UEBA Competitors

Microsoft Purview Insider Risk Management vs Splunk User Behavior Analytics

Compared 48% of the time

Darktrace vs Splunk User Behavior Analytics

Compared 7% of the time

Exabeam vs Splunk User Behavior Analytics

Compared 7% of the time

Gurucul UEBA vs Splunk User Behavior Analytics

Compared 5% of the time

Varonis Platform vs Splunk User Behavior Analytics

Compared 4% of the time

More Splunk User Behavior Analytics Competitors

Product Reports

Buyer's Guide

User Entity Behavior Analytics (UEBA)

June 2025

Download LogRhythm UEBA product report

Buyer's Guide

Splunk User Behavior Analytics

May 2025

Download Splunk User Behavior Analytics product report

Also Known As

LogRhythm UserXDR, LogRhythm Enterprise UEBA

Caspida, Splunk UBA

Overview

LogRhythm UEBA enables your security team to quickly and effectively detect, respond to, and neutralize both known and unknown threats. Providing evidence-based starting points for investigation, it employs a combination of scenario analytics techniques (e.g., statistical analysis, rate analysis, trend analysis, advanced correlation), and both supervised and unsupervised machine learning (ML).

LogRhythm

Splunk User Behavior Analytics is a behavior-based threat detection is based on machine learning methodologies that require no signatures or human analysis, enabling multi-entity behavior profiling and peer group analytics for users, devices, service accounts and applications. It detects insider threats and external attacks using out-of-the-box purpose-built that helps organizations find known, unknown and hidden threats, but extensible unsupervised machine learning (ML) algorithms, provides context around the threat via ML driven anomaly correlation and visual mapping of stitched anomalies over various phases of the attack lifecycle (Kill-Chain View). It uses a data science driven approach that produces actionable results with risk ratings and supporting evidence that increases SOC efficiency and supports bi-directional integration with Splunk Enterprise for data ingestion and correlation and with Splunk Enterprise Security for incident scoping, workflow management and automated response. The result is automated, accurate threat and anomaly detection.

Splunk

Sample Customers

Information Not Available

8 Securities, AAA Western, AdvancedMD, Amaya, Cerner Corporation, CJ O Shopping, CloudShare, Crossroads Foundation, 7-Eleven Indonesia

Buyer's Guide

LogRhythm UEBA vs. Splunk User Behavior Analytics

June 2025

Free Report: LogRhythm UEBA vs. Splunk User Behavior Analytics

Find out what your peers are saying about LogRhythm UEBA vs. Splunk User Behavior Analytics and other solutions. Updated: June 2025.

DOWNLOAD NOW

856,873 professionals have used our research since 2012.

See our LogRhythm UEBA vs. Splunk User Behavior Analytics report.

See our list of best User Entity Behavior Analytics (UEBA) vendors.

We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.