We performed a comparison between Rapid7 InsightIDR and Splunk User Behavior Analytics based on real PeerSpot user reviews.
Find out in this report how the two User Entity Behavior Analytics (UEBA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The product works well. Stability-wise, I rate the solution a ten out of ten."
"User behavioral analytics allows us to pinpoint abnormal or suspicious behavior among millions of events every day."
"The ability to ingest Office 365 log files, then process them into events and display them on a map."
"I like that it's a cloud-based solution."
"Rapid7 is easy to use and deploy. It is a simple solution and has easy data pulling."
"We were able to identify criminals attempting to login from China and put a stop on their IP locations."
"The log aggregation and storage provided by InsightIDR has shown no issues with scalability; aggregating over one hundred millions events daily."
"I have seen that Rapid7 InsightIDR provides security to the networks and endpoints in the company."
"This intelligent user behavior analytics package is easy to configure and use while remaining feature filled."
"Because of some of the visualizations that we utilize, we are able to understand strange, unusual traffic on our networks."
"The most valuable feature is the ability to search through a large amount of data."
"The product is at the forefront of auto-remediation networking. It's great."
"We are really pleased with Splunk and its features. It would be practically impossible to function without it. To provide a general overview of the system, it's important to note that the standard log files are currently around 250 gigabytes per day. It would be impossible to manually walk through these logs by hand, which is why automation is essential."
"It's easily scalable."
"The solution is definitely scalable."
"The most valuable features are its data aggregation and the ability to automatically identify a number of threats, then suggest recommended actions upon them."
"One thing that springs to mind is easier API integration with ITSMs. We are evaluating a new ITSM and I would like to have InsightIDR create a ticket when an attack is identified, and the ticket would be closed in InsightIDR when the ITSM resolution is completed. This would take out the "single point of failure" we currently have, if the email recipient is somehow absent, in recording the risk appetite for the incident and the actions taken to mitigate or not."
"Currently, it lacks the functionalities provided by Rapid7's User Behavior Analytics (UBA)."
"InsightIDR is only available in a cloud version. Some of our customers prefer an on-prem solution because they want to manage the security within their environment."
"Rapid7 InsightIDR is not intuitive to search for logs. It should be more user-friendly and improve the dashboards. We should be able to use ready-made templates instead of having to build one."
"It takes time for the product's support team to resolve issues, making it an area of concern where improvements are required."
"The dashboard is an area that could be simplified."
"The main problem lies in the processes within the client's operating systems."
"The product allows us to make only 30 custom rules."
"There are occasional bugs."
"We'd like the ability to do custom searches."
"I'm not aware of any lacking features."
"The correlation engine should have persistent and definable rules."
"We want to have an automated system for bot hunting that enables us to detect anomalies predictively based on historical data. It would be helpful if Splunk included process mining as an alternative option. We have a threat workflow, but it would be useful if we could supplement that with some process mining capabilities over time."
"They should work to add more built-in correlation searches and more use cases based on worldwide customer experiences. They need more ready-made use cases."
"I would like improved downward integration with other tools such as McAfee and other GCP solutions."
"In the future I would like to see simplified statistics and analytical threats."
More Splunk User Behavior Analytics Pricing and Cost Advice →
Rapid7 InsightIDR is ranked 3rd in User Entity Behavior Analytics (UEBA) with 30 reviews while Splunk User Behavior Analytics is ranked 2nd in User Entity Behavior Analytics (UEBA) with 18 reviews. Rapid7 InsightIDR is rated 8.4, while Splunk User Behavior Analytics is rated 8.2. The top reviewer of Rapid7 InsightIDR writes "Helps in the management of compliance, secret events and information". On the other hand, the top reviewer of Splunk User Behavior Analytics writes "Easy to configure and easy to use solution that integrates with many applications and scripts ". Rapid7 InsightIDR is most compared with Darktrace, Microsoft Sentinel, Splunk Enterprise Security, Rapid7 InsightVM and IBM Security QRadar, whereas Splunk User Behavior Analytics is most compared with Darktrace, Microsoft Defender for Identity, IBM Security QRadar, Cynet and Exabeam Fusion SIEM. See our Rapid7 InsightIDR vs. Splunk User Behavior Analytics report.
See our list of best User Entity Behavior Analytics (UEBA) vendors.
We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.