"The scalability is one of the best."
"The most valuable feature is being able to take data and put it into other systems so that we could see the output, and to see where we need to apply our focus."
"We are really pleased with Splunk and its features. It would be practically impossible to function without it. To provide a general overview of the system, it's important to note that the standard log files are currently around 250 gigabytes per day. It would be impossible to manually walk through these logs by hand, which is why automation is essential."
"It is a solution that helps test and measure customer satisfaction."
"The most valuable feature is the ability to search through a large amount of data."
"The most valuable features are the indexing and powerful search features."
"Because of some of the visualizations that we utilize, we are able to understand strange, unusual traffic on our networks."
"This is a good security product."
"The solution is fast, flexible, and easy to use."
"We don't always know what the configurations are all about. They change the configuration possibilities all of the time and we don't always get the same results."
"I would like improved downward integration with other tools such as McAfee and other GCP solutions."
"The solution is much more expensive than relative competitors like ArcSight or LogRhythm. It makes it hard to sell to customers sometimes."
"They should work to add more built-in correlation searches and more use cases based on worldwide customer experiences. They need more ready-made use cases."
"The ability to do more complicated data investigation would be a welcome addition for pros, though the functionality now gives most people what they need."
"The correlation engine should have persistent and definable rules."
"Currently, a lot of network operations need improvement. We still need people to handle incidents. Our vision is to leverage status and convert it directly from the network devices. It would be ideal if we could take action using APIs and API code and remove manual processes."
"In the future I would like to see simplified statistics and analytical threats."
"The initial setup was complex because some of the configurations that we required needed customization."
More Splunk User Behavior Analytics Pricing and Cost Advice →
Earn 20 points
Cisco CMX Analytics [EOL] doesn't meet the minimum requirements to be ranked in User Activity Monitoring while Splunk User Behavior Analytics is ranked 2nd in User Entity Behavior Analytics (UEBA) with 17 reviews. Cisco CMX Analytics [EOL] is rated 6.0, while Splunk User Behavior Analytics is rated 8.2. The top reviewer of Cisco CMX Analytics [EOL] writes "Good for IoT devices and occupation-calculations, but there are issues with stability and it is not user-friendly". On the other hand, the top reviewer of Splunk User Behavior Analytics writes "Easy to configure and easy to use solution that integrates with many applications and scripts ". Cisco CMX Analytics [EOL] is most compared with , whereas Splunk User Behavior Analytics is most compared with Darktrace, Microsoft Defender for Identity, IBM Security QRadar, Varonis Datalert and Cynet.
We monitor all User Activity Monitoring reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
