LogRhythm NetworkXDR [EOL] vs Splunk User Behavior Analytics comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between LogRhythm NetworkXDR [EOL] and Splunk User Behavior Analytics based on real PeerSpot user reviews.

Find out what your peers are saying about Darktrace, Vectra AI, Cisco and others in Network Detection and Response (NDR).
To learn more, read our detailed Network Detection and Response (NDR) Report (Updated: March 2024).
767,847 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"What we like most in LogRhythm NetworkXDR is its GUI. The GUI is the best when compared to competitors. For example, there is another SIEM in QRadar and Splunk, and for open source SIEM there is Wazuh and there are other SIEM solutions, but LogRhythm NetworkXDR is more reliable and easier to access. It's easy to use and its display is easy to understand. Learning LogRhythm NetworkXDR is smooth sailing compared to other SIEM solutions."

More LogRhythm NetworkXDR [EOL] Pros →

"The solution is fast, flexible, and easy to use.""The most valuable features are the indexing and powerful search features.""This is a good security product.""The product is at the forefront of auto-remediation networking. It's great.""Splunk is more user-friendly than some competing solutions we tried.""The most valuable feature is being able to take data and put it into other systems so that we could see the output, and to see where we need to apply our focus.""The most valuable feature is the ability to search through a large amount of data.""It's easily scalable."

More Splunk User Behavior Analytics Pros →

Cons
"What would make LogRhythm NetworkXDR better is if they could run it open source, similar to what is being done in Wazuh, and Wazuh is also a good tool to compare against. More integration could also make LogRhythm NetworkXDR better."

More LogRhythm NetworkXDR [EOL] Cons →

"There are occasional bugs.""I would like improved downward integration with other tools such as McAfee and other GCP solutions.""The correlation engine should have persistent and definable rules.""They should work to add more built-in correlation searches and more use cases based on worldwide customer experiences. They need more ready-made use cases.""The solution is much more expensive than relative competitors like ArcSight or LogRhythm. It makes it hard to sell to customers sometimes.""The price of Splunk UBA is too high.""We want to have an automated system for bot hunting that enables us to detect anomalies predictively based on historical data. It would be helpful if Splunk included process mining as an alternative option. We have a threat workflow, but it would be useful if we could supplement that with some process mining capabilities over time.""In the future I would like to see simplified statistics and analytical threats."

More Splunk User Behavior Analytics Cons →

Pricing and Cost Advice
Information Not Available
  • "I hope we can increase the free license to be more than 5 gig a day. This would help people who want to introduce a POC or a demo license for the solution."
  • "My biggest complaint is the way they do pricing... You can never know the pricing for next year. Every single time you adjust to something new, the price goes up. It's impossible to truly budget for it. It goes up constantly."
  • "There are additional costs associated with the integrator."
  • "The licensing costs is around 10,000 dollars."
  • "Pricing varies based on the packages you choose and the volume of your usage."
  • "I am not aware of the price, but it is expensive."
  • More Splunk User Behavior Analytics Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
    767,847 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:What we like most in LogRhythm NetworkXDR is its GUI. The GUI is the best when compared to competitors. For example, there is another SIEM in QRadar and Splunk, and for open source SIEM there is Wazuh… more »
    Top Answer:My team has no information on the licensing cost for LogRhythm NetworkXDR because it's the account manager from the sales team who deals with licensing.
    Top Answer:What would make LogRhythm NetworkXDR better is if they could run it open source, similar to what is being done in Wazuh, and Wazuh is also a good tool to compare against. More integration could also… more »
    Top Answer:We are really pleased with Splunk and its features. It would be practically impossible to function without it To provide a general overview of the system, it's important to note that the standard… more »
    Top Answer:I am not aware of the price, but it is expensive. A rough estimate would be around 150 gigabytes, given the huge amount of data. At the moment there are no additional costs for maintenance.
    Top Answer:Currently, we do not have any specific improvement projects in progress. However, we have partnered with some companies that are constantly working on improving the system. Therefore, I believe it's… more »
    Ranking
    Unranked
    In Network Detection and Response (NDR)
    Views
    2,321
    Comparisons
    1,443
    Reviews
    5
    Average Words per Review
    374
    Rating
    8.6
    Comparisons
    Also Known As
    LogRhythm NDR
    Caspida, Splunk UBA
    Learn More
    Splunk
    Video Not Available
    Overview

    LogRhythm NDR is a network security solution for detecting, qualifying, investigating, and responding to advanced network-borne threats. It provides the speed and full network visibility needed to combat attacks across your on-premise, remote, and cloud environments.

    The solution surfaces these threats through centralized, machine-based analysis of network traffic, including TTP scenario-based modeling, IOC signature-based inspection, and behavioral analysis.

    LogRhythm NDR leverages the power and capabilities of the LogRhythm NextGen SIEM platform, including patented and award-winning security analytics and embedded SOAR functionality.

    LogRhythm NDR has enabled customers to successfully catch, investigate, and respond to an array of threats such as low and slow data leaks, compromised servers used in lateral attacks, privileged user reconnaissance within internal networks, and SCADA attacks.

    Splunk User Behavior Analytics is a behavior-based threat detection is based on machine learning methodologies that require no signatures or human analysis, enabling multi-entity behavior profiling and peer group analytics for users, devices, service accounts and applications. It detects insider threats and external attacks using out-of-the-box purpose-built that helps organizations find known, unknown and hidden threats, but extensible unsupervised machine learning (ML) algorithms, provides context around the threat via ML driven anomaly correlation and visual mapping of stitched anomalies over various phases of the attack lifecycle (Kill-Chain View). It uses a data science driven approach that produces actionable results with risk ratings and supporting evidence that increases SOC efficiency and supports bi-directional integration with Splunk Enterprise for data ingestion and correlation and with Splunk Enterprise Security for incident scoping, workflow management and automated response. The result is automated, accurate threat and anomaly detection.

    Sample Customers
    8 Securities, AAA Western, AdvancedMD, Amaya, Cerner Corporation, CJ O Shopping, CloudShare, Crossroads Foundation, 7-Eleven Indonesia
    Top Industries
    No Data Available
    REVIEWERS
    Financial Services Firm44%
    Insurance Company11%
    Government11%
    Security Firm11%
    VISITORS READING REVIEWS
    Financial Services Firm14%
    Computer Software Company14%
    Government10%
    Manufacturing Company7%
    Company Size
    No Data Available
    REVIEWERS
    Small Business31%
    Midsize Enterprise31%
    Large Enterprise38%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise12%
    Large Enterprise69%
    Buyer's Guide
    Network Detection and Response (NDR)
    March 2024
    Find out what your peers are saying about Darktrace, Vectra AI, Cisco and others in Network Detection and Response (NDR). Updated: March 2024.
    767,847 professionals have used our research since 2012.

    LogRhythm NetworkXDR [EOL] doesn't meet the minimum requirements to be ranked in Network Detection and Response (NDR) with 1 review while Splunk User Behavior Analytics is ranked 2nd in User Entity Behavior Analytics (UEBA) with 17 reviews. LogRhythm NetworkXDR [EOL] is rated 10.0, while Splunk User Behavior Analytics is rated 8.2. The top reviewer of LogRhythm NetworkXDR [EOL] writes "Easier to learn, access, and use, and comes with an easy to understand GUI". On the other hand, the top reviewer of Splunk User Behavior Analytics writes "Easy to configure and easy to use solution that integrates with many applications and scripts ". LogRhythm NetworkXDR [EOL] is most compared with , whereas Splunk User Behavior Analytics is most compared with Darktrace, Microsoft Defender for Identity, IBM Security QRadar, Varonis Datalert and Cynet.

    We monitor all Network Detection and Response (NDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.