Cisco Secure Cloud Analytics [EOL] vs Splunk User Behavior Analytics comparison

Why PeerSpot?

Cisco and Splunk are both solutions in the Intrusion Detection and Prevention Software (IDPS) category. Additionally, 100% of Cisco users are willing to recommend the solution, compared to 100% of Splunk users who would recommend it.

Cisco Secure Cloud Analytic...

Read 7 Cisco Secure Cloud Analytics [EOL] reviews

100% willing to recommend

Splunk User Behavior Analytics

Read 25 Splunk User Behavior Analytics reviews

6,450 Views
2,129 Comparison Views

100% willing to recommend

Cisco Secure Cloud Analytic...

Splunk User Behavior Analytics

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cisco Secure Cloud Analytics [EOL] and Splunk User Behavior Analytics based on real PeerSpot user reviews.

Find out what your peers are saying about Fortinet, Darktrace, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS).

To learn more, read our detailed Intrusion Detection and Prevention Software (IDPS) Report (Updated: September 2026).

Buyer's Guide

Intrusion Detection and Prevention Software (IDPS)

September 2026

Download the complete report

Helped 914,322 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cisco Secure Cloud Analytic...

Average Rating

8.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Splunk User Behavior Analytics

Average Rating

8.2

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (9th), User Entity Behavior Analytics (UEBA) (4th)

Featured Reviews

Sudhanshu Pandey

Security Analyst at Orange España

Efficiently generates alerts for suspicious activities and scales easily

There are two areas of improvement. Firstly, extend the log retrieval limit to at least three months. For example, there is a limit on the number of log messages that can be received. So, I would like to expand the log retrieval limit. And another thing, if we migrate these things to an event or send us an email if there is any critical event, I would like to configure these things on the initial launch. Because if a system is compromised, there will be a lot of data movement from one post to another post to the outside. Then, we should also get an alert on email as well. We have since we have integrated these things. But a direct email for critical alerts should be there. So, I would like to enhance the critical event configuration. If a new user wants to learn how it should work, how policies work, and where we can configure policies, there should be some learning material for this product.

Read full review

Ahmed Naguib

Director at Techpace

Dashboard design excels while prediction algorithms need improvement

Splunk User Behavior Analytics is still an immature product, so it still needs some R&D to be able to be mature in the market. The prediction, algorithms, and ML codes behind Splunk User Behavior Analytics need to be more tuned. The logic needs to be reviewed because it has many false positives. For Splunk User Behavior Analytics, it is not yet a mature product and we are not recommending this to mature customers for now. The machine learning algorithm in Splunk User Behavior Analytics is actually the core thing that needs to be updated because this feeds all the other functions inside it. If the ML functions are not good enough, that means the risk scoring and all other related information will not be correct.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The product helps me to see malware."

"When it comes to scalability, there's no size limit. It varies based on licenses and requirements."

"We were able to prevent an electric fraud of almost $200,000."

"It tells you if there is any communication going to command and control servers, or if there is any traffic that violates your internal policy, or if any data hoarding is happening where data is being dumped from your machine to outside of the environment. It provides all such meaningful reports to help you understand what's happening."

"The tool's best feature is its ability to monitor network traffic. It will also inform users whether the traffic generated by a network is legitimate. The tool helps to capture and analyze the network traffic."

"The logs in Cisco Stealthwatch Cloud are very good when doing the API integration in the team. It is able to give you important information for the correlations."

"Monitoring the traffic, making sure you have the visibility."

"My advice to others is Cisco has great solutions and I would recommend them."

More Cisco Secure Cloud Analytics [EOL] pros

"It's easily scalable."

"It is a solution that helps test and measure customer satisfaction."

"We are really pleased with Splunk and its features. It would be practically impossible to function without it. To provide a general overview of the system, it's important to note that the standard log files are currently around 250 gigabytes per day. It would be impossible to manually walk through these logs by hand, which is why automation is essential."

"We enjoy the overall usability; you just look at the dashboard and you have all the data that you need at a glance."

"Splunk is a very powerful platform; when it comes to functionality and ease of use, Splunk is one of the market leaders in this area."

"After more than three years of using this solution, I would recommend this solution, especially for environments that have a big volume of data."

"In Egypt, we have phones that provide wide internet services to the customer and the customer wants to know what the customer satisfaction and service was, then they post on their Facebook or Twitter page to measure the customer satisfaction and after one or two days they start to take the comments and they enter these comments to Splunk and the UBA starts to make correlations and analytics on this data, and finally, the managers or the decision maker get the results, which is wonderful, and the customer is satisfied."

"Our main use of this solution is threat intelligence and we are very satisfied with it, as it is exactly what we need in our situation."

More Splunk User Behavior Analytics pros

Cons

"The product's price is high."

"Cisco Stealthwatch Cloud could improve the graphical user interface. It could be a more user-friendly graphical user interface. so that. Not everybody's a cyber security professional, most of the customers that I deal with are not very skilled. The terms that they use in the solution are quite understandable for a normal CIO."

"Cisco Stealthwatch Cloud could improve the graphical user interface. It could be a more user-friendly graphical user interface."

"If we migrate these things to an event or send us an email if there is any critical event, I would like to configure these things on the initial launch. Because if a system is compromised, there will be a lot of data movement from one post to another post to the outside. Then, we should also get an alert on email as well. We have since we have integrated these things. But a direct email for critical alerts should be there. So, I would like to enhance the critical event configuration."

"The product needs to improve its user-friendliness. It is very tricky and you need to study it before using the standard functionalities."

"The initial setup of Cisco Stealthwatch Cloud is complex."

"The initial setup is a bit complex in terms of deployment and configuration."

"When I used to work on it, I just didn't see anything new happening for about a year and a half. Providing newer data and newer reports constantly would help. There should be more classifications and more interesting data."

"Currently, a lot of network operations need improvement. We still need people to handle incidents."

"If the price was lowered and the setup process was less complex, I would consider rating it higher."

"Splunk can improve the UBA."

"In the future I would like to see simplified statistics and analytical threats, as well as a more user-friendly interface for dashboards."

"It would be good if the solution had an analytics tool that allowed us to analyze the data without writing specific queries."

"The price of Splunk UBA is too high."

"I would like to see an enhancement in the automation of creating the rules."

"I would like to see a better tracking intelligence module with lower costs fully integrated with a user behavior analytics module."

More Splunk User Behavior Analytics cons

Pricing and Cost Advice

"Cisco Stealthwatch Cloud is an expensive enterprise solution."

"The price of Cisco Stealthwatch Cloud is expensive."

"The solution is quite expensive."

"My biggest complaint is the way they do pricing... You can never know the pricing for next year. Every single time you adjust to something new, the price goes up. It's impossible to truly budget for it. It goes up constantly."

"I am not aware of the price, but it is expensive."

"Pricing varies based on the packages you choose and the volume of your usage."

"The licensing costs is around 10,000 dollars."

"There are additional costs associated with the integrator."

"I hope we can increase the free license to be more than 5 gig a day. This would help people who want to introduce a POC or a demo license for the solution."

See which vendors are best for you

Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.

See recommendations

914,322 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

15%

Comms Service Provider

11%

Outsourcing Company

11%

Manufacturing Company

Financial Services Firm

12%

Comms Service Provider

Computer Software Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	1
Midsize Enterprise	2
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	7
Large Enterprise	12

Questions from the Community

Ask a question

Earn 20 points

What is your experience regarding pricing and costs for Splunk User Behavior Analytics?

Splunk User Behavior Analytics is a premium product. Compared to all other products in the market, it is the most expensive one in all aspects including professional service and licenses, even the ...

See all answers

What needs improvement with Splunk User Behavior Analytics?

Splunk User Behavior Analytics is still an immature product, so it still needs some R&D to be able to be mature in the market. The prediction, algorithms, and ML codes behind Splunk User Behavi...

See all answers

What is your primary use case for Splunk User Behavior Analytics?

The main use cases for Splunk User Behavior Analytics include threat detection. I detect insider threats, compromised users, account misuse, and all those things. I use unsupervised and supervised ...

See all answers

Comparisons

Darktrace vs Cisco Secure Cloud Analytics [EOL]

Compared 15% of the time

CrowdStrike Falcon vs Cisco Secure Cloud Analytics [EOL]

Compared 13% of the time

Microsoft Defender for Endpoint vs Cisco Secure Cloud Analytics [EOL]

Compared 8% of the time

Tanium vs Cisco Secure Cloud Analytics [EOL]

Compared 7% of the time

Cisco Secure Network Analytics vs Cisco Secure Cloud Analytics [EOL]

Compared 6% of the time

More Cisco Secure Cloud Analytics [EOL] Competitors

Exabeam vs Splunk User Behavior Analytics

Compared 7% of the time

KerioControl vs Splunk User Behavior Analytics

Compared 5% of the time

Gurucul UEBA vs Splunk User Behavior Analytics

Compared 5% of the time

Cisco Secure IPS (NGIPS) vs Splunk User Behavior Analytics

Compared 4% of the time

Dtex Systems vs Splunk User Behavior Analytics

Compared 4% of the time

More Splunk User Behavior Analytics Competitors

Product Reports

Buyer's Guide

Cisco Secure Cloud Analytics [EOL]

September 2026

Cisco Secure Cloud Analytics [EOL] report

Download Cisco Secure Cloud Analytics [EOL] product report

Buyer's Guide

Splunk User Behavior Analytics

September 2026

Download Splunk User Behavior Analytics product report

Also Known As

Cisco Stealthwatch Cloud, Observable Networks

Caspida, Splunk UBA

Overview

Cisco Secure Cloud Analytics is a cloud-based security solution that provides visibility and threat detection for cloud environments. It offers software mapping and automation for incident response, forensic analysis, and segmentation of IT architecture. The solution can be used on-premise or on the cloud and is used in various sectors such as insurance and government.

The logs in Cisco Secure Cloud Analytics are valuable for API integration in a team as they provide important information for correlations. The solution also offers automated incident response and integration with next-generation firewalls and antivirus solutions."

Cisco

Splunk User Behavior Analytics focuses on data aggregation and threat detection with automation, deepening insights into user behavior. It offers usability, stability, and strong integration capabilities, making it a preferred choice for organizations needing comprehensive security management.

This platform enhances security management through customizable dashboards and real-time updates. Advanced analytics for anomaly detection and behavioral profiling, coupled with powerful indexing and search capabilities, enable thorough user behavior analysis. Users experience streamlined integration with Active Directory and other monitoring tools. However, improvements are needed in dashboard customization, customer support, and analytics tools to boost user experience. Organizations use Splunk User Behavior Analytics primarily for monitoring and analyzing user behavior, integrating various data sources for effective threat detection while maintaining governance.

What are the key features of Splunk User Behavior Analytics?

Data Aggregation: Consolidates data from multiple sources for comprehensive analysis.
Threat Detection: Utilizes automation and analytics for identifying potential threats.
Customizable Dashboards: Offers personalized views and real-time updates.
Integration Capabilities: Seamless integration with Active Directory and other tools.
Advanced Analytics: Includes anomaly detection and behavioral profiling.

What benefits and ROI should organizations expect?

Enhanced Security: Improved threat detection and management.
Scalability: Suitable for large-scale environments with broad applications.
Efficient Operations: User-friendly platform with powerful indexing and search.
Automation Features: Automated processes reduce manual efforts in threat detection.

Splunk User Behavior Analytics is widely implemented across industries for threat detection and insider threat identification. By integrating with tools like Active Directory for monitoring and anomaly detection, organizations benefit from robust security management and effective log analysis. It underpins efforts in security, data indexing, and combining data for comprehensive threat prevention.

Splunk

Sample Customers

Options, Schneider Electric, Washington University in St Louis, Gotcha, Kraft Kennedy, PartnerRe, Sumologic, Veterans United, AFGE, Agraform, Artesys, Dynamic Ideas Financials, Department of Agriculture and Commerce

8 Securities, AAA Western, AdvancedMD, Amaya, Cerner Corporation, CJ O Shopping, CloudShare, Crossroads Foundation, 7-Eleven Indonesia

Buyer's Guide

Intrusion Detection and Prevention Software (IDPS)

September 2026

Download Free Report

Find out what your peers are saying about Fortinet, Darktrace, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS). Updated: September 2026.

DOWNLOAD NOW

914,322 professionals have used our research since 2012.

See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.

We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.