Try our new research platform with insights from 80,000+ expert users

LogRhythm UEBA vs Splunk User Behavior Analytics comparison

LogRhythm and Splunk are both solutions in the User Entity Behavior Analytics (UEBA) category. LogRhythm is ranked #14 with an average rating of 6.8, while Splunk is ranked #4 with an average rating of 7.8. LogRhythm holds a 2.3% mindshare in UBA, compared to Splunk’s 8.9% mindshare. Additionally, 55% of LogRhythm users are willing to recommend the solution, compared to 100% of Splunk users who would recommend it.
LogRhythm UEBA
Read 11 LogRhythm UEBA reviews
  • 209 Views
  • 82 Comparison Views
55% willing to recommend
Splunk User Behavior Analytics
Read 24 Splunk User Behavior Analytics reviews
  • 1,141 Views
  • 211 Comparison Views
100% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Feb 4, 2025

Splunk User Behavior Analytics and LogRhythm UEBA compete in the user behavior analysis and threat detection category. Splunk shows an advantage due to its robust features and usability, despite higher pricing.

Features: Splunk offers excellent search capabilities, rapid data processing, and integration with various systems. Its customizable dashboards and automated reporting are significant features. LogRhythm UEBA features an intuitive dashboard and machine learning capabilities, making it ideal for tracking user behaviors and cyber incidents. It is recognized for straightforward management but has less extensive features compared to Splunk.

Room for Improvement: Splunk could improve its User Behavior Analytics by enhancing tool integration and simplifying configurations. Its pricing model is criticized for being unpredictable and high. LogRhythm could enhance its machine learning features, improve dashboard quality, and expand its use case library. Pricing in certain markets is also a concern.

Ease of Deployment and Customer Service: Splunk supports both on-premises and public cloud deployments, providing flexibility but facing occasional support continuity challenges. LogRhythm primarily operates on-premises, with satisfactory yet average-rated technical support.

Pricing and ROI: Splunk's pricing is considered expensive, with additional costs for integrations and frequent price increases, leading to a moderate ROI due to high initial costs and productivity gains. LogRhythm offers competitive pricing for small to medium businesses but may be expensive compared to solutions like IBM QRadar, with observed ROI benefits in productivity and time savings.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed LogRhythm UEBA vs. Splunk User Behavior Analytics Report (Updated: June 2025).
Buyer's Guide
LogRhythm UEBA vs. Splunk User Behavior Analytics
June 2025
Download the complete report
Helped 860,592 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LogRhythm UEBA
Ranking in User Entity Behavior Analytics (UEBA)
14th
Average Rating
7.0
Reviews Sentiment
6.7
Number of Reviews
11
Ranking in other categories
Extended Detection and Response (XDR) (34th)
Splunk User Behavior Analytics
Ranking in User Entity Behavior Analytics (UEBA)
4th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
24
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (12th)
 

Mindshare comparison

As of July 2025, in the User Entity Behavior Analytics (UEBA) category, the mindshare of LogRhythm UEBA is 2.3%, down from 3.1% compared to the previous year. The mindshare of Splunk User Behavior Analytics is 8.9%, down from 11.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Entity Behavior Analytics (UEBA)
 

Featured Reviews

Sheikh Abu Ayub Azad - PeerSpot reviewer
Great at managing cyber incidents; the technical support could be improved
The initial setup is easy, partly because LogRhythm is primarily based on the Windows platform. It's good to have two engineers for deployment but it can be done with one. It's more about the knowledge. Deployment is typically done in two or three different phases. It usually takes up to three full months to get good deployment. There's the initial onboarding of all the log sources, then collecting data in the data lake, followed a couple of weeks later with some minor tuning before the final tuneup.
Read full review
Subhayu Chakraborty - PeerSpot reviewer
Automatic reports streamline tasks and offers easy report gathering
The dashboard part could be improved. While using it, I noticed two options: Classic, which is adequate yet only in black and white, and another one that is more advanced or smart, though I forgot the exact term. I encountered several issues while trying to create solutions for this advanced version, which seem unrelated to query or data issues.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Good capability pinpointing specific cyber incidents."
"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."
"The tool's most valuable feature is server threat hunting."
"The most valuable features are file activity monitoring and registry activity monitoring."
"The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location."
"The solution's most valuable features are the graphical user interface and the reporting."
"I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools."
"It is easy to monitor users and that is how the solution is adding value to our firm."
More LogRhythm UEBA pros
"The most valuable feature is the ability to search through a large amount of data."
"Features like alerts and auto report generation are valuable."
"The solution's most valuable feature is Splunk queries, which allow us to query the logs and analyze the attack vectors."
"This intelligent user behavior analytics package is easy to configure and use while remaining feature filled."
"It's straightforward in terms of configuration and troubleshooting and log management and monitoring as well. These are the edge points in addition to it being a modular solution where you can capitalize on your current licenses with extra licensing models, which can match the customer's business requirement and it can help the customer to design or to actually plan for their own roadmap."
"Splunk is more user-friendly than some competing solutions we tried."
"The solution is fast, flexible, and easy to use."
"The best features in Splunk User Behavior Analytics include anomaly detection, behavioral profiling, and risk scoring and prioritization functionality."
More Splunk User Behavior Analytics pros
 

Cons

"LogRhythm UEBA's data aggregation needs to be improved. Open-source users do not have much documentation available. Documentation is available only for enterprise users."
"In general, if something needs to be improved in the algorithm, it would be the dashboards."
"The search feature needs to be improved."
"The UI could be improved a little bit."
"What needs improvement in LogRhythm UEBA is the pricing. Here in Asia, for example, in Sri Lanka, pricing is the primary concern, and this is the only area for improvement I see in the product."
"It should have better mitigation with other solutions and be tightly integrated with other solutions. It has to be improved."
"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."
"The cloud version is lacking and not up to par."
More LogRhythm UEBA cons
"High data ingestion costs can be an issue, especially for large enterprises, as Splunk charges based on the amount of data processed."
"I would like to see an enhancement in the automation of creating the rules."
"We want to have an automated system for bot hunting that enables us to detect anomalies predictively based on historical data. It would be helpful if Splunk included process mining as an alternative option. We have a threat workflow, but it would be useful if we could supplement that with some process mining capabilities over time."
"The price of Splunk UBA is too high."
"The dashboard part could be improved. While using it, I noticed two options: Classic, which is adequate yet only in black and white, and another one that is more advanced or smart."
"The solution is much more expensive than relative competitors like ArcSight or LogRhythm. It makes it hard to sell to customers sometimes."
"The ability to do more complicated data investigation would be a welcome addition for pros, though the functionality now gives most people what they need."
"It would be good if the solution had an analytics tool that allowed us to analyze the data without writing specific queries."
More Splunk User Behavior Analytics cons
 

Pricing and Cost Advice

"Licensing is on a yearly basis. It's not expensive compared to its competitors."
"LogRhythm UEBA's pricing is affordable for small and medium businesses."
"It is quite a budget-friendly product."
"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."
"The pricing is nice when compared to other products in the industry."
"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."
"I am not aware of the price, but it is expensive."
"I hope we can increase the free license to be more than 5 gig a day. This would help people who want to introduce a POC or a demo license for the solution."
"There are additional costs associated with the integrator."
"Pricing varies based on the packages you choose and the volume of your usage."
"The licensing costs is around 10,000 dollars."
"My biggest complaint is the way they do pricing... You can never know the pricing for next year. Every single time you adjust to something new, the price goes up. It's impossible to truly budget for it. It goes up constantly."
report
See which vendors are best for you
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
See recommendations
860,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
11%
Manufacturing Company
9%
Real Estate/Law Firm
6%
Computer Software Company
17%
Financial Services Firm
12%
Government
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about LogRhythm UserXDR?
The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance...
See all answers
What is your experience regarding pricing and costs for LogRhythm UserXDR?
I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive.
See all answers
What needs improvement with LogRhythm UserXDR?
In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...
See all answers
What do you like most about Splunk User Behavior Analytics?
The solution's most valuable feature is Splunk queries, which allow us to query the logs and analyze the attack vectors.
See all answers
What is your experience regarding pricing and costs for Splunk User Behavior Analytics?
In terms of setup cost, pricing, and licensing, Splunk User Behavior Analytics is not an inexpensive product. The setup requires numerous components including storage, networking, identity access, ...
See all answers
What needs improvement with Splunk User Behavior Analytics?
There are improvements that could be made to Splunk User Behavior Analytics as any product will have advantages and disadvantages. Scalability is one consideration. For example, the advantages incl...
See all answers
 

Comparisons

Wazuh vs LogRhythm UEBA Logo
Wazuh vs LogRhythm UEBA
Compared 42% of the time
Darktrace vs LogRhythm UEBA Logo
Darktrace vs LogRhythm UEBA
Compared 21% of the time
Cortex XDR by Palo Alto Networks vs LogRhythm UEBA Logo
Cortex XDR by Palo Alto Networks vs LogRhythm UEBA
Compared 11% of the time
Microsoft Purview Insider Risk Management vs LogRhythm UEBA Logo
Microsoft Purview Insider Risk Management vs LogRhythm UEBA
Compared 8% of the time
IBM Security QRadar vs LogRhythm UEBA Logo
IBM Security QRadar vs LogRhythm UEBA
Compared 7% of the time
More LogRhythm UEBA Competitors
Microsoft Purview Insider Risk Management vs Splunk User Behavior Analytics Logo
Microsoft Purview Insider Risk Management vs Splunk User Behavior Analytics
Compared 48% of the time
Exabeam vs Splunk User Behavior Analytics Logo
Exabeam vs Splunk User Behavior Analytics
Compared 8% of the time
Darktrace vs Splunk User Behavior Analytics Logo
Darktrace vs Splunk User Behavior Analytics
Compared 7% of the time
Gurucul UEBA vs Splunk User Behavior Analytics Logo
Gurucul UEBA vs Splunk User Behavior Analytics
Compared 4% of the time
Varonis Platform vs Splunk User Behavior Analytics Logo
Varonis Platform vs Splunk User Behavior Analytics
Compared 4% of the time
More Splunk User Behavior Analytics Competitors
 

Product Reports

Buyer's Guide
User Entity Behavior Analytics (UEBA)
June 2025
LogRhythm UEBA reportDownload LogRhythm UEBA product report
Buyer's Guide
Splunk User Behavior Analytics
June 2025
Splunk User Behavior Analytics reportDownload Splunk User Behavior Analytics product report
 

Also Known As

LogRhythm UserXDR, LogRhythm Enterprise UEBA
Caspida, Splunk UBA
 

Overview

LogRhythm UEBA enables your security team to quickly and effectively detect, respond to, and neutralize both known and unknown threats. Providing evidence-based starting points for investigation, it employs a combination of scenario analytics techniques (e.g., statistical analysis, rate analysis, trend analysis, advanced correlation), and both supervised and unsupervised machine learning (ML).

LogRhythm

Splunk User Behavior Analytics is a behavior-based threat detection is based on machine learning methodologies that require no signatures or human analysis, enabling multi-entity behavior profiling and peer group analytics for users, devices, service accounts and applications. It detects insider threats and external attacks using out-of-the-box purpose-built that helps organizations find known, unknown and hidden threats, but extensible unsupervised machine learning (ML) algorithms, provides context around the threat via ML driven anomaly correlation and visual mapping of stitched anomalies over various phases of the attack lifecycle (Kill-Chain View). It uses a data science driven approach that produces actionable results with risk ratings and supporting evidence that increases SOC efficiency and supports bi-directional integration with Splunk Enterprise for data ingestion and correlation and with Splunk Enterprise Security for incident scoping, workflow management and automated response. The result is automated, accurate threat and anomaly detection.

Splunk
 

Sample Customers

Information Not Available
8 Securities, AAA Western, AdvancedMD, Amaya, Cerner Corporation, CJ O Shopping, CloudShare, Crossroads Foundation, 7-Eleven Indonesia
Buyer's Guide
LogRhythm UEBA vs. Splunk User Behavior Analytics
June 2025
Free Report: LogRhythm UEBA vs. Splunk User Behavior Analytics
Find out what your peers are saying about LogRhythm UEBA vs. Splunk User Behavior Analytics and other solutions. Updated: June 2025.
DOWNLOAD NOW
860,592 professionals have used our research since 2012.
See our LogRhythm UEBA vs. Splunk User Behavior Analytics report.
See our list of best User Entity Behavior Analytics (UEBA) vendors.

We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.