Elastic Security vs. Splunk User Behavior Analytics

Elastic Security

Elastic Security

13 Reviews and Ratings

Splunk User Behavior Analytics

Splunk User Behavior Analytics

5 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Elastic Security	Score 8.4 out of 10	N/A	Elastic Security equips analysts to prevent, detect, and respond to threats. The free and open solution delivers SIEM, endpoint security, threat hunting, and cloud monitoring. The solution encompasses Elastic SIEM, which brings Elasticsearch to SIEM and threat hunting. The Elastic Agent (or Elastic Endpoint Security based on the former Endgame security product acquired by Elastic in late 2019) brings signatureless malware prevention to endpoints, as well as security data collection for…	N/A
Splunk User Behavior Analytics	Score 5.9 out of 10	N/A	Splunk supplies security analytics as a standalone solution or priced as an add-on for users of its popular SIEM products, to protect enterprises against unknown threats and malicious behavior, via the Splunk User Behavior Analytics application.	N/A

Pricing

Elastic Security

Splunk User Behavior Analytics

Editions & Modules

No answers on this topic

No answers on this topic

Offerings

Pricing Offerings
Elastic Security	Splunk User Behavior Analytics
Free Trial
No	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

No setup fee

Additional Details

—

—

More Pricing Information

Community Pulse
	Elastic Security	Splunk User Behavior Analytics
Considered Both Products	Elastic Security Verified User Anonymous Chose Elastic Security Endgame is based on the MITRE framework which has proven to be a successful framework to identify various attack patterns that attackers use. Also, compared to the others it's easier to administer and manage. Incentivized Helpful?	Splunk User Behavior Analytics Verified User Anonymous Chose Splunk User Behavior Analytics Easier we were using Splunk Enterprise on heavy forwarder on which all the add-on were installed and were using Splunk Cloud with respect to search head and indexers stack. And with Splunk Enterprise Security premium app, we were relying on correlation rules which were throwing … Incentivized Helpful? Verified User Anonymous Chose Splunk User Behavior Analytics Splunk UBA is a great debugging tool, and it helps me analyze the application logs and get a better idea about the problem. It also helps in analyzing the user behavior in a nutshell over the entire application. Incentivized Helpful?

Best Alternatives
	Elastic Security	Splunk User Behavior Analytics
Small Businesses	LevelBlue USM Anywhere Score 3.8 out of 10	ActivTrak Score 8.8 out of 10
Medium-sized Companies	Sumo Logic Score 9.4 out of 10	ManageEngine ADAudit Plus Score 9.2 out of 10
Enterprises	Sumo Logic Score 9.4 out of 10	ManageEngine ADAudit Plus Score 9.2 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Elastic Security	Splunk User Behavior Analytics
Likelihood to Recommend	9.0 (0 ratings)	10.0 (0 ratings)
Support Rating	7.0 (0 ratings)	9.0 (0 ratings)

User Testimonials
	Elastic Security	Splunk User Behavior Analytics
Likelihood to Recommend	I believe Endgame is well suited to organizations that have their own Cybersecurity department. Its not well suited for organizations that don't have a Cybersecurity department. Incentivized Verified User Anonymous Read full review	Splunk is well suited for applications with large amounts of data, and large enterprise applications. Especially if the application has interconnected modules, it helps us to analyze and monitor the application greatly. Incentivized Verified User Anonymous Read full review
Pros	Identify 0-day malware. Provides a few forensic details on endpoints. Very easy to administer. Incentivized Verified User Anonymous Read full review	Monitor and troubleshoot for any system errors. Get the insights on application data sets and do some predictive analysis. Incentivized Verified User Anonymous Read full review
Cons	I would love that it provided more memory analysis details. Being able to edit sensor profiles after creating them. I would love it if it provided more automation features. Incentivized Verified User Anonymous Read full review	Performance-wise, it can be improved. Queries take a long time. Dataset exploration - More data visualization charts can be added. Incentivized Verified User Anonymous Read full review
Support Rating	Even though their support is good, I think there are some areas where they need to provide more thorough solutions to issues, some of their solutions are pretty basic and have already been tried. Incentivized Verified User Anonymous Read full review	No answers on this topic
Alternatives Considered	Endgame is based on the MITRE framework which has proven to be a successful framework to identify various attack patterns that attackers use. Also, compared to the others it's easier to administer and manage. Incentivized Verified User Anonymous Read full review	Easier we were using Splunk Enterprise on heavy forwarder on which all the add-on were installed and were using Splunk Cloud with respect to search head and indexers stack. And with Splunk Enterprise Security premium app, we were relying on correlation rules which were throwing more number of false positive but after implementing Splunk UBA, we are now getting real-time true positive threat or incidents. Incentivized Verified User Anonymous Read full review
Return on Investment	Being able to identify threats we couldn't identify before. Easier management of endpoints. Being able to immediately isolate endpoints remotely that have high severity threats. Incentivized Verified User Anonymous Read full review	Fewer team members to work on real threats. Less time required to deal with real incidents. Easy to implement across the network. Incentivized Verified User Anonymous Read full review
ScreenShots