LevelBlue USM Anywhere vs. Splunk Enterprise

LevelBlue USM Anywhere

733 Reviews and Ratings

Splunk Enterprise

476 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
LevelBlue USM Anywhere	Score3.7 out of 10	N/A	The LevelBlue USM Anywhere XDR platform (replacing the former AlienVault USM) delivers threat detection, incident response, and compliance management.	$1,075 per month
Splunk Enterprise	Score8.5 out of 10	N/A	Splunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.	N/A

Pricing

LevelBlue USM Anywhere

Splunk Enterprise

Essentials: $1,075
per month
Standard: $1,695
per month
Premium: $2,595
per month

No answers on this topic

Pricing Offerings
LevelBlue USM Anywhere	Splunk Enterprise
Free Trial
Yes	Yes
Free/Freemium Version
Yes	Yes
Premium Consulting/Integration Services
Yes	No

Optional

No setup fee

—

—

Community Pulse
Key User Insights
	LevelBlue USM Anywhere	Splunk Enterprise
Considered Both Products	LevelBlue Verified User Chose LevelBlue USM Anywhere AlienVault was given to us, even though we already had Secureworks. Both SecureWorks and Fireye are more of a Managed solution. It's fine to say we'll use AlienVault but it requires a lot of expertise to get it running and alerting correctly. And even then, if no one is … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere Splunk is more customisable but we liked USM Anywhere more because they offered more support and it was easier to use. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere I evaluated Splunk in the past but found the interface and work required to build queries and manage alerting was more work than I was willing to take on. I didn't like having to learn another language just to search for what I wanted. Through a managed service provider I also … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault provides a much simpler implementation than Zabbix but of course the cost is much lower. While both do a good job, AlienVault USM does the best for vulnerability scanning and reporting but Zabbix excels much better with integration with Splunk for alerting. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere We looked at Splunk and compared it to AlienVault USM,but their offerings weren't as friendly both in implementation and pricing. One of the biggest pluses of AlienVault USM is the offering of an on-premise virtual appliance. We are still a shop where we like to be hands-on … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere Splunk's ES is a paid add-on on top of an already pricey product. Finding a MSSP that supports Splunk and isn't a 6 figure annual commitment seems unlikely. LogRhythm did not have a cloud-based solution when we were considering SIEMs. Fantastic product though and have a good … Incentivized Helpful? Todd Fletcher IT Security Engineer in Information Technology at Missouri Employers Mutual (Insurance, 201-500 employees) Chose LevelBlue USM Anywhere As a SIEM, USM is easier and more user friendly than Splunk. however, Splunk isn't only geared for security. As a network engineering tool, USM isn't a good fit. We use both. Nessus is a great vulnerability scanning tool. But it does not serve the wider purpose of USM, which is … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere I have used Splunk before and it is also a good product. I feel that AlienVault has a lower learning curve and is easier to setup and query. I would liken the comparison to Splunk is like using command line for setup and normalization where as AlienVault would be using a GUI … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere I have used Splunk before, and they are both good products. I generally like AlienVault more than Splunk, and one of the main reason is cost. For medium-sized managed service providers, cost is a big thing, and justifying that cost to customers is a hard thing to do. I also … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere We already had familiarity with the platform but we needed cloud support so we upgraded to USM. We reviewed a few other options but decided USM was the best fit our requirements and price point. Incentivized Helpful? Steinerroggers Ufomaduh Security Architect in Information Technology at Kneip (Financial Services, 201-500 employees) Chose LevelBlue USM Anywhere The tools reviewed were quite sophisticated. The reason for choosing AlienVault USM was mainly inclusiveness (multiple services integrated) of the solution as well as the cost-benefit ratio. Integrating the solution into our current infrastructure also appeared relatively … Incentivized Helpful? Xiaotong Song Business Analyst in Corporate at 3M (Cosmetics, 10,001+ employees) Chose LevelBlue USM Anywhere Compared to the main competitor's products, the AlienVault USM is particularly good in terms of cost effectiveness. Your company does not need to spend a huge amount of money in the first place just to test out the result. By using AlienVault USM, you can also get great support … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere This solution was not the cheapest, but covered the feature set we needed. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere Mostly a price matter. In terms of the free version of AlienVault, it's just too much work to set it up properly. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere Balancing what each product had to offer, the grade of difficulty of implementation and the investment it represented for our company AlienVault came out as the better option for our infrastructure. Incentivized Helpful? Nathan Manzi Chief Technologist in Professional Services at Diverse Services (Information Technology and Services, 11-50 employees) Chose LevelBlue USM Anywhere For us, AlienVault sat in the goldilocks zone of feature richness, flexibility, and ease of management as compared to other solutions. Incentivized Helpful? Cory Watson Security Engineer in Information Technology at Shipt (Internet, 501-1000 employees) Chose LevelBlue USM Anywhere The tool works well compared with the two others. As I said previously, AlienVault USM gives you a lot of visibility right out of the box and with very little configuration. However, I like the ability to customize pieces, such as log parsers and dashboards, as I see fit without … Incentivized Helpful? Fintan O'Meara IT Infrastructure Manager in Information Technology at Version 1 (Information Technology and Services, 1001-5000 employees) Chose LevelBlue USM Anywhere Easy to implement out of the box with good return on investment very early on in the process. Good price point orginally compared to some of the other enterprise products. Good support, responsive to requests for specific features, etc. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault provides a much more comprehensive solution and is much easier to use and configure. Incentivized Helpful? Jesse Bickel Sr. Project Manager in Information Technology at CaptureRX (Hospital & Health Care, 51-200 employees) Chose LevelBlue USM Anywhere Alienvault was the most aggressive in their pricing and marketing of ease of deployment. The ease of deployment was what really aided in their ability to win our business. The ROI was worth the investment for our security at the time. Also being a market leader aided in our … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault seems to have a better UI and easier integration than the rest of the products. The price was slightly lower and had more features/easier integrations with external components. Overall AlienVault was selected based on the SOC 2 requirements we needed to fill. When … Incentivized Helpful? Brian Lindow Director of Technical Services in Information Technology at SECURA Insurance Companies (Insurance, 501-1000 employees) Chose LevelBlue USM Anywhere AlienVault was much less expensive with less effort to install and manage. Incentivized Helpful? Magdiel Hernandez Director of Cyber Security in Information Technology at Best Day Travel Group (Hospitality, 1001-5000 employees) Chose LevelBlue USM Anywhere Honestly, pricing is the main reason. AlienVault was already purchased when I was hired as Director, and the company did not have enough budget for anything else. Implementation was subpar, very disappointing, and renewal was a nightmare. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere I felt like AlienVault just fit the mold of what we were looking for in our SIEM better. Incentivized Helpful?	Cisco Verified User Chose Splunk Enterprise We used this first but are considering moving away due to log space limitations because of cost. Incentivized Helpful?
	Would buy again
	No answers on this topic	No answers on this topic
	Delivers good value for the price
	No answers on this topic	No answers on this topic
	Happy with the feature set
	No answers on this topic	No answers on this topic
	Lived up to sales and marketing promises
	No answers on this topic	No answers on this topic
	Implementation went as expected
No answers on this topic	No answers on this topic

Features

LevelBlue USM Anywhere

Splunk Enterprise

Comparison of Security Information and Event Management (SIEM) features of LevelBlue USM Anywhere and Splunk Enterprise
Feature	LevelBlue USM Anywhere - Ratings	Splunk Enterprise 7.1 56 Ratings
Centralized event and log data collection	00 Ratings	9.055 Ratings
Correlation	00 Ratings	9.054 Ratings
Event and log normalization/management	00 Ratings	9.555 Ratings
Deployment flexibility	00 Ratings	7.050 Ratings
Integration with Identity and Access Management Tools	00 Ratings	6.051 Ratings
Custom dashboards and workspaces	00 Ratings	5.956 Ratings
Host and network-based intrusion detection	00 Ratings	4.939 Ratings
Data integration/API management	00 Ratings	8.06 Ratings
Behavioral analytics and baselining	00 Ratings	5.96 Ratings
Rules-based and algorithmic detection thresholds	00 Ratings	7.56 Ratings
Response orchestration and automation	00 Ratings	7.05 Ratings
Reporting and compliance management	00 Ratings	6.46 Ratings
Incident indexing/searching	00 Ratings	6.57 Ratings

User Ratings
	LevelBlue USM Anywhere	Splunk Enterprise
Likelihood to Recommend	9.8 (390 ratings)	7.8 (73 ratings)
Likelihood to Renew	7.2 (18 ratings)	10.0 (17 ratings)
Usability	6.7 (34 ratings)	8.2 (6 ratings)
Availability	6.4 (3 ratings)	10.0 (1 ratings)
Performance	7.3 (3 ratings)	- (0 ratings)
Support Rating	7.3 (25 ratings)	8.4 (17 ratings)
In-Person Training	4.5 (1 ratings)	- (0 ratings)
Online Training	8.3 (6 ratings)	8.0 (1 ratings)
Implementation Rating	6.4 (38 ratings)	9.0 (2 ratings)
Configurability	8.0 (3 ratings)	- (0 ratings)
Ease of integration	7.3 (3 ratings)	- (0 ratings)
Product Scalability	6.3 (3 ratings)	9.1 (1 ratings)
Vendor post-sale	7.6 (3 ratings)	- (0 ratings)
Vendor pre-sale	8.2 (3 ratings)	- (0 ratings)