• HOME
  • CATEGORIES

    • CATEGORIES

    • Browse All Categories
  • FOR VENDORS

    • FOR VENDORS

    • Log In to Vendor Portal
    • Get Started
  • REVIEWS

    • REVIEWS

    • Write a Review
    • Product Reviews
    • Vendor Directory
    • Product Comparisons
  • GARTNER PEER COMMUNITY™
  • GARTNER.COM
  • Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQPrivacyTerms of Service
    ©2026 Gartner, Inc. and/or its affiliates.
    All rights reserved.
  • Categories

    • Loading categories...

      Browse All Categories

      Loading markets...

  • For Vendors

    • Log In to Vendor Portal 

    • Get Started 

  • Write a Review

Join / Sign In
  1. Home
  2. /
  3. Splunk User Behavior Analytics
Logo of Splunk User Behavior Analytics

Splunk User Behavior Analytics

byCisco Systems (Splunk)
in Insider Risk Management Solutions
4.4

Overview

Product Information on Splunk User Behavior Analytics

Updated 13th October 2025

What is Splunk User Behavior Analytics?

Splunk User Behavior Analytics is a software that detects and analyzes potential security threats by monitoring user activities and behaviors within an organization’s digital environment. The software leverages machine learning and data science techniques to identify abnormal patterns, policy violations, and insider threats by correlating events from multiple data sources. It provides security teams with risk indicators, context, and actionable insights to investigate user activities that may signal compromised accounts or malicious actions. The software helps organizations strengthen their security posture by reducing the time needed to detect and respond to advanced threats while supporting compliance and regulatory requirements.

Splunk User Behavior Analytics Pricing

Splunk User Behavior Analytics software uses a subscription-based pricing model, typically structured according to data volume and user count. The software may offer tiered plans based on features and scale, with pricing varying according to organizational requirements and deployment type such as cloud or on-premises. License agreements often specify terms related to annual or multi-year commitments.

Overall experience with Splunk User Behavior Analytics

SECURITY ANALYST
1B - 3B USD, Retail
FAVORABLE

“Product Offers Usability for Analysts”

4.0
Oct 10, 2025
really easy to investigate for analyst with the integration of case specific dashboards
VP, Global Information Security
Gov't/PS/ED 50,000 + Employees, Education
CRITICAL

“We actually went a different route”

3.0
Aug 24, 2020
We actually went a different route at our organization. While we evaluated the Splunk UBA offering a couple of times we ultimately built what we call "UBA Lite". Our primary challenge was that to really leverage the power of Splunk UBA we needed data sources that we didn't have or would be challenging to accurately maintain. A primary data source for Splunk UBA is a proxy and while we may have been able to feed the product something helpful we don't have proxies deployed in a fashion that would have worked the best. With more people now remote and not passing through a traditional proxy, this data source becomes less valuable. We did decide to review Splunk ESCUs to and selected a number of UBA use-cases that we built out for ourselves based on data that we had readily available. This allowed us to be more focused on our specific requirements without having to add less valuable data sources and also provided us some cost savings.

About Company

Company Description

Updated 25th July 2024

Splunk operates in the realm of digital security and observability to facilitate safer and more resilient digital infrastructures. The company delivers a unified platform equipped with capabilities to maintain the secure operations of an organization, insulating it against potential digital disruptions.

Company Details

Updated 26th February 2025
Company type
Public
Year Founded
2003
Head office location
San Francisco, United States
Number of employees
5001 - 10000
Annual Revenue
3B-10B USD
Website
http://www.splunk.com

Do You Manage Peer Insights at Cisco Systems (Splunk)?

Access Vendor Portal to update and manage your profile.

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

Reviewer Insights for: Splunk User Behavior Analytics
Deciding Factors: Splunk User Behavior Analytics Vs. Market Average
Performance of Splunk User Behavior Analytics Across Market Features

Splunk User Behavior Analytics Likes & Dislikes

Like

nice and easy to use for analyst once the correct dashboards are created

Like

The product itself seemed capable enough if an organization was able to leverage enough of the data sources required. In our case, we decided to build our own use-cases based on available data sources and the increase in remote works.

Like

Ease of use, ease of configuration, ease of adoption.

Dislike

Hard for a new user to create new queries and dashboards due to the proprietary nature of the language.

Dislike

See earlier overall comments.

Dislike

Sometimes there is high false positives rates at the start that require continued work and configuration

Top Splunk User Behavior Analytics Alternatives

Logo of Varonis Data Security Platform
1. Varonis Data Security Platform
4.7
(259 Ratings)
Logo of Proofpoint Insider Threat Management
2. Proofpoint Insider Threat Management
4.6
(115 Ratings)
Logo of Microsoft Defender for Identity
3. Microsoft Defender for Identity
4.4
(99 Ratings)
View All Alternatives

Peer Discussions

Splunk User Behavior Analytics Reviews and Ratings

4.4

(37 Ratings)

Rating Distribution

5 Star
38%
4 Star
59%
3 Star
3%
2 Star
0%
1 Star
0%
Why ratings and reviews count differ?

Customer Experience

Evaluation & Contracting

4.4

Integration & Deployment

4.6

Service & Support

4.5

Product Capabilities

4.5

Filter Reviews
Sort By:
Most helpful
Last 12 Months
Star Rating
Reviewer Type
Reviewer's Company Size
Reviewer's Industry
Reviewer's Region
Reviewer's Job Function
  • SECURITY ANALYST
    1B-10B USD
    Retail
    Review Source

    Product Offers Usability for Analysts

    4.0
    Oct 10, 2025
    really easy to investigate for analyst with the integration of case specific dashboards
  • SR. DIR.
    1B-10B USD
    Consumer Goods
    Review Source

    Splunk UBA Improves Detection But Requires Ongoing Tuning for False Positives

    4.0
    Jun 22, 2025
    Splunk UBA has significantly enhanced our ability to detect insider threats and abnormal patterns.
  • Data and Analytics Manager
    1B-10B USD
    Retail
    Review Source

    Managing Large-Scale Customer Interactions Simplified With Scalable Data Solutions

    4.0
    Jun 24, 2025
    great tool for managing enormous load of data, mainly related to interacitions with end-customers
  • HEAD OF ENGINEERING
    <50M USD
    Software
    Review Source

    Effective Tool for Behavior Analysis with Quick Decision-Making Capabilities

    4.0
    Jun 4, 2025
    Very good to product to evaluate and analyze the user and entity behavior which helps in quick decision making.
  • IT INFRASTRUCTURE MANAGER
    <50M USD
    Telecommunication
    Review Source

    Effective Detection of Suspicious Activity With Splunk User Behavior Analytics

    5.0
    May 15, 2025
    Splunk User Behavior Analytics is easy to use and effective in detecting suspicious activity. Initial integration takes time, but it's worth it. very helpful for internal security
...
Showing Result 1-5 of 41

Recommended Gartner Research

  • Market Guide for Insider Risk Management Solutions

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

This site is protected by hCaptcha and its Privacy Policy and Terms of Use apply.


Software reviews and ratings for EMMS, BI, CRM, MDM, analytics, security and other platforms - Peer Insights by Gartner
Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQsPrivacyTerms of Use

©2026 Gartner, Inc. and/or its affiliates.

All rights reserved.