Splunk User and Entity Behavior Analytics

Paid#9 of 20 in User and Entity Behavior Analytics Software

Splunk User and Entity Behavior Analytics: A Splunk-native UEBA capability for risk scoring, anomaly detection, and investigations. Ranked #9 of 20 in User and Entity Behavior Analytics Software by our editors (8.6/10); pricing: Pricing on request; best for splunk Enterprise Security users.

8.6/10★★★★☆Editor score

Visit Splunk

Splunk User and Entity Behavior Analytics8.6 Visit Splunk

At a glance

• Editor score
  8.6 / 10
• Pricing
  Pricing on request
• Best for
  Splunk Enterprise Security users
• Free plan
  No
• Founded
  2003
• Facts checked
  20 Sep 2026

• Where it wins

  • Multi-entity baselining and machine-learning anomaly detection
  • Risk scoring and correlation across users, devices, and cloud data
  • Centralized investigation and response workflows in Splunk

• Where it doesn't

  • Available through Enterprise Security Premier, not as a standalone product
  • Pricing uses a contact-sales model
  • Its workflows are centered on the Splunk ecosystem

Our verdict on Splunk User and Entity Behavior Analytics

Splunk User and Entity Behavior Analytics is a security analytics capability built into Splunk Enterprise Security Premier. It establishes behavioral baselines and applies machine-learning anomaly detection to users, devices, applications, cloud applications, endpoints, and related security data. The product is designed for security operations teams investigating insider threats, compromised accounts, lateral movement, data exfiltration, and malware. It combines identity resolution, entity risk scoring, contextual intelligence, threat prioritization, and investigation workflows within Splunk.

Its strongest fit is for organizations already working in Splunk Enterprise Security. The capability integrates with Splunk Cloud Platform and Splunk Enterprise, while connectors support Splunk Direct and Splunk Raw Events ingestion. Additional ecosystem connections include Active Directory, CMDB, DNS, DHCP, VPN, cloud data, endpoint data, firewalls, email, DLP, and network IDS/IPS. Identity resolution using authentication, DNS, DHCP, and VPN data can give analysts a connected view of activity across entities rather than isolated alerts.

The published plan is Enterprise Security Premier, which includes User and Entity Behavior Analytics alongside SIEM, SOAR, threat intelligence, detection engineering, and automated threat analysis. Pricing follows a contact-sales model, and there is no free plan. This structure suits teams that want UEBA within an existing Splunk security program, especially where centralized detection, investigation, and response are priorities. Organizations seeking a standalone UEBA product or a tool outside the Splunk ecosystem should consider alternatives with a different deployment and packaging model.

Your product? Our editors can test Splunk User and Entity Behavior Analytics in depth and publish a review, labelled as paid · from $149/mo →

Splunk User and Entity Behavior Analytics pricing

All 1 Splunk User and Entity Behavior Analytics plans and prices →

Splunk User and Entity Behavior Analytics fact sheet

Splunk User and Entity Behavior Analytics integrations

Splunk User and Entity Behavior Analytics lists 14 integrations on its own site.

• Splunk Enterprise Security
• Splunk Cloud Platform
• Splunk Enterprise
• Active Directory
• CMDB
• DNS
• DHCP
• VPN
• Cloud data
• Endpoint data
• Firewall
• Email
• DLP
• Network IDS/IPS

Alternatives to Splunk User and Entity Behavior Analytics

• DTEX Insider Risk ManagementBroad analytics, forensics, DLP, and workflow automation for enterprise insider-risk teams.9.4
• Varonis Insider Risk ManagementA data-focused platform for detecting, investigating, and reducing insider risk.9.3
• GUGurucul UEBAA SIEM-centered UEBA platform combining machine learning, risk scoring, and automated response.9.2

See all Splunk User and Entity Behavior Analytics alternatives →

Featured on iTechGuides

Splunk User and Entity Behavior Analytics is listed in our User and Entity Behavior Analytics Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/splunk-user-and-entity-behavior-analytics/"><img src="https://www.itechguides.com/best/badge/splunk-user-and-entity-behavior-analytics.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update