Ataccama ONE vs. Splunk User Behavior Analytics

Usage for enterprise wide data management and governance across wide range of user group. Ataccama ONE enables achieving higher data quality amongst the data products. It is a powerful platform that supports integration of several checks on different data sets that can be also consolidated in reports later on. Data discovery works quite fast and easy.

Incentivized

Splunk User Behavior Analytics application is necessary when any company wants to capture the threat based on user behavior instead of just counting the number of occurrences of particular event. With Splunk UBA, we can analyse number of anomalies captured and which in turn creating threats which are nearly true positive.

Incentivized

• It is one of the leading data quality tools in the industry, in our opinion.
• Offers free data profiling.
• Integrates with other tools for complete end-to-end lineage.

• Monitor and troubleshoot for any system errors.
• Get the insights on application data sets and do some predictive analysis.

Incentivized

• Performance in loading
• Reduction of pop-up messages

Incentivized

• Performance-wise, it can be improved. Queries take a long time.
• Dataset exploration - More data visualization charts can be added.

Incentivized

One of the key factors in our choice to onboard Ataccama was its usability - general end users have everything at their fingertips, it is not difficult for IT developers to setup the tool, and it has been an overall pleasure.

Support has been excellent to date - very user friendly and knowledgeable to help support our needs and issues as they arise.

Ataccama ONE is a designated tool for Data quality monitoring. Supports end to end. Quite easy to deploy. Alteryx is more about coding or almost as complicated while Ataccama ONE is a bit easier to use. Different interfaces. Many views automatically available for data sets in Ataccama ONE. Output is vizualized in the tool. While more data transformation is required in Alteryx.

Incentivized

Easier we were using Splunk Enterprise on heavy forwarder on which all the add-on were installed and were using Splunk Cloud with respect to search head and indexers stack. And with Splunk Enterprise Security premium app, we were relying on correlation rules which were throwing more number of false positive but after implementing Splunk UBA, we are now getting real-time true positive threat or incidents.

Incentivized

• Less data inconsistencies in the system enable processes to run smoother without interruptions

Incentivized

• Fewer team members to work on real threats.
• Less time required to deal with real incidents.
• Easy to implement across the network.

Incentivized