Avoid Exabeam. Their UEBA product is riddled with problems, and they are not concerned that it does not display timestamps for when the event occurred- they display timestamps for event ingestion which can sometimes be hours off.

They also seem to outsource much of the development, maintenance and support and appear to have high turnover.