Try our new research platform with insights from 80,000+ expert users

Honeycomb Enterprise vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Honeycomb Enterprise
Average Rating
7.2
Reviews Sentiment
5.3
Number of Reviews
5
Ranking in other categories
Application Performance Monitoring (APM) and Observability (27th), AI Code Assistants (11th), AI Observability (73rd)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
375
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. Honeycomb Enterprise is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 1.3%, down 1.6% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.1% mindshare, down 9.8% since last year.
Application Performance Monitoring (APM) and Observability Market Share Distribution
ProductMarket Share (%)
Honeycomb Enterprise1.3%
Dynatrace6.3%
Datadog5.3%
Other87.1%
Application Performance Monitoring (APM) and Observability
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security7.1%
Wazuh6.4%
IBM Security QRadar5.4%
Other81.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

meetharoon - PeerSpot reviewer
CEO at a computer software company with 10,001+ employees
Its pattern-matching and code transformation capabilities can be adapted for mass identification and remediation of vulnerable libraries
I asked very specific questions to Mr. Pell about consideration of code security scenarios in pattern design and rules, specifically that tuned with OWASP Top 10. I believe addition of code security focus can be a value-add, though the way Grit architecture is designed and how it works, it is and may not become an alternative choice of code security solutions. Rather, it must be treated as a powerful supplementary tool that augments the existing code security solutions (such as Snyk or Checkmarx) in a DevSecOps or Secure DevOps environment. Anyone interested in learning more on this front or have queries, can get in touch with me for a consulting.
reviewer1469784 - PeerSpot reviewer
Senior Manager at a financial services firm with 10,001+ employees
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The approach offers significant benefits in terms of efficiency, consistency, and proactive security management, particularly valuable for organizations with large, distributed development teams."
"The solution's initial setup process was straightforward since we were getting enough support from Honeycomb.io's team."
"It's very scalable since we used it for a really big organization and it worked."
"The solution's most valuable features are the queries for the OpenTelemetry events and all the tracing."
"Honeycomb Enterprise has positively impacted our organization by providing live alerts."
"Correlating data across different systems via one interface will allow you to know your environment or identify incident data in ways you never imagined."
"Splunk Enterprise Security is probably one of the first products that actually could handle all the ingest and do all the correlation without crumbling under its own weight."
"Positive features include replication capabilities, software development kits, and the architecture."
"It's extremely scalable. It's a very robust solution and certainly has the capability of handling far bigger data requirements than a lot of the other tools. Generally what ends up happening with me is that my clients tend, for the most part, to be mid-tier organizations where the cost of that solutions would be accompanying requirements for people just becomes way too prohibitive. Especially considering the model that they use for costing, which is based on the volume of data. Of course, they're going to put everything including the Coke machine as the ability to collect data off of it, because of course the more they can put through the tool the more money they make."
"Overall, Splunk is among the top three SIEM tools due to its capabilities and agility in bridging business analytics with security needs."
"Exporting is a good feature. It helps me out when I have to do reports. I do a lot of exporting and crunching of the numbers. Dashboards are okay for showing to the leadership, but for doing statistics and updating tickets, the export feature is very beneficial for me."
"The solution's most valuable feature is risk-based alerting, focusing on building out user risks for individuals throughout the enterprise."
"The technical support has been very good. They are very responsive and have been helpful."
 

Cons

"I rate Honeycomb Enterprise a seven out of ten because I feel a lot of the journeys could be made cleaner."
"However, the reason it's only five is because it's lagging behind in terms of AI-compatible features."
"We can make alerts based on static numbers, which may block us from building alerts that could be generic enough or could be serviced."
"The process of log scraping gets delayed on Honeycomb.io. At times, it gives false alerts to the application team."
"The way Grit architecture is designed and how it works, it is and may not become an alternative choice of code security solutions."
"Integrating tools and creating use cases could be easier. It's hard for a junior security engineer with only a couple of years of experience to write use cases. They can do it, but it's much easier in a solution like IBM QRadar. Setting conditions is like a multiple-choice type of thing. It's a more user-friendly process."
"I have not seen ROI with Splunk Enterprise Security."
"The incident response technique should be available out of the box. That isn't as available as we would expect."
"We haven't saved any money with Splunk Enterprise Security. Instead, we have spent excess of the budget on this with unexpected costs."
"The difficult part is related to integration with sources of data that are used to create the logs as this depends on the infrastructure of the client."
"Splunk Enterprise Security could be improved by having better role-based access controls."
"Splunk's ability to analyze malicious activities scores an 8 out of 10, but there's room for improvement. By analyzing emerging patterns, Splunk could identify and predict potential threats more effectively."
"Cybersecurity and infrastructure monitoring have room for improvement."
 

Pricing and Cost Advice

Information not available
"Splunk is priced higher than other solutions."
"Further reductions would be fantastic, and I believe that more and more people would flock to it."
"The pricing is a little bit on the higher side, but looking at what Splunk provides us, it is reasonable."
"The variables and the flexibility that Splunk provides are helpful, especially in a hybrid and multi-cloud environment."
"Splunk Enterprise Security is not a cheap product, but I think it is worth every dollar that you pay."
"The cost is on the high end, which makes it difficult for some organizations to use."
"Splunk is really expensive."
"Unlike other security tools, Splunk provides a fixed amount of gigabytes per day, and we are required to pay for any additional usage beyond that limit, in addition to our monthly cost."
report
Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
12%
Manufacturing Company
9%
Comms Service Provider
8%
Financial Services Firm
13%
Computer Software Company
10%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business109
Midsize Enterprise50
Large Enterprise264
 

Questions from the Community

What needs improvement with Honeycomb.io?
I asked very specific questions to Mr. Pell about consideration of code security scenarios in pattern design and rules, specifically that tuned with OWASP Top 10. I believe addition of code securit...
What is your primary use case for Honeycomb.io?
Although Grit is a tool code code migration and management of technical debt for large chunks of work, we reviewed Grit from the use case of assisting in faster remediation of vulnerable libraries....
What advice do you have for others considering Honeycomb.io?
We set up Honeycomb.io on all the services so that we can have all the set traces of the communication between all the services inside the company. This helps us understand where it could be failin...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

Grit
No data available
 

Overview

 

Sample Customers

Clover Health, Eaze, Intercom, Fender
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Datadog, Dynatrace, Splunk and others in Application Performance Monitoring (APM) and Observability. Updated: February 2026.
881,733 professionals have used our research since 2012.