Try our new research platform with insights from 80,000+ expert users

Honeycomb Enterprise vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Honeycomb Enterprise
Average Rating
8.0
Reviews Sentiment
5.4
Number of Reviews
3
Ranking in other categories
Application Performance Monitoring (APM) and Observability (25th), AI Code Assistants (11th), AI Observability (18th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
374
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. Honeycomb Enterprise is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 1.3%, down 1.6% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.4% mindshare, down 10.0% since last year.
Application Performance Monitoring (APM) and Observability Market Share Distribution
ProductMarket Share (%)
Honeycomb Enterprise1.3%
Dynatrace6.6%
Datadog5.5%
Other86.6%
Application Performance Monitoring (APM) and Observability
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security7.4%
Wazuh7.3%
IBM Security QRadar5.6%
Other79.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

meetharoon - PeerSpot reviewer
CEO at a computer software company with 10,001+ employees
Its pattern-matching and code transformation capabilities can be adapted for mass identification and remediation of vulnerable libraries
I asked very specific questions to Mr. Pell about consideration of code security scenarios in pattern design and rules, specifically that tuned with OWASP Top 10. I believe addition of code security focus can be a value-add, though the way Grit architecture is designed and how it works, it is and may not become an alternative choice of code security solutions. Rather, it must be treated as a powerful supplementary tool that augments the existing code security solutions (such as Snyk or Checkmarx) in a DevSecOps or Secure DevOps environment. Anyone interested in learning more on this front or have queries, can get in touch with me for a consulting.
reviewer1469784 - PeerSpot reviewer
Senior Manager at a financial services firm with 10,001+ employees
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The approach offers significant benefits in terms of efficiency, consistency, and proactive security management, particularly valuable for organizations with large, distributed development teams."
"The solution's initial setup process was straightforward since we were getting enough support from Honeycomb.io's team."
"The solution's most valuable features are the queries for the OpenTelemetry events and all the tracing."
"I would assess the stability and reliability of Splunk Enterprise Security as typically very good, with minimal downtime or crashes."
"The dashboard and reporting are very good... It provides very good visibility in a hybrid cloud environment, and you can build custom utilization APIs using Splunk."
"Its integration is most valuable. Its UI is also pretty much easy."
"The integration and plugin availability are nice; the AI module is also great."
"Integration with the cloud is pretty important and good for us. We found the integration with a lot of tools, not all tools yet, valuable. It does make the transfer of data, log files, and other things easier for us."
"One key advantage of Splunk over competitors like IBM QRadar is its superior device integration capabilities."
"It allows us to digest the information, the data, the different data streams, so we can make decisions based upon information that we receive, and it is pretty robust."
"Now with Splunk Enterprise Security, we have everything in one place—the notables are created automatically, but they can also create their own notables based on the investigation, which improved and reduced about 50% of the manual work that was done before versus what we are doing now."
 

Cons

"We can make alerts based on static numbers, which may block us from building alerts that could be generic enough or could be serviced."
"The way Grit architecture is designed and how it works, it is and may not become an alternative choice of code security solutions."
"The process of log scraping gets delayed on Honeycomb.io. At times, it gives false alerts to the application team."
"The incident response dashboard could be more user-friendly."
"To improve Splunk Enterprise Security, I suggest incorporating more AI features for faster remediation and enhanced responses, allowing users to build more correlation searches quickly."
"It will be helpful for customers if they can create some real-world cases, and we can find a case study to align with. I know that Splunk has tremendous potential. We only include a tiny piece of it. There is a lot of stuff that we need to learn. If Splunk can provide more real-time examples, that will be helpful for customers."
"I would definitely improve the risk-based alerts in Splunk Enterprise Security, helping SOC analysts to get to the drill-down searches."
"It would be great if I could have a certain dialogue box in Splunk that uses innovative AI tools like ChatGPT, which are available now in the tech department."
"The solution's case management system could be further improved to make it easier for analysts to manage cases."
"Some of the queries are difficult to run and have room for improvement."
"I'd say I am happy with the technical support, not elated. They provide great support, but sometimes they don't have the answers that I need."
 

Pricing and Cost Advice

Information not available
"The Splunk licensing is high."
"Splunk is really expensive."
"The price of Splunk Enterprise Security is high."
"Splunk is really expensive compared to all the other tools on the market, including Microsoft Sentinel."
"The subscription is monthly."
"Splunk is expensive based on our current requirements, but it's obviously worth what we pay."
"Pricing and licensing are quite high compared to other tools or SIEM tools, but the features justify it."
"Regarding the product's pricing, I think it has always been difficult to have a conversation with Splunk."
report
Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.
879,371 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
12%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business109
Midsize Enterprise50
Large Enterprise263
 

Questions from the Community

What needs improvement with Honeycomb.io?
I asked very specific questions to Mr. Pell about consideration of code security scenarios in pattern design and rules, specifically that tuned with OWASP Top 10. I believe addition of code securit...
What is your primary use case for Honeycomb.io?
Although Grit is a tool code code migration and management of technical debt for large chunks of work, we reviewed Grit from the use case of assisting in faster remediation of vulnerable libraries....
What advice do you have for others considering Honeycomb.io?
We set up Honeycomb.io on all the services so that we can have all the set traces of the communication between all the services inside the company. This helps us understand where it could be failin...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

Grit
No data available
 

Overview

 

Sample Customers

Clover Health, Eaze, Intercom, Fender
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Datadog, Dynatrace, Splunk and others in Application Performance Monitoring (APM) and Observability. Updated: November 2025.
879,371 professionals have used our research since 2012.