No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Watson for Cyber Security vs Splunk Enterprise Security comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Watson for Cyber Security
Ranking in Security Information and Event Management (SIEM)
52nd
Average Rating
8.0
Number of Reviews
4
Ranking in other categories
No ranking in other categories
Splunk Enterprise Security
Ranking in Security Information and Event Management (SIEM)
1st
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
465
Ranking in other categories
Log Management (1st), IT Operations Analytics (1st)
 

Mindshare comparison

As of September 2026, in the Security Information and Event Management (SIEM) category, the mindshare of IBM Watson for Cyber Security is 0.8%, up from 0.4% compared to the previous year. The mindshare of Splunk Enterprise Security is 7.8%, down from 9.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security7.8%
IBM Watson for Cyber Security0.8%
Other91.4%
Security Information and Event Management (SIEM)
 

Featured Reviews

Elena Stefanovska - PeerSpot reviewer
Sales Account Manager at InTec System
Knowledgeable support, reliable, and useful compliance policies
IBM Watson for Cyber Security can be deployed on-premise or in the cloud and it is used as a SIEM solution The most valuable features of IBM Watson for Cyber Security are ease of use and out-of-the-box reports and compliance policies. Additionally, if there are aspects that are missing IBM add…
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The customer support is very good."
"IBM Watson for Cyber Security is very stable."
"From what I have seen so far, this is an excellent product."
"The most valuable features of IBM Watson for Cyber Security are ease of use and out-of-the-box reports and compliance policies. Additionally, if there are aspects that are missing IBM add them in the next release."
"The most valuable feature of this product is innovation, where the research and upgrading of technology never ends."
"Regarding the impact on threat detection capabilities, it provides a faster mean time to detect."
"We have seen a clear return on investment since we started using Splunk Enterprise Security; we get a lot of value from it for the business side."
"Splunk Enterprise Security enhances business resilience and assists with threat detection by centralizing security data."
"Once you complete this setup, the product is amazing and will do all of the work."
"Splunk Enterprise Security has positively impacted our organization by allowing us to stand up a SOC and make it automated."
"The solution's most valuable feature is that it helps with our use cases to detect anomalies in our data and it is important to my company since we have a lot of data on different logs on the systems."
"It's great for finding anonymous threats."
"I like the Splunk dashboard and search engine."
 

Cons

"The dashboard could improve in IBM Watson for Cyber Security."
"They need to continue to build the AI capabilities."
"This is an expensive product, so making it more cost-effective would be an improvement."
"In the future, I would like to see threat intelligence included."
"Their sales support and tech support are really bad. They take really long to respond."
"Splunk can be an expensive solution. Technical support could be improved as well."
"Sometimes talking through email isn't the most effective method, as they go through troubleshooting steps we've already taken, which requires additional back-and-forth communication."
"One improvement needed is addressing a UI bug that appears when pushing a detection via code into the test queue."
"Regarding areas of Splunk Enterprise Security that I think could be improved or enhanced, I am continuously getting the task of upgrading the system. For example, we have multiple heavy forwarders, and every time we upgrade the system, there should be some issue after an upgrade."
"Endpoint access is the only issue I can think to mention, even though the endpoint access we have with Cisco is fine."
"The upgrading process could be smoother."
"In the next releases, I would like to see more pricing flexibility."
 

Pricing and Cost Advice

"The price of this solution should be lower, although I understand why IBM charges a premium price."
"IBM Watson for Cyber Security is very simple to license and is priced well."
"The pricing could be made more competitive."
"Splunk can be expensive, as its licensing is based on the daily data ingestion volume."
"Splunk Enterprise Security is not at all cost-friendly to be deployed in very small enterprises like start-ups."
"The pricing is very complicated, and it is very pricey. You do require a lot of different licenses in order to get a comprehensive solution that is not just the SIEM solution."
"It's more expensive than the other tools, but it's worth it. Every penny is worth it."
"Splunk Enterprise Security is not a cheap product, but I think it is worth every dollar that you pay."
"Pricing is probably its weakest spot. As compared to some competitors, Splunk is really expensive."
"The pricing of Splunk Enterprise Security is high."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
914,262 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Comms Service Provider
12%
Construction Company
9%
Outsourcing Company
9%
Financial Services Firm
6%
Outsourcing Company
12%
Financial Services Firm
12%
Manufacturing Company
8%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business134
Midsize Enterprise76
Large Enterprise316
 

Questions from the Community

Ask a question
Earn 20 points
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Information Not Available
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about IBM Watson for Cyber Security vs. Splunk Enterprise Security and other solutions. Updated: September 2026.
914,262 professionals have used our research since 2012.