We performed a comparison between ArcSight Logger and Splunk Enterprise Security based on real PeerSpot user reviews.
Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."We haven't had any crashes or bugs. It is stable."
"The machine learning is a good feature."
"It's a brilliant log collection tool, and it can handle hundreds of thousands of servers in a single shot to ingest the data."
"In our country we are a little bit private in terms of solutions, so we are just starting to use the basic data capture. Now some users can start to use additional features that come with Micro Focus ArcSight like user behavior analytics for investigating."
"It provides in-depth information on business activities once we log into the system."
"In terms of ArcSight Logger's most valuable feature, it is their scalability. ArcSight's real advantage is its scalability because they have two layers, including the logger layer."
"It is one of the best products available in the market."
"ArcSight provides the basic information that we want."
"It allows for transparency into IT metrics for insightful business analytics."
"The client site login is pretty extensible and probably cost-effective."
"There are a lot of third-party applications that can be installed."
"It provides a risk score for each object, device, or user. We can then take action if they are at a higher risk."
"The correlation searches (properly configured) populate the Incident Management dashboard and provide me a quick birds-eye view of my most important concerns."
"Internal tracking is helpful because we do not like to deal with multiple ticketing systems, and I am not a fan of ServiceNow. We are able to keep everything internal and utilize Enterprise Security."
"The alerts are very effective."
"Splunk has machine learning which is a valuable feature."
"I think the ArcSight team should try to simplify legacy products for the customers, because that product is not easy to use or to work with. It needs more more competency or appeal to use. We hope Micro Focus is trying to resolve this."
"The solution should make it possible to integrate network analysis features."
"It's not a new product and is a bit complex. So, it requires a person dedicated to working on it and to know about it in and out. It is a huge product, and the search operation is a bit complicated for a new user or someone who has not used it for long. So for that person, it becomes a bit difficult."
"You have limited reporting capabilities and I wouldn't choose ArcSight Logger for this purpose."
"I had some latency issues for two months. I had to increase our storage capacity significantly to reduce the latency."
"It would be better if the product is cheaper."
"In the next release, I want to see more intelligence."
"The integration with other systems could be improved."
"Most of my interaction is with the user community, which is how Splunk wants it. When I need help, that community is very hit or miss."
"The documentation is in definite need of improvement."
"I find the graphical options really limited and you don't have enough control over how to display the data that you want to see."
"The UI can be improved. Dashboards and reports can be better in terms of graphics."
"The product's price may be an area of concern where improvements are required."
"Free-floating panels in the dashboards are like a glass table."
"The product was difficult to back up the first time."
"Configuring a few apps is complex, not straightforward."
ArcSight Logger is ranked 28th in Log Management with 31 reviews while Splunk Enterprise Security is ranked 1st in Log Management with 240 reviews. ArcSight Logger is rated 7.8, while Splunk Enterprise Security is rated 8.4. The top reviewer of ArcSight Logger writes "A scalable and stable solution that enables users to see all the event logs in one place". On the other hand, the top reviewer of Splunk Enterprise Security writes "It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query ". ArcSight Logger is most compared with IBM Security QRadar, Elastic Security, Wazuh, LogRhythm SIEM and VMware Aria Operations for Logs, whereas Splunk Enterprise Security is most compared with Wazuh, Dynatrace, IBM Security QRadar, Elastic Security and Fortinet FortiAnalyzer. See our ArcSight Logger vs. Splunk Enterprise Security report.
See our list of best Log Management vendors.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.