ArcSight Intelligence Reviews

ArcSight Intelligence significantly enhanced threat detection, reducing manual efforts in monitoring and analysis. It provided faster incident response and improved security posture, leading to substantial time savings and increased productivity. Automation features minimized false positives, allowing teams to focus on critical issues. The intuitive interface and advanced analytics capabilities streamlined operations, leading to effective threat management and cost efficiency.

ArcSight Intelligence has a range of licensing options, including monthly and yearly plans, with some users noting the availability of perpetual licenses. Generally, users find the solution expensive, rating it around eight out of ten in terms of cost. While some mentioned that its price is average and not very high, compared to alternatives like Splunk, ArcSight Intelligence often charges extra for new features. This makes it more suitable for larger enterprise environments.

• "They offer perpetual licenses for the product."
• "It is an expensive platform."
• "ArcSight Intelligence is an expensive solution."

Organizations utilize ArcSight Intelligence primarily for gathering global intelligence from the cloud, receiving feeds and notifications about global attacks, and updating correlation engines. They send logs from network devices to ArcSight Logger for up to 90 days, including security and non-security logs. ArcSight Intelligence is also employed for user behavioral analytics, integrating logs with Unix and Microsoft-based connectors, and providing alerts on a single console for network visibility and filtering false positives. They also use it for monitoring purposes.

ArcSight Intelligence's customer service has mixed feedback. Users have noted that response times can be slow and may require multiple exchanges for satisfactory resolutions. However, some have had positive experiences, describing the support as awesome and capable of resolving issues. Despite this, there are instances where the feedback provided is insufficient to fully address problems.

The initial setup of ArcSight Intelligence varies among users. Some find it easy and quick, completed within a day or two, while others experience difficulties requiring weeks or months, particularly with fine-tuning. Transitioning from hardware to VM took around two weeks, creating use cases and matching logs from various devices lengthened the process. Deployment necessitates multiple engineers, and different server and network device requirements can significantly impact setup duration. Maintenance is generally straightforward.

Some find ArcSight Intelligence scalable, rating it highly, while others see limitations and rate it lower. Ease of scaling varies, often influenced by user experience and support resources. Some organizations plan to increase usage, yet consider alternatives like Splunk, indicating mixed scalability perceptions.

Users find ArcSight Intelligence to be highly stable. They have had no issues with bugs or glitches. ArcSight Intelligence earns a nine out of ten rating for stability.