The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution.
ArcSight Logger offers stability with scalable data handling, supporting advanced threat intelligence and machine learning. Efficient search capabilities and robust performance are key benefits. However, enhancing network analysis features, improving connectors, and addressing complex maintenance are crucial. Integration of AI, better user manuals, and cost considerations are needed as current offerings show declining quality. Logger's indexing speed and setup require optimization for better performance and flexibility.
