ArcSight Analytics vs ArcSight Logger comparison

The compared ArcSight Analytics and ArcSight Logger solutions aren't in the same category. ArcSight Analytics is ranked #13 in UBA , with an average rating of 9.0, and holds a 1.2% mindshare in the category. ArcSight Logger is ranked #31 in Log Management , with an average rating of 6.7, and holds a 0.8% mindshare. Additionally, 66% of ArcSight Analytics users are willing to recommend the solution, compared to 80% of ArcSight Logger users who would recommend it.

ArcSight Analytics

Read 15 ArcSight Analytics reviews

272 Views
106 Comparison Views

66% willing to recommend

ArcSight Logger

Read 31 ArcSight Logger reviews

1,469 Views
1,332 Comparison Views

80% willing to recommend

ArcSight Analytics

ArcSight Logger

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between ArcSight Analytics and ArcSight Logger based on real PeerSpot user reviews.

Find out what your peers are saying about IBM, Rapid7, Exabeam and others in User Entity Behavior Analytics (UEBA).

To learn more, read our detailed User Entity Behavior Analytics (UEBA) Report (Updated: March 2025).

Buyer's Guide

User Entity Behavior Analytics (UEBA)

March 2025

Download the complete report

Helped 845,040 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Analytics

Average Rating

7.0

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (13th)

ArcSight Logger

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Log Management (31st)

Mindshare comparison

ArcSight Analytics and ArcSight Logger aren’t in the same category and serve different purposes. ArcSight Analytics is designed for User Entity Behavior Analytics (UEBA) and holds a mindshare of 1.2%, down 1.6% compared to last year.
ArcSight Logger, on the other hand, focuses on Log Management, holds 0.8% mindshare, down 1.2% since last year.

User Entity Behavior Analytics (UEBA)

Log Management

Featured Reviews

Syed Ubaid Ali Jafri

Head of Cyber Defense & Offensive Security at Habib Bank Limited

It has improved our system and network policy monitoring

They should improve on the following: * Timely resolution of issues and proper support once a ticket has been generated. * Systems appearing on the network which are not part of the domain controller. These should be monitored. * Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked. * Logger monitoring should be separated from ESM monitoring. * Ability to integrate with cloud-based applications and monitor cloud-based events. * Ability to log and notify tailored rules via SMS/email. * Provide more ArcSight training and workshops.

Read full review

Geraldo Freitas

Analista de TI - suporte a redes e segurança at Tribunal de Contas da União

Enhances our security incident investigation but not good for correlation

Investigation is good when you know what you want to search for in Logger. The most difficult part is parsing the logs and configuring the parsers. For investigation, it's good. For correlation, it's not good. We use Sentinel, and Sentinel has pre-built use cases that are much easier to configure. So, it enhances our security incident investigation. We have inbound integration, but configuring the parsers is sometimes very difficult. We only have two use cases where we have a correlation set up. We send the information to Check Point to block IP addresses when we see a lot of blocks from the same source. We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist. So, it offers the ease of integration.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"ArcSight Analytics is used to get a deeper insight and threat analysis about the network."

"The most valuable feature is the log monitoring."

"This solution makes it easy to create use cases, and it is easy to move queries from use cases to the report to the dashboard."

"The two most valuable features of this solution are its stability and scalability."

"Allows multiple integrations with multiple systems in a stable and flexible fashion."

"The data collection and the integration with different products are valuable features."

"The solution is easy to implement."

"This solution allows us to identify connections for all users."

More ArcSight Analytics pros

"Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."

"The solution provides information about the risk factors."

"It is one of the best products available in the market."

"It's a brilliant log collection tool, and it can handle hundreds of thousands of servers in a single shot to ingest the data."

"The ability to customize the solution in great detail is its most valuable features. We can customize the use cases and also have the ability to do scripting. We can personalize our dashboard as well. The scalability the solution offers is quite impressive."

"We check a lot of logs in ArcSight Logger because we're running a massive database platform."

"In our country we are a little bit private in terms of solutions, so we are just starting to use the basic data capture. Now some users can start to use additional features that come with Micro Focus ArcSight like user behavior analytics for investigating."

"It's a robust, mature product and you can do some really complex operations and analytics."

More ArcSight Logger pros

Cons

"The GUI interface is not always intuitive and easy for non-technical users to work with."

"Currently, there are no compatible connectors for this solution, which means we have to depend on FlexConnectors."

"ArcSight's features that can be improved include anything related to its visualization capabilities and user friendliness."

"ArcSight is not a user-friendly solution and the interface needs to be improved."

"[There is] complexity in maintaining it and managing it. It's not easy to use. It requires a lot of training."

"I would like to see integration with automation products, such as Phantom Automation."

"Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked."

"The reporting and the way it is worded needs to be improved in future releases. The dashboards are quite poorly designed."

More ArcSight Analytics cons

"I would like to see better scheduling in the next release of this solution."

"The next release should have AI capabilities."

"It would be better if the product is cheaper."

"In the next release, I want to see more intelligence."

"The console in older versions is not user-friendly."

"The product's connectors should work better and the user manuals need an update."

"ArcSight has been sold two or three times, and the quality has decreased."

"It is really difficult to work in ArcSight Logger, as it is very slow."

More ArcSight Logger cons

Pricing and Cost Advice

"The monthly licensing fee is around $20,000. There aren't any costs in addition to the standard licensing fee."

"In addition to the costs of standard licensing fees, there is the cost of labor for maintenance."

"This solution is expensive."

"It can range between $30,000 and $40,000 USD, and can go up to $500,000 and $600,000 USD."

"ArcSight Analytics is a bit expensive compared with other tools in terms of licensing costs, training, hardware implementation, and support."

"My customers pay a yearly licensing fee for ArcSight Analytics."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"I would rate the product a seven out of ten since it's an enterprise product."

"The pricing is quite harsh."

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"ArcSight is an expensive solution."

"We have a lifetime license, so we don't pay a monthly fee."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

See which vendors are best for you

Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.

See recommendations

845,040 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

20%

Computer Software Company

16%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What do you like most about ArcSight Analytics?

ArcSight Analytics is used to get a deeper insight and threat analysis about the network.

See all answers

What is your experience regarding pricing and costs for ArcSight Analytics?

My customers pay a yearly licensing fee for ArcSight Analytics.

See all answers

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

See all answers

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

See all answers

What needs improvement with ArcSight Logger?

The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...

See all answers

Comparisons

No data available

Splunk Enterprise Security vs ArcSight Logger

Compared 39% of the time

IBM Security QRadar vs ArcSight Logger

Compared 35% of the time

Elastic Security vs ArcSight Logger

Compared 8% of the time

Wazuh vs ArcSight Logger

Compared 7% of the time

LogRhythm SIEM vs ArcSight Logger

Compared 4% of the time

More ArcSight Logger Competitors

Product Reports

Buyer's Guide

ArcSight Analytics

March 2025

Download ArcSight Analytics product report

Buyer's Guide

ArcSight Logger

March 2025

Download ArcSight Logger product report

Also Known As

ArcSight User Behavior Analytics, ArcSight UBA

Micro Focus Arcsight Logger, HPE Arcsight Logger

Overview

ArcSight User Behavior Analytics offers enterprises the ability to monitor and detect from internal and external security threats and fraud.

OpenText

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

OpenText

Sample Customers

Information Not Available

China Merchants Bank, Bank AlJazira, Banca Intesa

Buyer's Guide

User Entity Behavior Analytics (UEBA)

March 2025

Download Free Report

Find out what your peers are saying about IBM, Rapid7, Exabeam and others in User Entity Behavior Analytics (UEBA). Updated: March 2025.

DOWNLOAD NOW

845,040 professionals have used our research since 2012.

We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.