Try our new research platform with insights from 80,000+ expert users

ArcSight Analytics vs ArcSight Logger comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ArcSight Analytics
Average Rating
7.0
Reviews Sentiment
6.7
Number of Reviews
15
Ranking in other categories
User Entity Behavior Analytics (UEBA) (14th)
ArcSight Logger
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
31
Ranking in other categories
Log Management (30th)
 

Mindshare comparison

ArcSight Analytics and ArcSight Logger aren’t in the same category and serve different purposes. ArcSight Analytics is designed for User Entity Behavior Analytics (UEBA) and holds a mindshare of 1.2%, down 1.6% compared to last year.
ArcSight Logger, on the other hand, focuses on Log Management, holds 0.8% mindshare, down 1.3% since last year.
User Entity Behavior Analytics (UEBA)
Log Management
 

Featured Reviews

Syed Ubaid Ali Jafri - PeerSpot reviewer
It has improved our system and network policy monitoring
They should improve on the following: * Timely resolution of issues and proper support once a ticket has been generated. * Systems appearing on the network which are not part of the domain controller. These should be monitored. * Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked. * Logger monitoring should be separated from ESM monitoring. * Ability to integrate with cloud-based applications and monitor cloud-based events. * Ability to log and notify tailored rules via SMS/email. * Provide more ArcSight training and workshops.
Geraldo Freitas - PeerSpot reviewer
Enhances our security incident investigation but not good for correlation
Investigation is good when you know what you want to search for in Logger. The most difficult part is parsing the logs and configuring the parsers. For investigation, it's good. For correlation, it's not good. We use Sentinel, and Sentinel has pre-built use cases that are much easier to configure. So, it enhances our security incident investigation. We have inbound integration, but configuring the parsers is sometimes very difficult. We only have two use cases where we have a correlation set up. We send the information to Check Point to block IP addresses when we see a lot of blocks from the same source. We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist. So, it offers the ease of integration.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"This solution makes it easy to create use cases, and it is easy to move queries from use cases to the report to the dashboard."
"Less resource consumption in terms of memory and processing."
"ArcSight Analytics is used to get a deeper insight and threat analysis about the network."
"The two most valuable features of this solution are its stability and scalability."
"One of the most valuable features is the alerts."
"The most valuable features are that you get lots of connectors, which make it easy to log in to my ASM, and lots of prebuilt roles from the company."
"The features I have found most valuable are it capabilities for behavioral analytics and anomaly detection."
"The ability to correlate different logs is the solution's most valuable feature."
"It is one of the best products available in the market."
"The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."
"We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist."
"The machine learning is a good feature."
"It's an efficient solution."
"In terms of ArcSight Logger's most valuable feature, it is their scalability. ArcSight's real advantage is its scalability because they have two layers, including the logger layer."
"It provides in-depth information on business activities once we log into the system."
"The most valuable feature is the search capability, which is simple to use."
 

Cons

"I faced stability issues with Windows Operating System. The installed connectors hang if they remain idle for a long period of time."
"It's a difficult product to navigate, it's complex."
"Their support team could be better."
"The customer service could be improved, and additional integrations with other APIs could be added."
"It needs more user analytics and aggregation user queries. And it's slow. When you query over ArcSight, it is very slow."
"Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked."
"The interactive dashboard is complicated and you need to have training in order to use it, so I think that it could be made easier to use."
"The reporting and the way it is worded needs to be improved in future releases. The dashboards are quite poorly designed."
"It's not a new product and is a bit complex. So, it requires a person dedicated to working on it and to know about it in and out. It is a huge product, and the search operation is a bit complicated for a new user or someone who has not used it for long. So for that person, it becomes a bit difficult."
"I would like to see better scheduling in the next release of this solution."
"I would rate the technical support only 5 out of 10. The technical support is not satisfactory."
"I think the ArcSight team should try to simplify legacy products for the customers, because that product is not easy to use or to work with. It needs more more competency or appeal to use. We hope Micro Focus is trying to resolve this."
"The integration with other systems could be improved."
"The solution could be improved in maintenance settings."
"We find that the search and access functionality is quite slow."
"The platform is quite expensive. They should reduce its cost."
 

Pricing and Cost Advice

"ArcSight Analytics is a bit expensive compared with other tools in terms of licensing costs, training, hardware implementation, and support."
"It can range between $30,000 and $40,000 USD, and can go up to $500,000 and $600,000 USD."
"My customers pay a yearly licensing fee for ArcSight Analytics."
"The monthly licensing fee is around $20,000. There aren't any costs in addition to the standard licensing fee."
"This solution is expensive."
"In addition to the costs of standard licensing fees, there is the cost of labor for maintenance."
"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."
"The pricing is quite harsh."
"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."
"ArcSight is an expensive solution."
"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."
"I would rate the product a seven out of ten since it's an enterprise product."
"We have a lifetime license, so we don't pay a monthly fee."
"It's not cheap at all as it's a big product and has been in the market for quite some time now."
report
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
838,713 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
20%
Computer Software Company
16%
Government
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What do you like most about ArcSight Analytics?
ArcSight Analytics is used to get a deeper insight and threat analysis about the network.
What is your experience regarding pricing and costs for ArcSight Analytics?
My customers pay a yearly licensing fee for ArcSight Analytics.
What do you like most about ArcSight Logger?
We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.
What is your experience regarding pricing and costs for ArcSight Logger?
The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.
What needs improvement with ArcSight Logger?
The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...
 

Comparisons

 

Also Known As

ArcSight User Behavior Analytics, ArcSight UBA
Micro Focus Arcsight Logger, HPE Arcsight Logger
 

Overview

 

Sample Customers

Information Not Available
China Merchants Bank, Bank AlJazira, Banca Intesa
Find out what your peers are saying about IBM, Exabeam, Rapid7 and others in User Entity Behavior Analytics (UEBA). Updated: January 2025.
838,713 professionals have used our research since 2012.