Try our new research platform with insights from 80,000+ expert users

ArcSight Analytics vs ArcSight Logger comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

ArcSight Analytics
Average Rating
7.0
Reviews Sentiment
6.6
Number of Reviews
15
Ranking in other categories
User Entity Behavior Analytics (UEBA) (15th)
ArcSight Logger
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
31
Ranking in other categories
Log Management (28th)
 

Mindshare comparison

ArcSight Analytics and ArcSight Logger aren’t in the same category and serve different purposes. ArcSight Analytics is designed for User Entity Behavior Analytics (UEBA) and holds a mindshare of 1.3%, down 1.5% compared to last year.
ArcSight Logger, on the other hand, focuses on Log Management, holds 0.9% mindshare, down 1.4% since last year.
User Entity Behavior Analytics (UEBA)
Log Management
 

Featured Reviews

Syed Ubaid Ali Jafri - PeerSpot reviewer
It has improved our system and network policy monitoring
They should improve on the following: * Timely resolution of issues and proper support once a ticket has been generated. * Systems appearing on the network which are not part of the domain controller. These should be monitored. * Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked. * Logger monitoring should be separated from ESM monitoring. * Ability to integrate with cloud-based applications and monitor cloud-based events. * Ability to log and notify tailored rules via SMS/email. * Provide more ArcSight training and workshops.
Geraldo Freitas - PeerSpot reviewer
Enhances our security incident investigation but not good for correlation
Investigation is good when you know what you want to search for in Logger. The most difficult part is parsing the logs and configuring the parsers. For investigation, it's good. For correlation, it's not good. We use Sentinel, and Sentinel has pre-built use cases that are much easier to configure. So, it enhances our security incident investigation. We have inbound integration, but configuring the parsers is sometimes very difficult. We only have two use cases where we have a correlation set up. We send the information to Check Point to block IP addresses when we see a lot of blocks from the same source. We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist. So, it offers the ease of integration.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"This solution allows us to identify connections for all users."
"The two most valuable features of this solution are its stability and scalability."
"The ability to correlate different logs is the solution's most valuable feature."
"The most valuable feature is the log monitoring."
"One of the most valuable features is the alerts."
"The correlation engine is good."
"Allows multiple integrations with multiple systems in a stable and flexible fashion."
"The data collection and the integration with different products are valuable features."
"It provides in-depth information on business activities once we log into the system."
"The solution provides information about the risk factors."
"It is one of the best products available in the market."
"Our return on investment for implementing ArcSight Logger over the past 12 months has been positive."
"We haven't had any crashes or bugs. It is stable."
"We check a lot of logs in ArcSight Logger because we're running a massive database platform."
"Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."
"We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist."
 

Cons

"I faced stability issues with Windows Operating System. The installed connectors hang if they remain idle for a long period of time."
"[There is] complexity in maintaining it and managing it. It's not easy to use. It requires a lot of training."
"The reporting and the way it is worded needs to be improved in future releases. The dashboards are quite poorly designed."
"The interactive dashboard is complicated and you need to have training in order to use it, so I think that it could be made easier to use."
"ArcSight's features that can be improved include anything related to its visualization capabilities and user friendliness."
"ArcSight is not a user-friendly solution and the interface needs to be improved."
"Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked."
"Network integration is very crucial, and you need to have the knowledge to get it done."
"ArcSight has been sold two or three times, and the quality has decreased."
"The product's connectors should work better and the user manuals need an update."
"It would be better if the product is cheaper."
"It's not a new product and is a bit complex. So, it requires a person dedicated to working on it and to know about it in and out. It is a huge product, and the search operation is a bit complicated for a new user or someone who has not used it for long. So for that person, it becomes a bit difficult."
"I think the ArcSight team should try to simplify legacy products for the customers, because that product is not easy to use or to work with. It needs more more competency or appeal to use. We hope Micro Focus is trying to resolve this."
"The speed of Logger indexing and searching for certain bugs for some queries that we provide could be improved. It can handle a huge number of logs but it can be improved."
"The solution could be improved in maintenance settings."
"It is really difficult to work in ArcSight Logger, as it is very slow."
 

Pricing and Cost Advice

"My customers pay a yearly licensing fee for ArcSight Analytics."
"ArcSight Analytics is a bit expensive compared with other tools in terms of licensing costs, training, hardware implementation, and support."
"The monthly licensing fee is around $20,000. There aren't any costs in addition to the standard licensing fee."
"This solution is expensive."
"It can range between $30,000 and $40,000 USD, and can go up to $500,000 and $600,000 USD."
"In addition to the costs of standard licensing fees, there is the cost of labor for maintenance."
"It's not cheap at all as it's a big product and has been in the market for quite some time now."
"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."
"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."
"I would rate the product a seven out of ten since it's an enterprise product."
"ArcSight is an expensive solution."
"We have a lifetime license, so we don't pay a monthly fee."
"The pricing is quite harsh."
"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."
report
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
20%
Computer Software Company
15%
Government
10%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What do you like most about ArcSight Analytics?
ArcSight Analytics is used to get a deeper insight and threat analysis about the network.
What is your experience regarding pricing and costs for ArcSight Analytics?
My customers pay a yearly licensing fee for ArcSight Analytics.
What do you like most about ArcSight Logger?
We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.
What is your experience regarding pricing and costs for ArcSight Logger?
The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.
What needs improvement with ArcSight Logger?
The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...
 

Comparisons

 

Also Known As

ArcSight User Behavior Analytics, ArcSight UBA
Micro Focus Arcsight Logger, HPE Arcsight Logger
 

Learn More

 

Overview

 

Sample Customers

Information Not Available
China Merchants Bank, Bank AlJazira, Banca Intesa
Find out what your peers are saying about IBM, Exabeam, Rapid7 and others in User Entity Behavior Analytics (UEBA). Updated: December 2024.
824,053 professionals have used our research since 2012.