ArcSight Logger vs Elastic Security comparison

OpenText and Elastic are both solutions in the Log Management category. OpenText is ranked #29 with an average rating of 6.9, while Elastic is ranked #5 with an average rating of 7.7. OpenText holds a 0.9% mindshare in Log Management, compared to Elastic’s 4.5% mindshare. Additionally, 80% of OpenText users are willing to recommend the solution, compared to 86% of Elastic users who would recommend it.

ArcSight Logger

Read 31 ArcSight Logger reviews

1,585 Views
1,542 Comparison Views

80% willing to recommend

Elastic Security

Read 63 Elastic Security reviews

9,745 Views
8,104 Comparison Views

86% willing to recommend

ArcSight Logger

Elastic Security

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 9, 2024

ArcSight Logger and Elastic Security are both formidable in the security information and event management category. Elastic Security seems to have the upper hand due to its scalability, threat detection capabilities, and advanced threat hunting as highlighted by user reviews.

Features: ArcSight Logger users benefit from comprehensive event log management, efficient data auditing, and detailed log analysis. Elastic Security is valued for its scalable threat detection features, superior visualization tools, and ease of integration with other data sources.

Room for Improvement: ArcSight Logger faces integration complexities, a steep learning curve, and user challenges in mastering technical aspects. Elastic Security requires better documentation, seeks more seamless support options, and clearer configuration clarity as highlighted by users.

Ease of Deployment and Customer Service: ArcSight Logger has a straightforward deployment requiring technical expertise and is recognized for responsive customer service. Elastic Security offers flexible deployment models but involves complex configurations and has a need for improved support channels.

Pricing and ROI: ArcSight Logger involves a high initial setup cost but offers fair ROI with its log management capabilities. Elastic Security, while also necessitating a significant upfront investment, is perceived to deliver better ROI due to integrated security features and adaptability to dynamic threats.

To learn more, read our detailed ArcSight Logger vs. Elastic Security Report (Updated: January 2025).

Buyer's Guide

ArcSight Logger vs. Elastic Security

January 2025

Download the complete report

Helped 831,158 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Logger

Ranking in Log Management

29th

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Elastic Security

Ranking in Log Management

5th

Average Rating

7.6

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (5th), Endpoint Detection and Response (EDR) (16th), Security Orchestration Automation and Response (SOAR) (6th), Extended Detection and Response (XDR) (8th)

Mindshare comparison

As of January 2025, in the Log Management category, the mindshare of ArcSight Logger is 0.9%, down from 1.4% compared to the previous year. The mindshare of Elastic Security is 4.5%, down from 7.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Geraldo Freitas

Analista de TI - suporte a redes e segurança at Tribunal de Contas da União

Enhances our security incident investigation but not good for correlation

Investigation is good when you know what you want to search for in Logger. The most difficult part is parsing the logs and configuring the parsers. For investigation, it's good. For correlation, it's not good. We use Sentinel, and Sentinel has pre-built use cases that are much easier to configure. So, it enhances our security incident investigation. We have inbound integration, but configuring the parsers is sometimes very difficult. We only have two use cases where we have a correlation set up. We send the information to Check Point to block IP addresses when we see a lot of blocks from the same source. We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist. So, it offers the ease of integration.

Read full review

Nikhil-Kumar

Assistant Manager - IT Security at Photon inc

Customizable with great dashboards but the premium support is poor

The initial setup can be complex if you don't have technical knowledge. However, once it is deployed, it works well. I'm not sure how long it took to deploy. I wasn't there when it was set up and configured. We have an internal team that handles deployment and maintenance. It doesn't require too many people to deploy. Five or six people would be enough. However, for 24/7 monitoring, you need to have someone always on it.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is one of the best products available in the market."

"The solution provides information about the risk factors."

"The most valuable feature is the level of detail that you can see about certain events, even when they do not come up in the console."

"Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."

"I am impressed with the product's ability to pick up logs. It also has UEBA which has reduced the time to take charge of the events."

"In terms of ArcSight Logger's most valuable feature, it is their scalability. ArcSight's real advantage is its scalability because they have two layers, including the logger layer."

"The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."

"It's a brilliant log collection tool, and it can handle hundreds of thousands of servers in a single shot to ingest the data."

More ArcSight Logger pros

"The tool's functionality is good for overall security and incident response times."

"The cost is reasonable. It's not overly pricey."

"Elastic Security offers advanced features such as machine learning and integration with ChatGPT."

"The most valuable features of the solution are the prevention methods and the incident alerts."

"We like Elastic Security because it's a REST API-based solution. That's the primary reason we use it."

"The most valuable feature is the scalability. We are in Indonesia, more engineers understand Elastic Security here. So it is easier to scale and also develop. In features, the discovery to query all the logs is very important to us. It is very easy, especially with the query function and the feature to generate alerts and create tools. Sometimes we use the alert security dashboard to monitor our clients."

"It's simple and easy to use."

"The feature that we have found the most valuable is scalability."

More Elastic Security pros

Cons

"It's not a new product and is a bit complex. So, it requires a person dedicated to working on it and to know about it in and out. It is a huge product, and the search operation is a bit complicated for a new user or someone who has not used it for long. So for that person, it becomes a bit difficult."

"The next release should have AI capabilities."

"The speed of Logger indexing and searching for certain bugs for some queries that we provide could be improved. It can handle a huge number of logs but it can be improved."

"You have limited reporting capabilities and I wouldn't choose ArcSight Logger for this purpose."

"The console in older versions is not user-friendly."

"The product's connectors should work better and the user manuals need an update."

"The solution could be improved in maintenance settings."

"It is really difficult to work in ArcSight Logger, as it is very slow."

More ArcSight Logger cons

"It would be better if Elastic Security had less storage for data. My customers do not like this. Other vendors have local support in different countries, but Elastic Security doesn't. I would like to have Operational Technology (OT) security in the next release."

"Its documentation should be a bit better. I have to spend at least a couple of hours to find the solution for a simple thing. When we buy Elastic, training is not included for free with Elastic. We have to pay extra for the training. They should include training in the price."

"We're using the open-source edition, for now, I think maybe they can allow their OLED plugin to be open source, as at the moment it is commercialised."

"Sometimes, the solution isn't the easiest to use."

"If you compare this with CrowdStrike or Carbon Black, they can improve."

"The solution could offer better reporting features."

"Anything that supports high availability or ease of deployment in a highly available environment would help to improve this solution."

"This solution cannot do predictive maintenance, so we have to build our own modules for doing it."

More Elastic Security cons

Pricing and Cost Advice

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"I would rate the product a seven out of ten since it's an enterprise product."

"ArcSight is an expensive solution."

"We have a lifetime license, so we don't pay a monthly fee."

"The pricing is quite harsh."

"Its price is fine. Its licensing works on a yearly basis. We have to renew the license every year. I also have a good experience with Darktrace. When we buy Darktrace, we get training free of cost, which is not there in Elastic. We have to pay extra for training. There is certainly room for improvement."

"I can say that the product is cheaply priced."

"We are using the free, open-source version of this solution."

"The base product is open-source but if you need advanced security features then you need to pay for the subscription. Elastic Security's price is reasonable in some cases and in other cases it's not."

"The solution is not expensive and costs around ten dollars a month."

"There is no charge for using the open-source version."

"This is an open-source product, so there are no costs."

"The product offers an amazing pricing structure. Price-wise, the product is very competitive."

More Elastic Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

831,158 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

19%

Computer Software Company

16%

Government

10%

Manufacturing Company

Computer Software Company

16%

Government

10%

Financial Services Firm

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

See all answers

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

See all answers

What needs improvement with ArcSight Logger?

The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...

See all answers

Datadog vs ELK: which one is good in terms of performance, cost and efficiency?

With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several times lately using the dashboards we have created with Datadog; they are very good c...

See all answers

What do you like most about Elastic Security?

Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it contains critical information. The reverse index allows fast data indexing because ...

See all answers

What is your experience regarding pricing and costs for Elastic Security?

Elastic Security is considered cost-effective, especially at lower EPS levels. However, a direct comparison was not made due to different pricing structures.

See all answers

Comparisons

Splunk Enterprise Security vs ArcSight Logger

Compared 38% of the time

IBM Security QRadar vs ArcSight Logger

Compared 34% of the time

Wazuh vs ArcSight Logger

Compared 6% of the time

LogRhythm SIEM vs ArcSight Logger

Compared 3% of the time

Grafana Loki vs ArcSight Logger

Compared 3% of the time

More ArcSight Logger Competitors

Wazuh vs Elastic Security

Compared 29% of the time

CrowdStrike Falcon vs Elastic Security

Compared 8% of the time

IBM Security QRadar vs Elastic Security

Compared 7% of the time

Microsoft Sentinel vs Elastic Security

Compared 6% of the time

Security Onion vs Elastic Security

Compared 1% of the time

More Elastic Security Competitors

Product Reports

Buyer's Guide

ArcSight Logger

January 2025

Download ArcSight Logger product report

Buyer's Guide

Elastic Security

January 2025

Download Elastic Security product report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

Elastic SIEM, ELK Logstash

Learn More

OpenText

Elastic

Overview

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

Elastic Security is a robust, open-source security solution designed to offer integrated threat prevention, detection, and response capabilities across an organization's entire digital estate. Part of the Elastic Stack (which includes Elasticsearch, Logstash, and Kibana), Elastic Security leverages the power of search, analytics, and data aggregation to provide real-time insight into threats and vulnerabilities. It is a comprehensive platform that supports a wide range of security needs, from endpoint protection to cloud and network security, making it a versatile choice for organizations looking to enhance their cybersecurity posture.

Elastic Security combines the features of a security information and event management (SIEM) system with endpoint protection, allowing organizations to detect, investigate, and respond to threats in real time. This unified approach helps reduce complexity and improve the efficiency of security operations.

Additional offerings and benefits:

The platform utilizes advanced analytics, machine learning algorithms, and anomaly detection to identify threats and suspicious activities.
It offers extensive integration options with other tools and platforms, facilitating a more cohesive and comprehensive security ecosystem.
With Kibana, users gain access to powerful visualization tools and dashboards that provide real-time insight into security data.

Finally, Elastic Security benefits from a global community of users who contribute to its threat intelligence, helping to enhance its detection capabilities. This collaborative approach ensures that the solution remains on the cutting edge of cybersecurity, with up-to-date information on the latest threats and vulnerabilities.

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care

Buyer's Guide

ArcSight Logger vs. Elastic Security

January 2025

Free Report: ArcSight Logger vs. Elastic Security

Find out what your peers are saying about ArcSight Logger vs. Elastic Security and other solutions. Updated: January 2025.

DOWNLOAD NOW

831,158 professionals have used our research since 2012.

See our ArcSight Logger vs. Elastic Security report.

See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.