ArcSight Logger vs Graylog comparison

Read 18 Graylog reviews

9,501 Views
8,322 Comparison Views

94% willing to recommend

ArcSight Logger

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 9, 2024

ArcSight Logger and Graylog are prominent competitors in the log management solutions market. ArcSight Logger tends to have an advantage with its strong security features, while Graylog is noted for its user-friendly architecture and flexibility.

Features: ArcSight Logger stands out for its robust compliance and security features, reliable threat detection, and data integrity. These attributes make it suitable for enterprises facing strict regulatory demands. On the other hand, Graylog is known for its ease of customization, integration capabilities, and user-friendly interface, which appeals to organizations seeking agile, adaptable solutions.

Room for Improvement: ArcSight Logger could improve its integration options, streamline its processes, and enhance its user interface for better adaptability. Graylog needs more comprehensive documentation, improved troubleshooting capabilities, and enhanced user support to streamline operations.

Ease of Deployment and Customer Service: ArcSight Logger is recognized for a structured deployment process but may lack flexibility during implementation. Its customer service is reliable but may not be flexible enough for all users. Graylog offers an easy and simple deployment process, leading to faster setup but needs improvement in response times and detailed customer support.

Pricing and ROI: ArcSight Logger's initial setup cost is high, but users justify this with its strong ROI supported by its extensive feature set. Graylog offers a cost-effective solution, being particularly appealing with its open-source option, though users sometimes note a longer timeline for ROI realization as they configure it to their specific requirements.

To learn more, read our detailed ArcSight Logger vs. Graylog Report (Updated: December 2024).

ArcSight Logger vs. Graylog

Download the complete report

Helped 824,053 peers since 2012

Categories and Ranking

ArcSight Logger

Ranking in Log Management

28th

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Graylog

Ranking in Log Management

18th

Average Rating

8.0

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of December 2024, in the Log Management category, the mindshare of ArcSight Logger is 0.9%, down from 1.4% compared to the previous year. The mindshare of Graylog is 6.5%, up from 5.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Geraldo Freitas

Analista de TI - suporte a redes e segurança at Tribunal de Contas da União

Enhances our security incident investigation but not good for correlation

Investigation is good when you know what you want to search for in Logger. The most difficult part is parsing the logs and configuring the parsers. For investigation, it's good. For correlation, it's not good. We use Sentinel, and Sentinel has pre-built use cases that are much easier to configure. So, it enhances our security incident investigation. We have inbound integration, but configuring the parsers is sometimes very difficult. We only have two use cases where we have a correlation set up. We send the information to Check Point to block IP addresses when we see a lot of blocks from the same source. We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist. So, it offers the ease of integration.

Read full review

Nicolae CIornii

Security Officer at BC Energbank S.A.

Stable solution with room for improvement in interactivity and user-friendliness

We have tested IBM QRadar and now use it. First of all, the key factor is the pricing. I saw that IBM QRadar has an interactive dashboard, providing valuable insights to people. Additionally, I've seen that IBM QRadar has an agent that simplifies installations across various platforms without requiring intricate configurations. Also, IBM QRadar has automatic reporting.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"ArcSight's robustness is its most valuable feature."

"The most valuable feature is the search capability, which is simple to use."

"I am impressed with the product's ability to pick up logs. It also has UEBA which has reduced the time to take charge of the events."

"The solution provides information about the risk factors."

"It's an efficient solution."

"The machine learning is a good feature."

"We haven't had any crashes or bugs. It is stable."

"It's a robust, mature product and you can do some really complex operations and analytics."

More ArcSight Logger pros

"This had increased productivity for the dev and support teams, because we are directly notifying them."

"Everything stands out as valuable, including the fact that I can quantify and qualify the logs, create pipelines and process the logs in any way I like, and create charts or data maps."

"It is used as a log manager/SIEM. It provides visibility into the infrastructure and security related events."

"What I like about Graylog is that it's real-time and you have access to the raw data. So, you ingest it, and you have access to every message and every data item you ingest. You can then build analytics on top of that. You can look at the raw data, and you can do some volumetric estimations, such as how big traffic you have, how many messages of data of a type you have, etc."

"Open source and user friendly."

"One of the most valuable features is that you are able to do a very detailed search through the log messages in the overview."

"The product is scalable. The solution is stable."

"The ability to write custom alerts is key to information security and compliance."

More Graylog pros

Cons

"The product's connectors should work better and the user manuals need an update."

"The solution should make it possible to integrate network analysis features."

"The solution must provide readymade connectors for different applications."

"The speed of Logger indexing and searching for certain bugs for some queries that we provide could be improved. It can handle a huge number of logs but it can be improved."

"We find that the search and access functionality is quite slow."

"The solution could be improved in maintenance settings."

"ArcSight has been sold two or three times, and the quality has decreased."

"I think the ArcSight team should try to simplify legacy products for the customers, because that product is not easy to use or to work with. It needs more more competency or appeal to use. We hope Micro Focus is trying to resolve this."

More ArcSight Logger cons

"I would like to see some kind of visualization included in Graylog."

"Lacks sufficient documentation."

"Its scalability gets complicated when we have to update or edit multiple nodes."

"There should be some user groups and an auto sign-in feature."

"Since container orchestration systems are popular and Graylog fits the niche well, perhaps they could officially support running in docker containers on Kubernetes as a StatefulSet as a use case. That way, the declarative nature of Kubernetes config files would document their best case deployment scenario-"

"I hope to see improvements in Graylog for more interactivity, user-friendliness, and creating alerts. The initial setup is complex."

"The infrastructure cost is the main issue. I like the rest. If the infrastructure costs could be lower, it would be fantastic."

"The biggest problem is the collector application, as we wanted to avoid using Graylog Collector Sidecar due to its architecture."

More Graylog cons

Pricing and Cost Advice

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"We have a lifetime license, so we don't pay a monthly fee."

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"I would rate the product a seven out of ten since it's an enterprise product."

"The pricing is quite harsh."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"ArcSight is an expensive solution."

"It's an open-source solution that can be used free of charge."

"Having paid official support is wise for projects."

"We're using the Community edition."

"Graylog is a free open-source solution. The free version has a capacity limitation of 2 GB daily, if you want to go above this you have to purchase a license."

"It's open source and free. They have a paid version, but we never looked into that because we never needed the features of the paid version."

"I am using a community edition. I have not looked at the enterprise offering from Graylog."

"If you want something that works and do not have the money for Splunk or QRadar, take Graylog."

"You get a lot out-of-the-box with the non-enterprise version, so give it a try first."

More Graylog pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

824,053 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

20%

Computer Software Company

15%

Government

10%

Manufacturing Company

Computer Software Company

17%

Comms Service Provider

Government

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

What needs improvement with ArcSight Logger?

The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...

What do you like most about Graylog?

The product is scalable. The solution is stable.

What is your experience regarding pricing and costs for Graylog?

We are using the free version of the product. However, the paid version is expensive.

What needs improvement with Graylog?

Since it's a free tool, I don't have much to say. Troubleshooting is important to me. The initial setup is complex. I hope to see improvements in Graylog for more interactivity, user-friendliness, ...

Splunk Enterprise Security vs ArcSight Logger

Comparisons

Compared 38% of the time

IBM Security QRadar vs ArcSight Logger

Compared 32% of the time

Elastic Security vs ArcSight Logger

Compared 13% of the time

Wazuh vs ArcSight Logger

Compared 7% of the time

Grafana Loki vs ArcSight Logger

Compared 4% of the time

More ArcSight Logger Competitors

Grafana Loki vs Graylog

Compared 44% of the time

Wazuh vs Graylog

Compared 21% of the time

syslog-ng vs Graylog

Compared 10% of the time

Security Onion vs Graylog

Compared 4% of the time

Fortinet FortiAnalyzer vs Graylog

Compared 3% of the time

More Graylog Competitors

Product Reports

ArcSight Logger

Download ArcSight Logger product report

Download Graylog product report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

Graylog2

Learn More

OpenText

Overview

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

Graylog is purpose-built to deliver the best log collection, storage, enrichment, and analysis. Graylog is:

Considerably faster analysis speeds.
More robust and easier-to-use analysis platform.
Simpler administration and infrastructure management.
Lower cost than alternatives.
Full-scale customer service.
No expensive training or tool experts required.

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

Blue Cross Blue Shield, eBay, Cisco, LinkedIn, SAP, King.com, Twilio, Deutsche Presse-Agentur

ArcSight Logger vs. Graylog