We performed a comparison between ArcSight Logger and Splunk Enterprise Security based on real PeerSpot user reviews.
Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."
"The technical support team is good...It is a scalable solution."
"In our country we are a little bit private in terms of solutions, so we are just starting to use the basic data capture. Now some users can start to use additional features that come with Micro Focus ArcSight like user behavior analytics for investigating."
"The most valuable feature is the level of detail that you can see about certain events, even when they do not come up in the console."
"I am impressed with the product's ability to pick up logs. It also has UEBA which has reduced the time to take charge of the events."
"Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."
"The solution provides information about the risk factors."
"We check a lot of logs in ArcSight Logger because we're running a massive database platform."
"The most valuable features are the logs, which allow us to identify what happened and who interacted with the web repository."
"The most valuable aspect of the solution is the dashboard. It's very intuitive."
"Ease of correlation, creating correlation searches are easy and you can combine multiple sources with little effort"
"It is very stable. We have not had any problems."
"Its compatibility with other SIEMS is very useful."
"The reporting aspect is good and it does what I need it to do."
"Splunk's visualizations make it easy for users to understand the data."
"You can run reports against multiple devices at the same time. You are able to troubleshoot a single application on a thousand servers. You can do this with a single query, since it is very easy to do."
"The solution should make it possible to integrate network analysis features."
"Using the ArcSight Logger dashboard is not particularly intuitive or efficient, so it is important to be trained in its use."
"I would like to see better scheduling in the next release of this solution."
"The solution could be improved in maintenance settings."
"The integration with other systems could be improved."
"The initial setup was a little bit complex."
"The next release should have AI capabilities."
"You have limited reporting capabilities and I wouldn't choose ArcSight Logger for this purpose."
"The GUI can be improved. Splunk has always suffered from having a kind of goofy UI, it needs some updating."
"When you get into large amounts of data, Splunk can get pretty slow. This is the same on-premise or AWS, it doesn't matter. The way that they handle large data sets could be improved."
"The price of the solution could be cheaper."
"Splunk is more expensive than other solutions."
"Splunk's implementation process for managing multiple indexes can be complex, especially when dealing with a large number of components."
"It's costly."
"The analytics of Splunk could be improved."
"A lot of people are averse to using new tools so if they make it even more user-friendly than it already is, I think that could go a long way."
ArcSight Logger is ranked 28th in Log Management with 31 reviews while Splunk Enterprise Security is ranked 1st in Log Management with 240 reviews. ArcSight Logger is rated 7.8, while Splunk Enterprise Security is rated 8.4. The top reviewer of ArcSight Logger writes "A scalable and stable solution that enables users to see all the event logs in one place". On the other hand, the top reviewer of Splunk Enterprise Security writes "It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query ". ArcSight Logger is most compared with IBM Security QRadar, Elastic Security, Wazuh, LogRhythm SIEM and VMware Aria Operations for Logs, whereas Splunk Enterprise Security is most compared with Wazuh, Dynatrace, IBM Security QRadar, Elastic Security and Fortinet FortiAnalyzer. See our ArcSight Logger vs. Splunk Enterprise Security report.
See our list of best Log Management vendors.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
