We performed a comparison between ArcSight Logger and Elastic Security based on real PeerSpot user reviews.
Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."
"The machine learning is a good feature."
"The technical support team is good...It is a scalable solution."
"We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist."
"We check a lot of logs in ArcSight Logger because we're running a massive database platform."
"The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."
"In terms of ArcSight Logger's most valuable feature, it is their scalability. ArcSight's real advantage is its scalability because they have two layers, including the logger layer."
"Our return on investment for implementing ArcSight Logger over the past 12 months has been positive."
"The most valuable features are the speed, detail, and visualization. It has the latest standards."
"I like the indexing of the logs."
"I can look at events from more than one source across multiple different locations and find patterns or anomalies. The machine learning capabilities are helpful, and I can create rules for notifications to be more proactive rather than responding after something has gone wrong."
"The most valuable feature is the machine learning capability."
"One of the most valuable features of this solution is that it is more flexible than AlienVault."
"The solution has a good community surrounding it for lots of helpful documentation for troubleshooting purposes."
"We chose the product based on the ability to scan for malware using a malware behavioral model as opposed to just a traditional hash-based antivirus. Therefore, it's not as intensive."
"It's simple and easy to use."
"The console in older versions is not user-friendly."
"Using the ArcSight Logger dashboard is not particularly intuitive or efficient, so it is important to be trained in its use."
"You have limited reporting capabilities and I wouldn't choose ArcSight Logger for this purpose."
"We have had problems with archiving."
"The next release should have AI capabilities."
"I would rate the technical support only 5 out of 10. The technical support is not satisfactory."
"The solution should make it possible to integrate network analysis features."
"It would be better if the product is cheaper."
"This solution is very hard to implement."
"Anything that supports high availability or ease of deployment in a highly available environment would help to improve this solution."
"They don't provide user authentication and authorisation features (Shield) as a part of their open-source version."
"There is room for improvement in the Kibana dashboard and in the asset management for the program."
"In terms of what could be improved with Elastic, in some use cases, especially on the advanced level, they are not ready made, so you'll have to write some scripts."
"The Integration module could be improved. It is a pain to build integration with any product. We have to do parking and so on. It's not like other commercial solutions that use profile integration. I would also see more detection features on the SIEM side."
"The problem with ELK is it's difficult to administer. When you have a problem, it can be very, very difficult to rebuild indexes."
"The solution could offer better reporting features."
ArcSight Logger is ranked 28th in Log Management with 31 reviews while Elastic Security is ranked 5th in Log Management with 59 reviews. ArcSight Logger is rated 7.8, while Elastic Security is rated 7.6. The top reviewer of ArcSight Logger writes "A scalable and stable solution that enables users to see all the event logs in one place". On the other hand, the top reviewer of Elastic Security writes "A stable and scalable tool that provides visibility along with the consolidation of logs to its users". ArcSight Logger is most compared with Splunk Enterprise Security, IBM Security QRadar, Wazuh, LogRhythm SIEM and VMware Aria Operations for Logs, whereas Elastic Security is most compared with Wazuh, Splunk Enterprise Security, Microsoft Sentinel, IBM Security QRadar and Rapid7 InsightIDR. See our ArcSight Logger vs. Elastic Security report.
See our list of best Log Management vendors.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.