We performed a comparison between ArcSight Logger and Splunk Enterprise Security based on real PeerSpot user reviews.
Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature is the search capability, which is simple to use."
"We check a lot of logs in ArcSight Logger because we're running a massive database platform."
"It is one of the best products available in the market."
"The machine learning is a good feature."
"It's a robust, mature product and you can do some really complex operations and analytics."
"The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."
"Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."
"The solution provides information about the risk factors."
"The ability to rapidly diagnose problems in production and non-production, across hundreds of log files, is the most valuable feature."
"I like the search feature and the indexing. It's very fast and comprehensive."
"Splunk is stable, and this is why many customers want it."
"Splunk allows us to find insights that we were not able to with traditional BI tools using ETL. It allows us to dig into raw events."
"The consolidated overview of all the events that come in through our environment and an easy-to-access interface for all our end users are valuable."
"The technical support is among the best in the market."
"Splunk has machine learning which is a valuable feature."
"Integration with the cloud is pretty important and good for us. We found the integration with a lot of tools, not all tools yet, valuable. It does make the transfer of data, log files, and other things easier for us."
"The platform is quite expensive. They should reduce its cost."
"In the next release, I want to see more intelligence."
"You have limited reporting capabilities and I wouldn't choose ArcSight Logger for this purpose."
"I think the ArcSight team should try to simplify legacy products for the customers, because that product is not easy to use or to work with. It needs more more competency or appeal to use. We hope Micro Focus is trying to resolve this."
"I would rate the technical support only 5 out of 10. The technical support is not satisfactory."
"We have had problems with archiving."
"I would like to see better scheduling in the next release of this solution."
"It is really difficult to work in ArcSight Logger, as it is very slow."
"The security can be improved."
"It could be more user friendly, in terms of the end-user experience."
"Splunk can improve regex/asset analysis as we do not want to crawl until it is done."
"Cybersecurity and infrastructure monitoring have room for improvement."
"I would like Splunk to add more integration. QRadar has many indications with more products than Splunk."
"While there aren't any major areas where the solution has to be improved, there are certain integrations that are still not available. I would specifically like to see legacy applications integrated."
"It takes time to train people."
"The configuration could be better."
ArcSight Logger is ranked 28th in Log Management with 31 reviews while Splunk Enterprise Security is ranked 1st in Log Management with 240 reviews. ArcSight Logger is rated 7.8, while Splunk Enterprise Security is rated 8.4. The top reviewer of ArcSight Logger writes "A scalable and stable solution that enables users to see all the event logs in one place". On the other hand, the top reviewer of Splunk Enterprise Security writes "It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query ". ArcSight Logger is most compared with IBM Security QRadar, Elastic Security, Wazuh, LogRhythm SIEM and VMware Aria Operations for Logs, whereas Splunk Enterprise Security is most compared with Wazuh, Dynatrace, IBM Security QRadar, Elastic Security and Fortinet FortiAnalyzer. See our ArcSight Logger vs. Splunk Enterprise Security report.
See our list of best Log Management vendors.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.