We performed a comparison between ArcSight Logger and Splunk Enterprise Security based on real PeerSpot user reviews.
Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The solution provides information about the risk factors."
"In terms of ArcSight Logger's most valuable feature, it is their scalability. ArcSight's real advantage is its scalability because they have two layers, including the logger layer."
"It provides in-depth information on business activities once we log into the system."
"It's a brilliant log collection tool, and it can handle hundreds of thousands of servers in a single shot to ingest the data."
"Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."
"The most valuable feature is the search capability, which is simple to use."
"The ability to customize the solution in great detail is its most valuable features. We can customize the use cases and also have the ability to do scripting. We can personalize our dashboard as well. The scalability the solution offers is quite impressive."
"The technical support team is good...It is a scalable solution."
"If I need to integrate devices for logs, it is easier with Splunk. We can integrate different applications, network devices, and databases. It is also very rich in documents. It is the best."
"The most useful feature for me is the ability to create different kinds of alerts and set a different kind of denominator that will capture the real event. That is helpful for a power user like me."
"Three features stand out for me: the SDK for writing Python, the customizable and adaptable diagnostic dashboard, and the optimizer for collecting data."
"Splunk Enterprise Security offers two valuable features: the Common Information Model and arrangement modules."
"I really like the user interface and how it works."
"Low barrier to start searching with the ability to normalize data on the fly."
"The technical support has been very good. They are very responsive and have been helpful."
"Our clients are easily able to modify and evolve their implementations."
"The speed of Logger indexing and searching for certain bugs for some queries that we provide could be improved. It can handle a huge number of logs but it can be improved."
"The solution should make it possible to integrate network analysis features."
"I would rate the technical support only 5 out of 10. The technical support is not satisfactory."
"It would be better if the product is cheaper."
"The console in older versions is not user-friendly."
"I would like to see better scheduling in the next release of this solution."
"The platform is quite expensive. They should reduce its cost."
"The solution must provide readymade connectors for different applications."
"An improved user interface along with multi-tenancy support would be beneficial."
"On the technical side, it would be nice to see aspects of the recent acquisition of Phantom make it into the core Splunk Enterprise, not just become a part of the premium Enterprise Security."
"It is a challenge to manage the environment in such a way, that one’s log, even with the bandwidth license, isn’t exceeded."
"The Web Application Firewall will send you too much information because it's more dedicated to security than a normal firewall."
"An area of improvement would be the licensing of the solution. They need a free license, which would allow faster lead times."
"We do have to educate developers on how to not blow it up. It is a little to easy to write an expensive query and overly stress the system. This could be improved."
"It could be more user friendly, in terms of the end-user experience."
"It needs integration with a configuration management solution."
ArcSight Logger is ranked 28th in Log Management with 31 reviews while Splunk Enterprise Security is ranked 1st in Log Management with 246 reviews. ArcSight Logger is rated 7.8, while Splunk Enterprise Security is rated 8.4. The top reviewer of ArcSight Logger writes "A scalable and stable solution that enables users to see all the event logs in one place". On the other hand, the top reviewer of Splunk Enterprise Security writes "It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query ". ArcSight Logger is most compared with IBM Security QRadar, Elastic Security, Wazuh, LogRhythm SIEM and syslog-ng, whereas Splunk Enterprise Security is most compared with Wazuh, IBM Security QRadar, Dynatrace and Elastic Security. See our ArcSight Logger vs. Splunk Enterprise Security report.
See our list of best Log Management vendors.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
