Arcsight Logger Review

We like the compression rates and scalability of the smart connectors.


Valuable Features

  • Scalability of the smart connectors
  • Ease of storing billions of events without special storage needs
  • Great compression rates

Improvements to My Organization

First of all, the collection of a mass of events is a challenge for enterprise companies. You need a great deal of storage and how you collect them is an issue. The smart connectors and great compression rates of ArcSight helped us a lot.

The other thing is to be able to be competitive as you need to show that you need a logging system that complies to the laws in your country and company policy so that you can continue to do your business. With ArcSight, we easily pass the requirements of the external audits our clients require.

Room for Improvement

I would say that the consolidation should be done only by using ArcSight. We need to use the ESM module to create complex rules and reports as we can only do limited reports with ArcSight.

Use of Solution

We've used it for about two years.

Deployment Issues

The main problem is how to collect logs from various resources.

Stability Issues

The smart connectors are very stable.

Scalability Issues

We've had no issues scaling it for our needs.

Customer Service and Technical Support

Since we work with partners, I can't say too much. However, for every company on this planet there is always room for improvement in the level of support.

Previous Solutions

This was the first solution we've used, and I believe it will be the last solution we need.

Initial Setup

We used an appliance, so the setup was very easy. But I must say that even if you use an open server, it is not complex to deploy this product.

Implementation Team

We worked with a partner for the implementation.

ROI

It is really hard to measure ROI financially, but there are some important things to say. First of all, since it's easy to use, our operational time has decreased so that we as technical staff have much more time to spend on other issues. Since we collect all of the logs, we can investigate fraud and find their sources. We can also find the causes of system outages.

Other Advice

It works fast and you can collect just about everything. The only drawback is that without ESM, you are limited. The most important thing is the scalability of the product and its ease of use. Companies like us need some specific connectors, and smart connectors give us a very scalable solution. Also, even though we have billions of events, it is really fast in finding the logs we need. That makes this solution amazing.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
Add a Comment
Guest
Sign Up with Email