ArcSight Logger Reviews

Name: ArcSight Logger
Brand: OpenText
Rating: 4 (30 reviews)

3.9 out of 5

30 reviews
83% willing to recommend

691 followers

What is ArcSight Logger?UNIXBusinessApplication
Price:

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

Get the ArcSight Logger Buyer's Guide and find out what your peers are saying about ArcSight Logger, Splunk Enterprise Security, Datadog and more!

ArcSight Logger is the #29 ranked solution in Log Management Software. PeerSpot users give ArcSight Logger an average rating of 7.8 out of 10. ArcSight Logger is most commonly compared to Splunk Enterprise Security: ArcSight Logger vs Splunk Enterprise Security. ArcSight Logger is popular among the large enterprise segment, accounting for 64% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 16% of all views.

Helped 767,319 peers since 2012

Featured reviews

Nagendra Nekkala.

Senior Manager ICT & Innovations at Bangalore International Airport Limited

Dec 1, 2023

The product helps me see all the event logs in one place. When I look into the application, I can see different levels of alerts and make the required decision The solution provides information about the risk factors. It also provides information on our security exposure. There are multiple…

Read full review

Subhadip Pakrashi

CEO at Kapstone Technological Services LLP

Feb 19, 2024

It is a proven technology. It is one of the best products available in the market. Loggers generally pull the logs and send them to the main orchestration device. Loggers connect to the SIEM tools, and the solutions speak to each other. It is pretty good. If we want to increase the capacity of the SIEM tool, the events per second can be increased. Loggers are the only way to fetch the logs. It depends on the customers’ requirements. ArcSight Logger sends the logs. The SIEM system is the main component. Less false positives will lead to a better solution. If there are more false positives, the solutions provided by the SIEM tool will be diluted. The data retention capabilities depend upon the size of the hard disk. The bigger the hard disk, the more the data can be stored. The integration with other security solutions is good. It's a proven solution in the market.

Read full review

Mohammad Sabah

Senior Security Analyst at a government with 201-500 employees

Aug 30, 2022

We check a lot of logs in ArcSight Logger because we're running a massive database platform I had some latency issues for two months. I had to increase our storage capacity significantly to reduce the latency. I have been using Logger for around five years. The scalability is good. I built our…

Read full review

ArcSight Logger market share

As of March 2024, the market share of ArcSight Logger in the Log Management category stands at 1.4%, marking a decrease of 4.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Log Management

Key learnings from peers

Valuable Features

ArcSight Logger is an impressive tool for collecting and analyzing large amounts of log data. The UEBA feature has reduced event response time, while the provisioning engine is highly valued. The solution is specifically designed to manage large environments of network devices and servers. The log digestion features from threat intelligence platforms are valuable, and it is capable of handling massive database platforms. Users appreciate the speed of search operations and ease of exporting and forwarding logs to other products.

Room for Improvement

Areas for improvement in ArcSight Logger include better functioning connectors and updated user manuals. Some find the product slow, making it difficult to work with, and the dashboard is not intuitive or efficient, requiring training to use effectively. There have also been issues with storage capacity, and the search mechanism is complicated for new users. There are also performance issues noted by some when ingesting and forwarding data.

Pricing

ArcSight Logger is seen to be an expensive and difficult enterprise product to set up. Licensing costs are charged yearly and are standard.

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."
"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."
"I would rate the product a seven out of ten since it's an enterprise product."

Service and Support

Users report positive experiences with ArcSight Logger's customer service and technical support. The support is considered good, with some users praising their cooperation and accommodation during the problem-solving process.

There have been complaints about the availability of level-3 engineers in certain time zones, leading to delays in receiving support.

Deployment

Some found the initial setup straightforward and easy, while others found it to be time-consuming and complex. There are multiple components to address, and setting up the use cases can also take a significant amount of time.

Scalability

The scalability of ArcSight Logger is highly praised by its users, with many rating it a 10 out of 10. The solution is easy to expand and add more sources to, with some users having up to 6,000 machines sending logs.

Proper identification of areas that require more resources is important for successful scaling, as the architecture of ArcSight Logger can become complex for larger organizations.