- Powerful Correlation
- Integration capabilities
Yes, Logger, ESM and Connector ecosystem if not set up properly, lead to stability issues both in point operations as well as integrations.
No. ArcSight is very scalable.
3 out of 5.
We implemented it in-house.
Poor as the product takes more effort to generate value. Its CAPEX cost is high too.
If you really want the power and flexibility of customizing your Security monitoring and correlation, go with ArcSight, but beware of the effort involved in set up and maintenance.