We have very few options. We have QRadar, ArcSight, Splunk, and Elastic. Elastic is the analyzer. All the solutions are good. All are enterprise-level tools.

At the time we were evaluating other solutions, we looked at Splunk and LogLogic. ArcSight was the first one that positioned itself as a market leader, which was a big reason we chose it.

We evaluated QRadar before we implemented this solution.

In terms of pricing, size appropriately, and realistically up front. That said, the product architecture is scalable as needs grow.

We did an evaluation of major vendors and HP was fastest for us to get in and use.

Splunk is definitely a direct competitor and equally powerful. Logger seems to have a better interface in my opinion. Also, if your company is already using ArcSight, it makes sense to go with Logger as it utilizes the same SmartConnectors for log parsing/forwarding.

I think where Logger shines is usability. Splunk is a beast unto itself and people build careers on it. Not to knock it too much, as it is a very powerful product. But the appeal of Logger is it makes log management accessible and usable to any IT/systems/networking employee or user to be able to make sense and use it while not having to become a guru of a specific log management system to use it to it’s fullest extent.

We did not use another solution prior to this one, although we have upgraded versions.