The product helps me see all the event logs in one place. When I look into the application, I can see different levels of alerts and make the required decision.

If deployed properly, the solution can collect logs well. The categories of logs are very high. It is very good. The solution is compatible with syslog servers. Our customers like the solution.

We use the product for Windows event management, custom application onboarding, and integration with firewalls and other security tools for log collection and security monitoring.

We use the product for log management purposes at the moment.

We primarily use it in our site for compliance.

Our primary use case for this solution is incident response, investigations and log management. For example, risky network communications, communications with risky countries, and VPN connections from outside the country. We deploy the solution on-premises.

The solution is used for searching and test reports.

We have several uses for this solution like retention storage. We use Logger for some queries since we are in Talco industries. We use it for IT, MSISDN, and mobile phone. For the SM we have communication for the infrastructures including security. Plus, we use ESM for prevention and for a couple of cases we use it for fraud prevention and some for the VIP members check.

The tool helps us to collect, correlate and publish logs on our site. 

Most of our clients need security devices that can monitor events such as authentication failures, incorrect logins, link, module, device, and switch failures, security events and alarms, vulnerability events, and threat logs. We are currently using ArcSight Logger and many other Syslog devices to monitor these security events and logs.

We have just upgraded to Splunk, so we're currently in the process of converting everything over from ArcSight to Splunk.

ArcSight logger was used for storing your logs, long-term, in a structured way. You can search in it, you can structure your data in it, and you can generate simple reports. 

We primarily use the solution for monitoring all of our perimeter - from critical assets to less critical ones. It covers IT assets, networks, databases, servers, endpoints, etc.

Our primary use case was to catch malicious activity happening inside our organization.

We use the on-premise version of ArcSight Logger.

We use this solution for archiving log feeds.

We focus mainly on the enterprise market where the customers have the requirement for log management and compliance. And most of the time we propose ESM along with the logger for SIEM requirements.

We have multiple Logger customers here in Sri Lanka where we've implemented and maintained solutions for them.

We are a service provider and this solution is deployed on-premises for some of our customers. It is primarily used for firewall and Windows events. 

We use the on-premise deployment model. Our primary use case is for monitoring.