ArcSight Logger Reviews
- Highest Rating
- Lowest Rating
- Review Length
Showingreviews based on the current filters.
Jan 27 2020
What is most valuable?The solution offers very good performance and is efficient. The provider offered excellent training to help us successfully launch the project. The interface is user-friendly. The solution passed compliance thresholds and standard… more »
What needs improvement?The console in older versions is not user-friendly. At one point, we experienced an RMA. However, they sent an expert to do an SDN check. Someone came to the company to verify the hardware and try to access the log just to verify what the… more »
What's my experience with pricing, setup cost, and licensing?In our case, we bought a license for a three year period. The technology itself is expensive.
What other advice do I have?Arcsight was a technology we used for CM security information event management. We deployed it when I was an Information Security Senior Engineer in a company that provided electricity and water for Casablanca and neighboring cities… more »
Which other solutions did I evaluate?At the time we were evaluating other solutions, we looked at Splunk and LogLogic. ArcSight was the first one that positioned itself as a market leader, which was a big reason we chose it.
Mar 12 2019
What is most valuable?The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution.
What needs improvement?The speed of Logger indexing and searching for certain bugs for some queries that we provide could be improved. It can handle a huge number of logs but it can be improved. They should improve the speed of the indexing and queries being dumped. Technical support's response time could also be slightly improved. Although these two issues are not something bad, it's just the only things that I think… more »
What other advice do I have?I would rate it a nine out of ten. I wouldn't give any solution a perfect ten.
Learn what your peers think about ArcSight Logger. Get advice and tips from experienced pros sharing their opinions. Updated: April 2020.
442,141 professionals have used our research since 2012.
Aug 19 2019
What is most valuable?In our country we are a little bit private in terms of solutions, so we are just starting to use the basic data capture. Now some users can start to use additional features that come with Micro Focus ArcSight like user behavior analytics for investigating.
What needs improvement?I think the ArcSight team should try to simplify legacy products for the customers, because that product is not easy to use or to work with. It needs more more competency or appeal to use. We hope Micro Focus is trying to resolve this. A lot of people that compare this solution with QRadar or McAfee… more »
What's my experience with pricing, setup cost, and licensing?ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition.
What other advice do I have?I would rate this solution as ten out of ten. Whenever I talk about the product I tell the user to start easy, not to take the whole package and to try to use it quickly. Start with the basics, then you can ramp up fluidly. Sometimes the client or customer wants to take it urgently so at that moment… more »
Feb 21 2020
What is most valuable?Various log collecting methods helps customers to route logs from almost every application or device.In terms of ArcSight Logger's most valuable feature, it is their scalability and flexible log collecting options. ArcSight's real advantage is its scalability because they have two layers, Logger… more »
What needs improvement?A concern is that after their merger with Micro Focus I have some doubts. I don't see much development of the road map on ArcSight itself. The reason why I'm saying this is because we had a situation here in Sri Lanka which concerned us, where Arcsight suddenly decided to discontinue IBM as… more »
What's my experience with pricing, setup cost, and licensing?We have an annual subscription license. I'd say the pricing is okay.
What other advice do I have?I would advise anyone looking to implement this solution to have a good understanding of your infrastructure and to verify your architecture. You should be able to get an idea of their road map for the next five years to just verify what sort of effect it will be making on your system. On a scale of… more »
Feb 24 2020
A robust solution than can handle complex operations and analytics, but the reporting capabilities are limited
What is most valuable?It's a robust, mature product and you can do some complex operations and analytics. For correlation and structuring data, it's very good. It's a secure platform.
What needs improvement?ArcSight Logger is an outdated product. It hasn't been changed in the last ten years. I think that it's a product that will disappear and there are better platforms that you can use. You have limited reporting capabilities and I wouldn't choose ArcSight Logger for this purpose. I would prefer to go with Elastic or Splunk. You can do reporting but it's not up to date in terms of interactive reports… more »
What other advice do I have?We are involved with technology that allows us to solve problems for clients that they cannot solve themselves. These are often complex environments. This solution has still been in use over the past year. We have a client who has the full ArcSight Suite. We are working on a solution to phase out Logger in the coming year and replace it with Elastic or Splunk. We can replace ArcSight entirely by… more »
Sep 16 2019
What is most valuable?The ability to customize the solution in great detail is its most valuable feature. We can customize the use cases and also have the ability to do scripting. We can personalize our dashboard as well. The scalability the solution offers is… more »
What needs improvement?They should enhance and improve everything related to the graphical user interface. It needs to be more fluid and easy to use. Many think that ArcSight is complex and difficult. This is not something that my team feels but that's because we… more »
Which solution did I use previously and why did I switch?We didn't previously use a different solution.
What other advice do I have?We are using the on-premises deployment model. There are people who say "Oh, ArcSight is losing its position and it's complex or it's not a good solution." I do not agree. I know that the biggest companies in the world are still working… more »
Which other solutions did I evaluate?We evaluated QRadar before we implemented this solution.
Aug 20 2019
What is most valuable?The most valuable feature is the level of detail that you can see about certain events, even when they do not come up in the console. The searching is very good, where you can search for the larger part of the event.
What needs improvement?I would like to see better scheduling in the next release of this solution. It would improve the solution if some of the features available in the console were implemented within the search. More things can be done in the console, while the… more »
Which solution did I use previously and why did I switch?We evaluated Splunk and IBM QRadar before choosing this solution.
What other advice do I have?This is a solution that is straightforward and easy to use. It is user-friendly and not complex. I would rate this solution an eight out of ten.
Which other solutions did I evaluate?We did not use another solution prior to this one, although we have upgraded versions.
Mar 31 2020
What is most valuable?The most valuable feature is the search capability, which is simple to use. We can easily search for certain events.
What needs improvement?We have had problems with archiving. The license for ArcSight Logger has given us problems. I would like to see better integration with ArcSight ESM. It would be helpful if this solution had some of the features from the ArcSight Command Center.
What other advice do I have?I am the technical support person for all of our on-site components. My advice for anybody who is implementing this solution is to use ArcSight ESM to correlate the logs and display them on the dashboard. I would rate this solution an eight out of ten.
See 1 More ArcSight Logger Reviews
Read Archived Reviews
What is ArcSight Logger?HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.
Also known asMicro Focus Arcsight Logger, HPE Arcsight Logger
ArcSight Logger customersChina Merchants Bank, Bank AlJazira, Banca Intesa
Download our free ArcSight Logger Report and get advice and tips from experienced pros sharing their opinions.