ArcSight Valuable Features

Karlo Luiten Crisc Cissp
Security Consultant at a tech services company with 5,001-10,000 employees
* Large scale installations work well. * The new user interface is nice. * The real-time analysis adds value. * The default packages on the new HPE Marketplace are useful and give nice default dashboards and reports for most of the well-known products. View full review »
Jordan French
Business Development Manager- Threat Management Services at a tech services company with 5,001-10,000 employees
* Smart Connectors and Flex Wizard * Multi-tenant access * Customization for dashboards and reporting * Improvements made to the ADP platform View full review »
Ssaurabh Kesari
Ex Senior Security Analyst and Onsite consultant at a tech services company with 1,001-5,000 employees
Once the rules are defined, it is capable of detecting minute changes in the systems, which are effectively based on the entries in the log. View full review »
Hatem Metwally
Senior Security Consultant, CISSP, HPE ArcSight Specialist at a retailer with 5,001-10,000 employees
* SmartConnector: Normalization parses raw logs and converts them into CEF (common event format). This is the core of the product. * Filtration, Aggregation: Both features provide a good way to save EPS (events per second). * Logger: Long log retention, fast search, and reporting. * ESM/Express: Correlation via standard rules and data monitors, active list, session list, active channels, reports, trends, queries, dashboards (query viewers and data monitors), and lightweight rules. View full review »
Karthik Velli
Delivery Consultant - Security Solutions with 1,001-5,000 employees
Customization. ArcSight gives you a platform to on-board out-of-the-box devices with a more accurate way of collecting desired logs/events. Competitors offer the something similar but ArcSight does gives you more detail. View full review »
Filip Simeonov
Information Security and Business Data Protection Specialist at a comms service provider with 1,001-5,000 employees
The webpage algorithm is the most valuable feature because it was the fastest feature for searching the logs, events, and correlation. View full review »
Teguh Budyantara
IT Manager at Royal Cemerlang
ArcSight ESM: The module has user-defined rules capabilities. This feature lets us define almost any threat. View full review »

Sign Up with Email