Try our new research platform with insights from 80,000+ expert users
ArcSight Logger Logo

ArcSight Logger pros and cons

Vendor: OpenText
3.8 out of 5

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

ESM use cases are highly valuable, enabling big data collection within companies.
ArcSight Logger excels in event detail visualization, even when events do not appear in the console.
Customizability and the ability to create personalized dashboards are standout features.
The search capability is straightforward, aiding in efficient operations.
ArcSight Logger is scalable, robust, and effectively handles massive log collections.

CONS

ArcSight Logger indexing and search functions are reportedly slow, and its performance could benefit from enhancements.
The integration features, including network analysis and readiness of connectors for various applications, need improvement.
The complexity of maintenance and the requirement for dedicated technical knowledge make ArcSight Logger challenging to manage.
ArcSight Logger is considered expensive, prompting dissatisfaction regarding its cost.
ArcSight Logger lacks essential features for user or customer behavior analysis, leading some to migrate to other platforms like Splunk.
 

ArcSight Logger Pros review quotes

it_user409197 - PeerSpot reviewer
Security Architecture Senior Specialist at a comms service provider with 1,001-5,000 employees
Mar 20, 2016
The most important thing is the scalability of the product and its ease of use.
it_user414390 - PeerSpot reviewer
QA Consultant / Security Testing Professional at a tech company with 501-1,000 employees
Mar 29, 2016
This product was used to help us get PCI compliant, and its automated functions made it easier so we could concentrate more on real issues instead of standard log collecting and alerting issues.
it_user159090 - PeerSpot reviewer
Senior Security and Compliance Engineer at a retailer with 501-1,000 employees
Mar 31, 2016
ArcSight has improved incident response from days to minutes.
Learn what your peers think about ArcSight Logger. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
884,873 professionals have used our research since 2012.
it_user417453 - PeerSpot reviewer
SIEM Administrator at a tech services company with 1,001-5,000 employees
Mar 24, 2016
I would definitely say to go with this product as it's the best in the market, but before opting for this product your perform solution-sizing because otherwise you might end up digging your own grave in fixing it.
it_user417468 - PeerSpot reviewer
Security Solutions Delivery Engineer at a tech services company with 1,001-5,000 employees
Mar 24, 2016
It benefits the organization by identifying the threats ranging from the most basic ones to many advanced ones.
it_user417534 - PeerSpot reviewer
Network Specialist with 1,001-5,000 employees
Mar 25, 2016
The functionalities of this particular server is absolutely phenomenal.
it_user417555 - PeerSpot reviewer
IT Security Operations Manager at a recruiting/HR firm with 1,001-5,000 employees
Mar 27, 2016
Data correlation, which unfortunately only comes with an ESM module, is the most valuable feature for us.
it_user418134 - PeerSpot reviewer
IT Security, Associate Consultant - On-location at a tech company with 501-1,000 employees
Mar 28, 2016
I think where Logger shines is usability.
it_user915744 - PeerSpot reviewer
Vulnerability Assessor at Telenor Common Operation
Mar 12, 2019
The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution.
AR
Technical Consultant at a tech services company with 11-50 employees
Aug 11, 2019
In our country we are a little bit private in terms of solutions, so we are just starting to use the basic data capture. Now some users can start to use additional features that come with Micro Focus ArcSight like user behavior analytics for investigating.
 

ArcSight Logger Cons review quotes

it_user409197 - PeerSpot reviewer
Security Architecture Senior Specialist at a comms service provider with 1,001-5,000 employees
Mar 20, 2016
The only drawback is that without ESM, you are limited.
it_user414390 - PeerSpot reviewer
QA Consultant / Security Testing Professional at a tech company with 501-1,000 employees
Mar 29, 2016
Overall, it is a good system for what we use it for, but some licensing parts are really annoying.
it_user159090 - PeerSpot reviewer
Senior Security and Compliance Engineer at a retailer with 501-1,000 employees
Mar 31, 2016
The original Connector Appliance peaked its events-per-second limit much sooner than anticipated and required us to purchase another, and significantly larger, appliance.
Learn what your peers think about ArcSight Logger. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
884,873 professionals have used our research since 2012.
it_user417453 - PeerSpot reviewer
SIEM Administrator at a tech services company with 1,001-5,000 employees
Mar 24, 2016
HP needs to work on the stability as it is mostly dependent on Java and there are console-related issues.
it_user417468 - PeerSpot reviewer
Security Solutions Delivery Engineer at a tech services company with 1,001-5,000 employees
Mar 24, 2016
The initial setup was a bit complicated to follow since there are many different components present within it.
it_user417534 - PeerSpot reviewer
Network Specialist with 1,001-5,000 employees
Mar 25, 2016
The only thing I did not particularly like about the product was its speed on the web interface.
it_user417555 - PeerSpot reviewer
IT Security Operations Manager at a recruiting/HR firm with 1,001-5,000 employees
Mar 27, 2016
It is very expensive for what it delivers.
it_user418134 - PeerSpot reviewer
IT Security, Associate Consultant - On-location at a tech company with 501-1,000 employees
Mar 28, 2016
Clicking on a log source on the main page should not pull all stored logs as this is too slow and way excessive.
it_user915744 - PeerSpot reviewer
Vulnerability Assessor at Telenor Common Operation
Mar 12, 2019
The speed of Logger indexing and searching for certain bugs for some queries that we provide could be improved. It can handle a huge number of logs but it can be improved.
AR
Technical Consultant at a tech services company with 11-50 employees
Aug 11, 2019
I think the ArcSight team should try to simplify legacy products for the customers, because that product is not easy to use or to work with. It needs more more competency or appeal to use. We hope Micro Focus is trying to resolve this.