ArcSight Logger vs Elastic Security comparison

OpenText and Elastic are both solutions in the Log Management category. OpenText is ranked #31 with an average rating of 6.7, while Elastic is ranked #7 with an average rating of 7.7. OpenText holds a 0.8% mindshare in Log Management, compared to Elastic’s 3.5% mindshare. Additionally, 80% of OpenText users are willing to recommend the solution, compared to 86% of Elastic users who would recommend it.

ArcSight Logger

Read 31 ArcSight Logger reviews

1,469 Views
1,332 Comparison Views

80% willing to recommend

Elastic Security

Read 64 Elastic Security reviews

8,249 Views
7,021 Comparison Views

86% willing to recommend

ArcSight Logger

Elastic Security

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 9, 2024

ArcSight Logger and Elastic Security are both formidable in the security information and event management category. Elastic Security seems to have the upper hand due to its scalability, threat detection capabilities, and advanced threat hunting as highlighted by user reviews.

Features: ArcSight Logger users benefit from comprehensive event log management, efficient data auditing, and detailed log analysis. Elastic Security is valued for its scalable threat detection features, superior visualization tools, and ease of integration with other data sources.

Room for Improvement: ArcSight Logger faces integration complexities, a steep learning curve, and user challenges in mastering technical aspects. Elastic Security requires better documentation, seeks more seamless support options, and clearer configuration clarity as highlighted by users.

Ease of Deployment and Customer Service: ArcSight Logger has a straightforward deployment requiring technical expertise and is recognized for responsive customer service. Elastic Security offers flexible deployment models but involves complex configurations and has a need for improved support channels.

Pricing and ROI: ArcSight Logger involves a high initial setup cost but offers fair ROI with its log management capabilities. Elastic Security, while also necessitating a significant upfront investment, is perceived to deliver better ROI due to integrated security features and adaptability to dynamic threats.

To learn more, read our detailed ArcSight Logger vs. Elastic Security Report (Updated: March 2025).

Buyer's Guide

ArcSight Logger vs. Elastic Security

March 2025

Download the complete report

Helped 845,406 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Logger

Ranking in Log Management

31st

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Elastic Security

Ranking in Log Management

7th

Average Rating

7.8

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (5th), Endpoint Detection and Response (EDR) (16th), Security Orchestration Automation and Response (SOAR) (6th), Extended Detection and Response (XDR) (8th)

Mindshare comparison

As of April 2025, in the Log Management category, the mindshare of ArcSight Logger is 0.8%, down from 1.2% compared to the previous year. The mindshare of Elastic Security is 3.5%, down from 6.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Geraldo Freitas

Analista de TI - suporte a redes e segurança at Tribunal de Contas da União

Enhances our security incident investigation but not good for correlation

Investigation is good when you know what you want to search for in Logger. The most difficult part is parsing the logs and configuring the parsers. For investigation, it's good. For correlation, it's not good. We use Sentinel, and Sentinel has pre-built use cases that are much easier to configure. So, it enhances our security incident investigation. We have inbound integration, but configuring the parsers is sometimes very difficult. We only have two use cases where we have a correlation set up. We send the information to Check Point to block IP addresses when we see a lot of blocks from the same source. We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist. So, it offers the ease of integration.

Read full review

Gajewski Marek

Chief Technology Officer & Co-founder at CS2

Provides good anomaly detection and connectivity reporting

We previously used Splunk but switched to Elastic Security because Splunk was more expensive. Feature-wise, both tools are pretty much the same. They have almost the same functions. Elastic Security has a much better AI assistant that allows you to ask questions like a normal person. With Elastic Security, I can also predict the price and how much it will cost. Splunks's pricing depends on how much data we use and the different add-ons I have to add. The pricing is much better with Elastic Security.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The machine learning is a good feature."

"ArcSight's robustness is its most valuable feature."

"The technical support team is good...It is a scalable solution."

"It's a brilliant log collection tool, and it can handle hundreds of thousands of servers in a single shot to ingest the data."

"It provides in-depth information on business activities once we log into the system."

"We check a lot of logs in ArcSight Logger because we're running a massive database platform."

"Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."

"The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."

More ArcSight Logger pros

"It's very customizable, which is quite helpful."

"The solution is quite stable. The performance has been good."

"I like that it's a SIEM platform. I like that I can sell Elastic Security quickly. Elastic Security has a large community that can support users."

"Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it contains critical information. The reverse index allows fast data indexing because of Elastic's efficient search engine."

"The most valuable feature is the scalability. We are in Indonesia, more engineers understand Elastic Security here. So it is easier to scale and also develop. In features, the discovery to query all the logs is very important to us. It is very easy, especially with the query function and the feature to generate alerts and create tools. Sometimes we use the alert security dashboard to monitor our clients."

"Elastic Security makes data communication easier."

"It is scalable."

"It's not very complicated to install Elastic."

More Elastic Security pros

Cons

"It is really difficult to work in ArcSight Logger, as it is very slow."

"The solution could be improved in maintenance settings."

"We find that the search and access functionality is quite slow."

"We have had problems with archiving."

"It would be better if the product is cheaper."

"The solution must provide readymade connectors for different applications."

"The solution should make it possible to integrate network analysis features."

"The initial setup was a little bit complex."

More ArcSight Logger cons

"There should be a simulation environment to check whether my Elastic implementation is functioning perfectly fine. Other solutions have their own Android and iOS applications that I can install on my mobile so that I am continuously connected to the SIEM."

"It is difficult to anticipate and understand the space utilization, so more clarity there would be great."

"We're using the open-source edition, for now, I think maybe they can allow their OLED plugin to be open source, as at the moment it is commercialised."

"One limitation of Elastic Security is that it does not have built-in workflows for all tasks. For example, if you need a workflow for compliance, you will need to create a custom workflow."

"The tool should improve its scalability."

"The initial configuration and setup are complicated and not straightforward."

"This solution is very hard to implement."

"Elastic Security consumes a lot of resources, requiring a substantial deployment setup."

More Elastic Security cons

Pricing and Cost Advice

"I would rate the product a seven out of ten since it's an enterprise product."

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"The pricing is quite harsh."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"ArcSight is an expensive solution."

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"We have a lifetime license, so we don't pay a monthly fee."

"When compared to other products, the price is average or on the low side."

"The price is reasonable. It probably costs the same as ArcSight and LogRhythm SIEM. FortiSIEM might cost less than Elastic Security. There are no hidden or additional costs."

"The tool's pricing is flexible and comes at unit cost. You don't have to pay for everything."

"Its price is fine. Its licensing works on a yearly basis. We have to renew the license every year. I also have a good experience with Darktrace. When we buy Darktrace, we get training free of cost, which is not there in Elastic. We have to pay extra for training. There is certainly room for improvement."

"The solution is not expensive and costs around ten dollars a month."

"This is an open-source product, so there are no costs."

"The product offers an amazing pricing structure. Price-wise, the product is very competitive."

"There is no charge for using the open-source version."

More Elastic Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

845,406 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

20%

Computer Software Company

17%

Government

Educational Organization

Computer Software Company

17%

Government

10%

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

See all answers

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

See all answers

What needs improvement with ArcSight Logger?

The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...

See all answers

Datadog vs ELK: which one is good in terms of performance, cost and efficiency?

With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several times lately using the dashboards we have created with Datadog; they are very good c...

See all answers

What do you like most about Elastic Security?

Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it contains critical information. The reverse index allows fast data indexing because ...

See all answers

What is your experience regarding pricing and costs for Elastic Security?

Elastic Security is considered cost-effective, especially at lower EPS levels. However, a direct comparison was not made due to different pricing structures.

See all answers

Comparisons

Splunk Enterprise Security vs ArcSight Logger

Compared 38% of the time

IBM Security QRadar vs ArcSight Logger

Compared 35% of the time

Wazuh vs ArcSight Logger

Compared 7% of the time

LogRhythm SIEM vs ArcSight Logger

Compared 4% of the time

Grafana Loki vs ArcSight Logger

Compared 4% of the time

More ArcSight Logger Competitors

Wazuh vs Elastic Security

Compared 23% of the time

CrowdStrike Falcon vs Elastic Security

Compared 9% of the time

IBM Security QRadar vs Elastic Security

Compared 7% of the time

Splunk Enterprise Security vs Elastic Security

Compared 6% of the time

Microsoft Sentinel vs Elastic Security

Compared 5% of the time

More Elastic Security Competitors

Product Reports

Buyer's Guide

ArcSight Logger

March 2025

Download ArcSight Logger product report

Buyer's Guide

Elastic Security

March 2025

Download Elastic Security product report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

Elastic SIEM, ELK Logstash

Overview

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

OpenText

Elastic Security is a robust, open-source security solution designed to offer integrated threat prevention, detection, and response capabilities across an organization's entire digital estate. Part of the Elastic Stack (which includes Elasticsearch, Logstash, and Kibana), Elastic Security leverages the power of search, analytics, and data aggregation to provide real-time insight into threats and vulnerabilities. It is a comprehensive platform that supports a wide range of security needs, from endpoint protection to cloud and network security, making it a versatile choice for organizations looking to enhance their cybersecurity posture.

Elastic Security combines the features of a security information and event management (SIEM) system with endpoint protection, allowing organizations to detect, investigate, and respond to threats in real time. This unified approach helps reduce complexity and improve the efficiency of security operations.

Additional offerings and benefits:

The platform utilizes advanced analytics, machine learning algorithms, and anomaly detection to identify threats and suspicious activities.
It offers extensive integration options with other tools and platforms, facilitating a more cohesive and comprehensive security ecosystem.
With Kibana, users gain access to powerful visualization tools and dashboards that provide real-time insight into security data.

Finally, Elastic Security benefits from a global community of users who contribute to its threat intelligence, helping to enhance its detection capabilities. This collaborative approach ensures that the solution remains on the cutting edge of cybersecurity, with up-to-date information on the latest threats and vulnerabilities.

Elastic

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care

Buyer's Guide

ArcSight Logger vs. Elastic Security

March 2025

Free Report: ArcSight Logger vs. Elastic Security

Find out what your peers are saying about ArcSight Logger vs. Elastic Security and other solutions. Updated: March 2025.

DOWNLOAD NOW

845,406 professionals have used our research since 2012.

See our ArcSight Logger vs. Elastic Security report.

See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.