ArcSight Logger vs NetWitness Platform comparison

OpenText and NetWitness are both solutions in the Log Management category. OpenText is ranked #45 with an average rating of 6.8, while NetWitness is ranked #35 with an average rating of 8.3. OpenText holds a 0.9% mindshare in Log Management, compared to NetWitness’s 0.7% mindshare. Additionally, 81% of OpenText users are willing to recommend the solution, compared to 75% of NetWitness users who would recommend it.

ArcSight Logger

Read 32 ArcSight Logger reviews

1,584 Views
1,568 Comparison Views

81% willing to recommend

NetWitness Platform

Read 36 NetWitness Platform reviews

2,149 Views
1,117 Comparison Views

75% willing to recommend

ArcSight Logger

NetWitness Platform

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 9, 2024

NetWitness Platform and ArcSight Logger compete in security information and event management. While NetWitness Platform is more appealing in pricing and support, ArcSight Logger is preferred for its features despite its higher cost.

Features: NetWitness Platform stands out with analytics-driven threat detection, seamless integration capabilities, and robust security measures. ArcSight Logger impresses with its scalability, extensive log management, and ability to handle large data volumes efficiently.

Room for Improvement: NetWitness Platform users note the need for a streamlined workflow, enhanced real-time alerting, and improved user interface. ArcSight Logger would benefit from better search functionalities, refined reporting capabilities, and a less complex user experience.

Ease of Deployment and Customer Service: NetWitness Platform offers a straightforward deployment process with a responsive support team. In contrast, ArcSight Logger's deployment is more complex, but the customer service team excels in problem-solving expertise once operational.

Pricing and ROI: NetWitness Platform is more cost-effective initially, offering a quicker ROI due to lower setup costs. ArcSight Logger, despite higher upfront expenses, is valued for its long-term benefits and robust security features, leading to a favorable ROI in demanding data environments.

To learn more, read our detailed ArcSight Logger vs. NetWitness Platform Report (Updated: December 2025).

Buyer's Guide

ArcSight Logger vs. NetWitness Platform

December 2025

Download the complete report

Helped 881,665 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Logger

Ranking in Log Management

45th

Average Rating

7.6

Reviews Sentiment

5.8

Number of Reviews

Ranking in other categories

No ranking in other categories

NetWitness Platform

Ranking in Log Management

35th

Average Rating

7.4

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (32nd)

Mindshare comparison

As of February 2026, in the Log Management category, the mindshare of ArcSight Logger is 0.9%, up from 0.8% compared to the previous year. The mindshare of NetWitness Platform is 0.7%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management Market Share Distribution
Product	Market Share (%)
NetWitness Platform	0.7%
ArcSight Logger	0.9%
Other	98.4%

Log Management

Featured Reviews

Mohammed Shoaib Abdulla

Sr. Cybersecurity Consultant IT/OT at EJADA

Compliance and cost-effectiveness have improved while critical infrastructure security adapts to evolving needs

ArcSight Logger fulfills compliance requirements and passes audit requirements. It is one of the Aramco standards requirements and is recommended by Aramco for any implementation. Aramco, SABIC, water companies, and electricity companies are critical infrastructure with air-gapped networks. In an air-gapped network, there is no communication going out from that network area to the outside world, even to the corporate network. ArcSight Logger is installed on minimal resources with minimal requirements. There are not many upgrades or new features that come up frequently, though they do occur occasionally.

Read full review

MOTASHIM Al Razi

CISO at One Bank Limited

It is a stable solution, but they should make the user interface easier to understand

The solution's initial setup takes work. We have to organize multiple paths and many features. The deployment process takes less than a week. But it takes a month to complete if we want to make the solution smarter by integrating it with various devices. I rate the process as a six out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The machine learning is a good feature."

"We haven't had any crashes or bugs. It is stable."

"ArcSight's robustness is its most valuable feature."

"The log digestion features from threat intelligence platforms like Recorded Future or Talos are valuable."

"The most valuable feature is the level of detail that you can see about certain events, even when they do not come up in the console."

"It's a brilliant log collection tool, and it can handle hundreds of thousands of servers in a single shot to ingest the data."

"In our country we are a little bit private in terms of solutions, so we are just starting to use the basic data capture. Now some users can start to use additional features that come with Micro Focus ArcSight like user behavior analytics for investigating."

"The solution provides information about the risk factors."

More ArcSight Logger pros

"The development of use cases on the SSA console is quite user friendly. This means that the security analyst or the researcher does not have to learn another language."

"The most valuable features are the threat prediction and network forensics."

"The solution is really scalable for the high-end power, enterprise customer."

"The most valuable features are the packet decoder, log decoder, and concentrator."

"The newer 11.5 version that my team is using has found it to have good mapping."

"The product's initial setup phase was not at all difficult."

"What we are mainly using are the RSA concentrator, RSA Decoder, Archiver, Broker, and Log Decoder."

"The most valuable feature is the security that it provides."

More NetWitness Platform pros

Cons

"It's not a new product and is a bit complex. So, it requires a person dedicated to working on it and to know about it in and out. It is a huge product, and the search operation is a bit complicated for a new user or someone who has not used it for long. So for that person, it becomes a bit difficult."

"We have had problems with archiving."

"The next release should have AI capabilities."

"ArcSight Logger doesn't have features for user or customer behavior analysis."

"I would rate the technical support only 5 out of 10. The technical support is not satisfactory."

"The speed of Logger indexing and searching for certain bugs for some queries that we provide could be improved. It can handle a huge number of logs but it can be improved."

"The solution could be improved in maintenance settings."

"The initial setup was a little bit complex."

More ArcSight Logger cons

"The initial setup was complex because it takes a lot of time to complete the implementation."

"Health monitoring of the event sources and devices."

"Its technical support could be better."

"The log system is a bit complex and has room for improvement."

"An area for improvement would be better automation and more inbuilt use cases."

"The threat detection capability and centralizing and upgrading capability need to be improved. The threat alert capability needs to be improved as well because there is some lag time at present. They need to work on their database search too."

"I believe that integrating the solution with other products such as Oracle would be beneficial."

"They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams."

More NetWitness Platform cons

Pricing and Cost Advice

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"The pricing is quite harsh."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"ArcSight is an expensive solution."

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"We have a lifetime license, so we don't pay a monthly fee."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"I would rate the product a seven out of ten since it's an enterprise product."

"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."

"Our license is for one year."

"We are on an annual license for the use of the solution."

"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."

"We have yearly licensing costs. The license fee can be based on the volume of EPS. Some organizations may have, as a gentlemanly gesture, 10,000 EPS and get a 3,000 EPS license but actually use 5,000 EPS."

"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."

"It is cheap."

"It’s cheaper to run virtual machines in a VMware environment."

More NetWitness Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

881,665 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees

Feb 26, 2015

HP ArcSight vs. IBM QRadar vs. McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm

We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Computer Software Company

Marketing Services Firm

Manufacturing Company

Financial Services Firm

13%

Performing Arts

Computer Software Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	10
Large Enterprise	16

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	7
Large Enterprise	20

Questions from the Community

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

See all answers

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

See all answers

What needs improvement with ArcSight Logger?

This decision is made by higher management as they don't want to have multiple solutions for one solution. ArcSight Logger themselves don't provide good support, but companies such as ours provide ...

See all answers

What do you like most about NetWitness Platform?

The product's initial setup phase was not at all difficult.

See all answers

What is your experience regarding pricing and costs for NetWitness Platform?

The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.

See all answers

What needs improvement with NetWitness Platform?

There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.

See all answers

Comparisons

Splunk Enterprise Security vs ArcSight Logger

Compared 22% of the time

IBM Security QRadar vs ArcSight Logger

Compared 19% of the time

Elastic Security vs ArcSight Logger

Compared 10% of the time

LogRhythm SIEM vs ArcSight Logger

Compared 7% of the time

Check Point Security Management vs ArcSight Logger

Compared 3% of the time

More ArcSight Logger Competitors

IBM Security QRadar vs NetWitness Platform

Compared 10% of the time

Splunk Enterprise Security vs NetWitness Platform

Compared 7% of the time

Elastic Security vs NetWitness Platform

Compared 6% of the time

USM Anywhere vs NetWitness Platform

Compared 5% of the time

RSA enVision vs NetWitness Platform

Compared 4% of the time

More NetWitness Platform Competitors

Product Reports

Buyer's Guide

ArcSight Logger

January 2026

Download ArcSight Logger product report

Buyer's Guide

NetWitness Platform

January 2026

Download NetWitness Platform product report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

RSA Security Analytics

Overview

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

OpenText

NetWitness Platform is an evolved SIEM and threat detection and response solution that functions as a single, unified platform for ALL your security data. It features an advanced analyst workbench for triaging alerts and incidents, and it orchestrates security operations programs end to end. In short: NetWitness Platform is all you need to run an intelligent SOC.

NetWitness

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

Los Angeles World Airports, Reply

Buyer's Guide

ArcSight Logger vs. NetWitness Platform

December 2025

Free Report: ArcSight Logger vs. NetWitness Platform

Find out what your peers are saying about ArcSight Logger vs. NetWitness Platform and other solutions. Updated: December 2025.

DOWNLOAD NOW

881,665 professionals have used our research since 2012.

See our ArcSight Logger vs. NetWitness Platform report.

See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.