Try our new research platform with insights from 80,000+ expert users

ArcSight Analytics vs LogRhythm UEBA comparison

OpenText and LogRhythm are both solutions in the User Entity Behavior Analytics (UEBA) category. OpenText is ranked #13 with an average rating of 9.0, while LogRhythm is ranked #11 with an average rating of 7.0. OpenText holds a 1.2% mindshare in UBA, compared to LogRhythm’s 1.9% mindshare. Additionally, 66% of OpenText users are willing to recommend the solution, compared to 55% of LogRhythm users who would recommend it.
ArcSight Analytics
Read 15 ArcSight Analytics reviews
  • 272 Views
  • 106 Comparison Views
66% willing to recommend
LogRhythm UEBA
Read 11 LogRhythm UEBA reviews
  • 232 Views
  • 190 Comparison Views
55% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Feb 4, 2025

ArcSight Analytics and LogRhythm UEBA are products in the cybersecurity analytics sector. LogRhythm UEBA seems to have the upper hand due to user-friendly deployment and better ROI.

Features: ArcSight Analytics offers scalability, powerful integration capabilities, and comprehensive security insights, while LogRhythm UEBA provides real-time visibility, intuitive threat detection, and login tracking to enhance user security.

Room for Improvement: ArcSight could refine its log management, enhance its learning curve simplicity, and improve pricing transparency. LogRhythm could better optimize its machine learning models, expand its feature set for advanced threat detection, and work on integration with legacy systems.

Ease of Deployment and Customer Service: ArcSight Analytics demands complex deployment but offers extensive customer support. LogRhythm UEBA simplifies the deployment process and provides responsive support, making integration smoother.

Pricing and ROI: ArcSight involves higher setup costs but promises long-term ROI with its analytics capabilities. LogRhythm, with accessible pricing structures, demonstrates quicker ROI, making it a cost-effective solution.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed ArcSight Analytics vs. LogRhythm UEBA Report (Updated: April 2025).
Buyer's Guide
ArcSight Analytics vs. LogRhythm UEBA
April 2025
Download the complete report
Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ArcSight Analytics
Ranking in User Entity Behavior Analytics (UEBA)
13th
Average Rating
7.0
Reviews Sentiment
6.7
Number of Reviews
15
Ranking in other categories
No ranking in other categories
LogRhythm UEBA
Ranking in User Entity Behavior Analytics (UEBA)
11th
Average Rating
7.0
Reviews Sentiment
6.7
Number of Reviews
11
Ranking in other categories
Extended Detection and Response (XDR) (25th)
 

Mindshare comparison

As of May 2025, in the User Entity Behavior Analytics (UEBA) category, the mindshare of ArcSight Analytics is 1.2%, down from 1.7% compared to the previous year. The mindshare of LogRhythm UEBA is 1.9%, down from 3.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Entity Behavior Analytics (UEBA)
 

Featured Reviews

Syed Ubaid Ali Jafri - PeerSpot reviewer
It has improved our system and network policy monitoring
They should improve on the following: * Timely resolution of issues and proper support once a ticket has been generated. * Systems appearing on the network which are not part of the domain controller. These should be monitored. * Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked. * Logger monitoring should be separated from ESM monitoring. * Ability to integrate with cloud-based applications and monitor cloud-based events. * Ability to log and notify tailored rules via SMS/email. * Provide more ArcSight training and workshops.
Read full review
Sheikh Abu Ayub Azad - PeerSpot reviewer
Great at managing cyber incidents; the technical support could be improved
The initial setup is easy, partly because LogRhythm is primarily based on the Windows platform. It's good to have two engineers for deployment but it can be done with one. It's more about the knowledge. Deployment is typically done in two or three different phases. It usually takes up to three full months to get good deployment. There's the initial onboarding of all the log sources, then collecting data in the data lake, followed a couple of weeks later with some minor tuning before the final tuneup.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Less resource consumption in terms of memory and processing."
"One of the most valuable features is the alerts."
"This solution makes it easy to create use cases, and it is easy to move queries from use cases to the report to the dashboard."
"The data collection and the integration with different products are valuable features."
"The most valuable feature is the log monitoring."
"The most valuable features are that you get lots of connectors, which make it easy to log in to my ASM, and lots of prebuilt roles from the company."
"The solution is easy to implement."
"The two most valuable features of this solution are its stability and scalability."
More ArcSight Analytics pros
"It is easy to monitor users and that is how the solution is adding value to our firm."
"Good capability pinpointing specific cyber incidents."
"The solution's most valuable features are the graphical user interface and the reporting."
"I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools."
"I can investigate attacks more quickly using machine learning tools."
"The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location."
"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."
"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."
More LogRhythm UEBA pros
 

Cons

"Currently, there are no compatible connectors for this solution, which means we have to depend on FlexConnectors."
"It needs more user analytics and aggregation user queries. And it's slow. When you query over ArcSight, it is very slow."
"Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked."
"The reporting and the way it is worded needs to be improved in future releases. The dashboards are quite poorly designed."
"Network integration is very crucial, and you need to have the knowledge to get it done."
"There is a GUI, but it is not complete and lacks functionality that needs to be performed using the console."
"ArcSight is not a user-friendly solution and the interface needs to be improved."
"I would like to see integration with automation products, such as Phantom Automation."
More ArcSight Analytics cons
"The product could be user-friendly for someone who doesn’t have any prior experience working with it."
"LogRhythm UEBA's data aggregation needs to be improved. Open-source users do not have much documentation available. Documentation is available only for enterprise users."
"In general, if something needs to be improved in the algorithm, it would be the dashboards."
"It would be helpful if there were more guidance provided for integrating with unsupported devices."
"The search feature needs to be improved."
"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."
"The cloud version is lacking and not up to par."
"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."
More LogRhythm UEBA cons
 

Pricing and Cost Advice

"It can range between $30,000 and $40,000 USD, and can go up to $500,000 and $600,000 USD."
"My customers pay a yearly licensing fee for ArcSight Analytics."
"This solution is expensive."
"ArcSight Analytics is a bit expensive compared with other tools in terms of licensing costs, training, hardware implementation, and support."
"The monthly licensing fee is around $20,000. There aren't any costs in addition to the standard licensing fee."
"In addition to the costs of standard licensing fees, there is the cost of labor for maintenance."
"Licensing is on a yearly basis. It's not expensive compared to its competitors."
"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."
"It is quite a budget-friendly product."
"LogRhythm UEBA's pricing is affordable for small and medium businesses."
"The pricing is nice when compared to other products in the industry."
"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."
report
See which vendors are best for you
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
See recommendations
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
18%
Financial Services Firm
11%
Manufacturing Company
9%
Real Estate/Law Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
See all answers
What do you like most about ArcSight Analytics?
ArcSight Analytics is used to get a deeper insight and threat analysis about the network.
See all answers
What is your experience regarding pricing and costs for ArcSight Analytics?
My customers pay a yearly licensing fee for ArcSight Analytics.
See all answers
What do you like most about LogRhythm UserXDR?
The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance...
See all answers
What is your experience regarding pricing and costs for LogRhythm UserXDR?
I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive.
See all answers
What needs improvement with LogRhythm UserXDR?
In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...
See all answers
 

Comparisons

No data available
Wazuh vs LogRhythm UEBA Logo
Wazuh vs LogRhythm UEBA
Compared 45% of the time
Darktrace vs LogRhythm UEBA Logo
Darktrace vs LogRhythm UEBA
Compared 20% of the time
Cortex XDR by Palo Alto Networks vs LogRhythm UEBA Logo
Cortex XDR by Palo Alto Networks vs LogRhythm UEBA
Compared 10% of the time
Microsoft Purview Insider Risk Management vs LogRhythm UEBA Logo
Microsoft Purview Insider Risk Management vs LogRhythm UEBA
Compared 9% of the time
CrowdStrike Falcon vs LogRhythm UEBA Logo
CrowdStrike Falcon vs LogRhythm UEBA
Compared 6% of the time
More LogRhythm UEBA Competitors
 

Product Reports

Buyer's Guide
ArcSight Analytics
April 2025
ArcSight Analytics reportDownload ArcSight Analytics product report
Buyer's Guide
User Entity Behavior Analytics (UEBA)
April 2025
LogRhythm UEBA reportDownload LogRhythm UEBA product report
 

Also Known As

ArcSight User Behavior Analytics, ArcSight UBA
LogRhythm UserXDR, LogRhythm Enterprise UEBA
 

Overview

ArcSight User Behavior Analytics offers enterprises the ability to monitor and detect from internal and external security threats and fraud.

OpenText

LogRhythm UEBA enables your security team to quickly and effectively detect, respond to, and neutralize both known and unknown threats. Providing evidence-based starting points for investigation, it employs a combination of scenario analytics techniques (e.g., statistical analysis, rate analysis, trend analysis, advanced correlation), and both supervised and unsupervised machine learning (ML).

LogRhythm
Buyer's Guide
ArcSight Analytics vs. LogRhythm UEBA
April 2025
Free Report: ArcSight Analytics vs. LogRhythm UEBA
Find out what your peers are saying about ArcSight Analytics vs. LogRhythm UEBA and other solutions. Updated: April 2025.
DOWNLOAD NOW
850,028 professionals have used our research since 2012.
See our ArcSight Analytics vs. LogRhythm UEBA report.
See our list of best User Entity Behavior Analytics (UEBA) vendors.

We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.