ArcSight Logger vs Change Auditor for Windows File Servers comparison

ArcSight Logger vs. Change Auditor for Windows File Servers

Download the complete report

Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Logger

Ranking in Log Management

31st

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Change Auditor for Windows ...

Ranking in Log Management

37th

Average Rating

9.0

Reviews Sentiment

7.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of May 2025, in the Log Management category, the mindshare of ArcSight Logger is 0.8%, down from 1.1% compared to the previous year. The mindshare of Change Auditor for Windows File Servers is 0.1%, down from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Geraldo Freitas

Analista de TI - suporte a redes e segurança at Tribunal de Contas da União

Enhances our security incident investigation but not good for correlation

Investigation is good when you know what you want to search for in Logger. The most difficult part is parsing the logs and configuring the parsers. For investigation, it's good. For correlation, it's not good. We use Sentinel, and Sentinel has pre-built use cases that are much easier to configure. So, it enhances our security incident investigation. We have inbound integration, but configuring the parsers is sometimes very difficult. We only have two use cases where we have a correlation set up. We send the information to Check Point to block IP addresses when we see a lot of blocks from the same source. We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist. So, it offers the ease of integration.

Read full review

Krisarlex Foronda

Senior Operations Manager at Procter & Gamble

Provides granular queries of security logs and real-time alerting helps me mitigate risks

The real-time alerting helps me mitigate risks. For example, someone adds a member to the domain admin group. We have an alert set up, so if someone does this unexpectedly, we get notified. Then, we can check and verify if the action is legitimate or a potential threat to the environment.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The log digestion features from threat intelligence platforms like Recorded Future or Talos are valuable."

"It's an efficient solution."

"ArcSight provides the basic information that we want."

"The most valuable feature is the level of detail that you can see about certain events, even when they do not come up in the console."

"The ability to customize the solution in great detail is its most valuable features. We can customize the use cases and also have the ability to do scripting. We can personalize our dashboard as well. The scalability the solution offers is quite impressive."

"It's a brilliant log collection tool, and it can handle hundreds of thousands of servers in a single shot to ingest the data."

"Our return on investment for implementing ArcSight Logger over the past 12 months has been positive."

"We haven't had any crashes or bugs. It is stable."

More ArcSight Logger pros

"The solution's most valuable aspect is that it can be fully integrated with Microsoft solutions and it doesn't impact the productivity order."

"In terms of features, the querying is great."

Cons

"You have limited reporting capabilities and I wouldn't choose ArcSight Logger for this purpose."

"I would rate the technical support only 5 out of 10. The technical support is not satisfactory."

"I had some latency issues for two months. I had to increase our storage capacity significantly to reduce the latency."

"The initial setup was a little bit complex."

"It would be better if the product is cheaper."

"It is really difficult to work in ArcSight Logger, as it is very slow."

"We find that the search and access functionality is quite slow."

"The solution should make it possible to integrate network analysis features."

More ArcSight Logger cons

"The customer service and support could improve their approach to questioning issues. They tend to ask questions one at a time, which creates a lot of back-and-forth communication."

"The pricing could be improved. It needs to be reduced."

Pricing and Cost Advice

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"The pricing is quite harsh."

"ArcSight is an expensive solution."

"We have a lifetime license, so we don't pay a monthly fee."

"I would rate the product a seven out of ten since it's an enterprise product."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"The pricing is per user. The cost is approximately $15/user on a yearly basis. If you need to, you can always upgrade as well."

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

850,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

19%

Computer Software Company

17%

Government

Educational Organization

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

What needs improvement with ArcSight Logger?

The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...

What do you like most about Change Auditor for Windows File Servers?

In terms of features, the querying is great.

What needs improvement with Change Auditor for Windows File Servers?

They've already made improvements! They have a tool called IT Security Search, which lets you perform queries outside of Change Auditor. It's much faster. This is a really good addition and helps u...

What is your primary use case for Change Auditor for Windows File Servers?

I use Change Auditor for Windows File Servers to log history. It's helpful when we have critical changes in Active Directory, like adding or removing items. I use it extensively for monitoring.

Splunk Enterprise Security vs ArcSight Logger

Comparisons

Compared 37% of the time

IBM Security QRadar vs ArcSight Logger

Compared 35% of the time

Elastic Security vs ArcSight Logger

Compared 8% of the time

Wazuh vs ArcSight Logger

Compared 8% of the time

Grafana Loki vs ArcSight Logger

Compared 5% of the time

More ArcSight Logger Competitors

Splunk Enterprise Security vs Change Auditor for Windows File Servers

Compared 100% of the time

More Change Auditor for Windows File Servers Competitors

Product Reports

ArcSight Logger

Download ArcSight Logger product report

Log Management

Download Change Auditor for Windows File Servers product report

Change Auditor for Windows File Servers report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

No data available

Overview

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

OpenText

Change Auditor for Windows File Servers helps you control and audit changes to Microsoft Windows file servers efficiently and cost-effectively. It proactively tracks, audits, reports and alerts on vital changes in real time and without the overhead of native auditing.

You will instantly know the “who, what, when, where and originating workstation” details, and get the original and current values for fast troubleshooting. You can then automatically generate intelligent, in-depth forensics for auditors and management, reducing the risks associated with day-to-day modifications and ensuring confidence at your next audit.

Quest Software

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

Dragon Capital, Howard County MD

ArcSight Logger vs. Change Auditor for Windows File Servers