No more typing reviews! Try our Samantha, our new voice AI agent.

ArcSight Logger vs Devo comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
1.0
ArcSight Logger is valued for ease of use, aiding fraud investigation, and seen as cost-effective despite licensing costs.
Sentiment score
6.2
Devo provided improved ROI through cost savings and efficiency, despite some concerns over costs and support challenges.
Devo gives value to the end user and is saving compared to other products in the same category.
Principal Consultant at Syntx Sdn Bhd
In terms of return on investment with Devo, I'd say it has been costly due to the need for support and the overtime required for issues experienced at the beginning of the project.
Senior Consultant and Technical Lead at a financial services firm with 10,001+ employees
We achieve early identification of security incidents that could potentially breach the customer environment, which would have been costly.
Principal Technology Architect at a tech vendor with 10,001+ employees
 

Customer Service

Sentiment score
5.8
ArcSight Logger support is generally helpful, but technical assistance quality varies, with community reliance and time zone issues noted.
Sentiment score
6.2
Customer service is responsive and proactive, but needs improvement in onboarding, documentation, and regional service consistency.
We provide pre-implementation, implementation, and post-implementation support.
Sr. Cybersecurity Consultant IT/OT at EJADA
I rate the customer support a nine out of ten because of their timely technical guidance and responsiveness during the deployment and troubleshooting periods.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
Both response time and support quality need attention.
Team Lead Soc at a tech services company with 51-200 employees
Technical support from Devo is helpful.
Principal Consultant at Syntx Sdn Bhd
 

Scalability Issues

Sentiment score
6.2
ArcSight Logger offers scalable solutions for enterprises, though smaller setups may face performance and storage issues at high loads.
Sentiment score
6.9
Praised for scalability, Devo efficiently manages large logs, easily expands use, but multi-tenancy features need development.
Devo is a unified SIEM solution designed to handle growing log volumes and enterprise-scale monitoring requirements.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
Devo's scalability has its challenges.
Senior Consultant and Technical Lead at a financial services firm with 10,001+ employees
Regarding Devo's scalability, its horizontal scalability is quite good with no significant hassle.
Principal Technology Architect at a tech vendor with 10,001+ employees
 

Stability Issues

Sentiment score
8.4
ArcSight Logger is mostly stable and reliable but experiences occasional disruptions during DDoS attacks and major upgrades.
Sentiment score
7.5
Devo offers reliable performance with minimal outages, praised for proactive alerts and quick incident resolution, ensuring business continuity.
It is stable and reliable for our security operations.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
 

Room For Improvement

ArcSight Logger requires UI improvements, more connectors, enhanced analytics, better integration, indexing, scalability, and cost efficiency.
Devo needs enhancements in support, performance, AI, customization, and documentation, focusing on data management and UI configuration.
Splunk does much more than SIEM, including log analysis, user behavior analysis, threat intelligence, and customer behavior analysis.
Sr. Cybersecurity Consultant IT/OT at EJADA
It's hard for us to keep pace since our original use case was 250 to 500 megabytes a day, and then it became two terabytes a day.
Senior Consultant and Technical Lead at a financial services firm with 10,001+ employees
Integrating custom parsing and mapping for non-standard logs is essential due to compatibility challenges with various technologies.
Principal Technology Architect at a tech vendor with 10,001+ employees
This is particularly evident when dealing with failed login attempts and determining true versus false positives.
Strategic Account Executive at a computer software company with 51-200 employees
 

Setup Cost

ArcSight Logger is costly and complex, yet valued for capabilities and scalability despite competitive pricing and setup challenges.
Devo offers competitive, simple data ingestion-based pricing with extensive features and flexibility, despite some limitations in tier options.
The pricing could be simpler, and while the initial setup cost for a new instance is a bit expensive, the licensing can currently be user-based or driven by log volume, which is better if there is expansion of our user base.
Principal Technology Architect at a tech vendor with 10,001+ employees
The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps.
Team Lead Soc at a tech services company with 51-200 employees
 

Valuable Features

ArcSight Logger excels in scalability, performance, integration, and ease of use, providing powerful search and compliance features.
Devo excels in real-time analytics, large data handling, customization, and third-party integration, enhancing security operations with advanced features.
ArcSight Logger installs on very minimal resources with very few requirements
Sr. Cybersecurity Consultant IT/OT at EJADA
When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
Strategic Account Executive at a computer software company with 51-200 employees
When the analyst uses queries to search, it pulls the data quickly, in a second, which aids us greatly with the investigation.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
It utilizes 400 days of hot data, allowing queries to run very fast and yield results quicker than other tools in terms of security and SIEM capability.
Senior Cloud Engineer at a tech services company with 201-500 employees
 

Categories and Ranking

ArcSight Logger
Ranking in Log Management
32nd
Average Rating
7.6
Reviews Sentiment
5.8
Number of Reviews
32
Ranking in other categories
No ranking in other categories
Devo
Ranking in Log Management
21st
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
30
Ranking in other categories
Security Information and Event Management (SIEM) (16th), IT Operations Analytics (7th), AIOps (17th)
 

Mindshare comparison

As of November 2026, in the Log Management category, the mindshare of ArcSight Logger is 1.0%, up from 0.8% compared to the previous year. The mindshare of Devo is 1.4%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
Devo1.4%
ArcSight Logger1.0%
Other97.6%
Log Management
 

Featured Reviews

MA
Sr. Cybersecurity Consultant IT/OT at EJADA
Compliance and cost-effectiveness have improved while critical infrastructure security adapts to evolving needs
ArcSight Logger fulfills compliance requirements and passes audit requirements. It is one of the Aramco standards requirements and is recommended by Aramco for any implementation. Aramco, SABIC, water companies, and electricity companies are critical infrastructure with air-gapped networks. In an air-gapped network, there is no communication going out from that network area to the outside world, even to the corporate network. ArcSight Logger is installed on minimal resources with minimal requirements. There are not many upgrades or new features that come up frequently, though they do occur occasionally.
Usama Khan - PeerSpot reviewer
Team Lead Soc at a tech services company with 51-200 employees
Advanced threat hunting has improved SOC visibility and now supports faster incident response
Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
15%
Construction Company
9%
Comms Service Provider
8%
Healthcare Company
8%
Financial Services Firm
16%
Outsourcing Company
11%
Construction Company
10%
Manufacturing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise9
Large Enterprise17
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise6
Large Enterprise15
 

Questions from the Community

What needs improvement with ArcSight Logger?
This decision is made by higher management as they don't want to have multiple solutions for one solution. ArcSight Logger themselves don't provide good support, but companies such as ours provide ...
What is your primary use case for ArcSight Logger?
We do work for multiple SIEM solutions such as Splunk, QRadar, LogRhythm. My team and I mostly work on ArcSight Logger and Splunk because we are dealing with projects related to these solutions. We...
What advice do you have for others considering ArcSight Logger?
As a department head, my staff uses my credentials and contacts everywhere. Only ArcSight Logger with Splunk was implemented in Aramco, not in other organizations. I rate ArcSight Logger 8 out of 10.
What needs improvement with Devo?
In terms of improvements, I think Devo falls short with their support model, as they rely mainly on their support team in Spain. Although they do have a support team in North America, they lack kno...
What is your primary use case for Devo?
Devo is the bank's centralized log management platform that my team and I rely on the most. For centralized log management in our day-to-day work, one of the biggest data users would be our Red Hat...
 

Comparisons

 

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger
No data available
 

Overview

 

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa
United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel
Find out what your peers are saying about ArcSight Logger vs. Devo and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.