Try our new research platform with insights from 80,000+ expert users

ArcSight Logger vs Devo comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
1.0
ArcSight Logger is valued for ease of use, aiding fraud investigation, and seen as cost-effective despite licensing costs.
Sentiment score
7.7
Devo enhances root cause remediation by 50%, offering cost savings, scalability, fast cloud deployment, and diverse client flexibility.
 

Customer Service

Sentiment score
5.8
ArcSight Logger support is generally helpful, but technical assistance quality varies, with community reliance and time zone issues noted.
Sentiment score
7.0
Devo's customer service is responsive and efficient, but improvements are needed in documentation and onboarding support.
We provide pre-implementation, implementation, and post-implementation support.
Sr. Cybersecurity Consultant IT/OT at EJADA
 

Scalability Issues

Sentiment score
6.2
ArcSight Logger offers scalable solutions for enterprises, though smaller setups may face performance and storage issues at high loads.
Sentiment score
7.6
Devo's cloud-based structure ensures seamless scalability, supporting diverse roles and extensive deployments for effective data handling and monitoring.
 

Stability Issues

Sentiment score
8.4
ArcSight Logger is mostly stable and reliable but experiences occasional disruptions during DDoS attacks and major upgrades.
Sentiment score
7.3
Devo is highly stable and reliable, with minimal issues and efficient management, evolving positively as a cloud-native service.
 

Room For Improvement

ArcSight Logger requires UI improvements, more connectors, enhanced analytics, better integration, indexing, scalability, and cost efficiency.
Devo faces performance, customization, integration, and pricing challenges, needing improvements in AI, reporting, and dashboard capabilities.
Splunk does much more than SIEM, including log analysis, user behavior analysis, threat intelligence, and customer behavior analysis.
Sr. Cybersecurity Consultant IT/OT at EJADA
This is particularly evident when dealing with failed login attempts and determining true versus false positives.
Strategic Account Executive at a computer software company with 51-200 employees
 

Setup Cost

ArcSight Logger is costly and complex, yet valued for capabilities and scalability despite competitive pricing and setup challenges.
Devo offers competitive pricing with flexible licensing, though metadata costs and subscription models may affect overall expenses.
 

Valuable Features

ArcSight Logger excels in scalability, performance, integration, and ease of use, providing powerful search and compliance features.
Devo's Activeboards offer intuitive, fast data visualization with high-speed queries, real-time analytics, and seamless integration for effective insights.
ArcSight Logger installs on very minimal resources with very few requirements
Sr. Cybersecurity Consultant IT/OT at EJADA
When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
Strategic Account Executive at a computer software company with 51-200 employees
 

Categories and Ranking

ArcSight Logger
Ranking in Log Management
29th
Average Rating
7.6
Reviews Sentiment
5.8
Number of Reviews
32
Ranking in other categories
No ranking in other categories
Devo
Ranking in Log Management
28th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
23
Ranking in other categories
Security Information and Event Management (SIEM) (23rd), IT Operations Analytics (9th), AIOps (20th)
 

Mindshare comparison

As of December 2025, in the Log Management category, the mindshare of ArcSight Logger is 0.8%, down from 0.8% compared to the previous year. The mindshare of Devo is 0.7%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Market Share Distribution
ProductMarket Share (%)
Devo0.7%
ArcSight Logger0.8%
Other98.5%
Log Management
 

Featured Reviews

MA
Sr. Cybersecurity Consultant IT/OT at EJADA
Compliance and cost-effectiveness have improved while critical infrastructure security adapts to evolving needs
ArcSight Logger fulfills compliance requirements and passes audit requirements. It is one of the Aramco standards requirements and is recommended by Aramco for any implementation. Aramco, SABIC, water companies, and electricity companies are critical infrastructure with air-gapped networks. In an air-gapped network, there is no communication going out from that network area to the outside world, even to the corporate network. ArcSight Logger is installed on minimal resources with minimal requirements. There are not many upgrades or new features that come up frequently, though they do occur occasionally.
FR
Strategic Account Executive at a computer software company with 51-200 employees
Has improved investigative workflows with interactive dashboards and simplified data correlation
The data analytics cloud component focuses on real-time analytics, which is very impressive. The SIEM collects and correlates logs data from different sources and can integrate with ServiceNow, hardware asset management, and software asset management. The security orchestration, automation, and response (SOAR) is another valuable feature. The security data platform serves as the foundation of Devo. Regarding advanced query capabilities, Devo offers several models including query logs, visual query builder, language integrated query, and SQL, with SQL being the most frequently used querying data capability. The single pane of glass that Devo offers is the SOC. The tools in Devo's active ports are for investigating, not just viewing data. They are more interactive than other market solutions. The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins. This is particularly important for enterprise companies with numerous endpoints and users. The dynamic filtering of inputs significantly reduces the time cybersecurity analysts spend trying to figure out failed logins and identifying false positives.
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
10%
Manufacturing Company
7%
Healthcare Company
6%
Financial Services Firm
15%
Computer Software Company
10%
University
8%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise10
Large Enterprise16
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise11
 

Questions from the Community

What do you like most about ArcSight Logger?
We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.
What is your experience regarding pricing and costs for ArcSight Logger?
The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.
What needs improvement with ArcSight Logger?
This decision is made by higher management as they don't want to have multiple solutions for one solution. ArcSight Logger themselves don't provide good support, but companies such as ours provide ...
What is your experience regarding pricing and costs for Devo?
Compared to Splunk or SentinelOne, it is really expensive. I rate the product’s pricing a nine out of ten, where one is cheap and ten is expensive.
What needs improvement with Devo?
The single pane of glass that Devo offers could be improved. The tools in Devo's active ports need enhancement in their investigative capabilities. The drill-down reports capabilities, while useful...
What is your primary use case for Devo?
During my time at MetaBase Q and as a partner integrator of ServiceNow, I had the chance to understand and be part of projects integrating SOCs, NOCs, and Security Operation Centers with Devo. Most...
 

Comparisons

 

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger
No data available
 

Overview

 

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa
United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel
Find out what your peers are saying about ArcSight Logger vs. Devo and other solutions. Updated: December 2025.
879,259 professionals have used our research since 2012.