Try our new research platform with insights from 80,000+ expert users

ArcSight Logger vs Elastic Observability comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
1.0
ArcSight Logger is valued for ease of use, aiding fraud investigation, and seen as cost-effective despite licensing costs.
Sentiment score
6.5
Elastic Observability enhances cost-effectiveness by reducing incidents, automating fixes, and visualizing cloud operations, saving time and resources.
Elastic Observability has saved us time as it's much easier to find relevant pieces across the system in one screen compared to our own software, and it has saved resources too since the same resources can use less time.
Technology Consultant at Hybrid software
 

Customer Service

Sentiment score
5.8
ArcSight Logger support is generally helpful, but technical assistance quality varies, with community reliance and time zone issues noted.
Sentiment score
7.6
Elastic Observability customers appreciate their helpful support, quick responses, and valuable documentation, despite some challenges in complex issue resolution.
We provide pre-implementation, implementation, and post-implementation support.
Sr. Cybersecurity Consultant IT/OT at EJADA
Elastic support really struggles in complex situations to resolve issues.
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
Their excellent documentation typically helps me solve any issues I encounter.
Technology Consultant at Hybrid software
 

Scalability Issues

Sentiment score
6.2
ArcSight Logger offers scalable solutions for enterprises, though smaller setups may face performance and storage issues at high loads.
Sentiment score
7.2
Elastic Observability is praised for scalability and ease of deployment, despite potential complexities and internal process limitations.
I rate the scalability of Elastic Observability as a ten, as we have never seen issues even with a lot of data coming in from more customers, provided we have the appropriate configuration.
Technology Consultant at Hybrid software
Elastic Observability seems to have a good scale-out capability.
Chief Cloud Architect at a tech services company with 11-50 employees
Elastic Observability is easy in deployment in general for small scale, but when you deploy it at a really large scale, the complexity comes with the customizations.
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
 

Stability Issues

Sentiment score
8.4
ArcSight Logger is mostly stable and reliable but experiences occasional disruptions during DDoS attacks and major upgrades.
Sentiment score
8.2
Elastic Observability is stable and reliable, with high user ratings, efficiently handling large data volumes with proper configuration.
There are some bugs that come with each release, but they are keen always to build major versions and minor versions on time, including the CVE vulnerabilities to fix it.
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
It is very stable, and I would rate it ten out of ten based on my interaction with it.
Product Owner at Swisscom
I would rate the stability of Elastic Observability as a ten, as we don't experience any issues.
Technology Consultant at Hybrid software
 

Room For Improvement

ArcSight Logger requires UI improvements, more connectors, enhanced analytics, better integration, indexing, scalability, and cost efficiency.
Elastic Observability needs automation, AI, and customization improvements, addressing complex deployment, market presence, metrics, licensing, and usability issues.
Splunk does much more than SIEM, including log analysis, user behavior analysis, threat intelligence, and customer behavior analysis.
Sr. Cybersecurity Consultant IT/OT at EJADA
For instance, if you have many error logs and want to create a rule with a custom query, such as triggering an alert for five errors in the last hour, all you need to do is open the AI bot, type this question, and it generates an Elastic query for you to use in your alert rules.
Senior Consultant at Skillfield
It lacked some capabilities when handling on-prem devices, like network observability, package flow analysis, and device performance data on the infrastructure side.
Senior Technical Sales at a tech vendor with 1,001-5,000 employees
Some areas such as AI Ops still require data scientists to understand machine learning and AI, and it doesn't have a quick win with no-brainer use cases.
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
 

Setup Cost

ArcSight Logger is costly and complex, yet valued for capabilities and scalability despite competitive pricing and setup challenges.
Elastic Observability provides competitive pricing, benefiting large enterprises with comprehensive licensing, but may be costly for smaller users.
The license is reasonably priced, however, the VMs where we host the solution are extremely expensive, making the overall cost in the public cloud high.
Product Owner at Swisscom
Elastic Observability is cost-efficient and provides all features in the enterprise license without asset-based licensing.
Chief Cloud Architect at a tech services company with 11-50 employees
Observability is actually cheaper compared to logs because you're not indexing huge blobs of text and trying to parse those.
Senior Consultant at Skillfield
 

Valuable Features

ArcSight Logger excels in scalability, performance, integration, and ease of use, providing powerful search and compliance features.
Elastic Observability excels with flexible integration, powerful search, scalability, real-time insights, affordability, and robust support, enhancing efficiency.
ArcSight Logger installs on very minimal resources with very few requirements
Sr. Cybersecurity Consultant IT/OT at EJADA
The most valuable feature is the integrated platform that allows customers to start from observability and expand into other areas like security, EDR solutions, etc.
Chief Cloud Architect at a tech services company with 11-50 employees
the most valued feature of Elastic is its log analytics capabilities.
Senior Technical Sales at a tech vendor with 1,001-5,000 employees
All the features that we use, such as monitoring, dashboarding, reporting, the possibility of alerting, and the way we index the data, are important.
Product Owner at Swisscom
 

Categories and Ranking

ArcSight Logger
Ranking in Log Management
45th
Average Rating
7.6
Reviews Sentiment
5.8
Number of Reviews
32
Ranking in other categories
No ranking in other categories
Elastic Observability
Ranking in Log Management
14th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
29
Ranking in other categories
Application Performance Monitoring (APM) and Observability (6th), IT Infrastructure Monitoring (9th), Container Monitoring (4th), Cloud Monitoring Software (7th)
 

Mindshare comparison

As of January 2026, in the Log Management category, the mindshare of ArcSight Logger is 0.9%, up from 0.8% compared to the previous year. The mindshare of Elastic Observability is 1.2%, down from 1.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Market Share Distribution
ProductMarket Share (%)
Elastic Observability1.2%
ArcSight Logger0.9%
Other97.9%
Log Management
 

Featured Reviews

MA
Sr. Cybersecurity Consultant IT/OT at EJADA
Compliance and cost-effectiveness have improved while critical infrastructure security adapts to evolving needs
ArcSight Logger fulfills compliance requirements and passes audit requirements. It is one of the Aramco standards requirements and is recommended by Aramco for any implementation. Aramco, SABIC, water companies, and electricity companies are critical infrastructure with air-gapped networks. In an air-gapped network, there is no communication going out from that network area to the outside world, even to the corporate network. ArcSight Logger is installed on minimal resources with minimal requirements. There are not many upgrades or new features that come up frequently, though they do occur occasionally.
Mohammed-Abdelalim - PeerSpot reviewer
Assistant Vice President at QualityKiosk Technologies Pvt. Ltd.
Has provided powerful customization for unique monitoring needs but needs more out-of-the-box capabilities
In my opinion, the best features of Elastic Observability are their flexibility to integrate with other existing systems and the ability to build a unified monitoring tool that can integrate with existing ones and end-to-end user journeys which require a lot of customizations. The greatest feature in Elastic is the ability to customize. This is similar to my comments about customizable dashboards in Elastic because it's visible to the analyst. However, it's very great. Customizing these dashboards can meet the customer's specific use cases and specific stories that they have in their environment, their special environment that doesn't look like other environments. The dashboarding in Elastic is highly customizable to the level of logos. If the customer wants his company logo in the dashboard, it can be done.
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
9%
Manufacturing Company
7%
Healthcare Company
6%
Financial Services Firm
16%
Computer Software Company
14%
Manufacturing Company
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise10
Large Enterprise16
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise16
 

Questions from the Community

What do you like most about ArcSight Logger?
We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.
What is your experience regarding pricing and costs for ArcSight Logger?
The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.
What needs improvement with ArcSight Logger?
This decision is made by higher management as they don't want to have multiple solutions for one solution. ArcSight Logger themselves don't provide good support, but companies such as ours provide ...
What do you like most about Elastic Observability?
Elastic Observability significantly improves incident response time by providing quick access to logs and data across various sources. For instance, searching for specific keywords in logs spanning...
What is your experience regarding pricing and costs for Elastic Observability?
The problem is their licensing model, which is a bit confusing. Many customers struggle to understand their total cost of ownership because Elastic licensing is not dependent on easy, quantifiable ...
What needs improvement with Elastic Observability?
After careful consideration about areas for improvement in Elastic Observability, aspects such as pricing, customization, implementation, and scalability could be improved. As a user of the system,...
 

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger
No data available
 

Overview

 

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa
PSCU, Entel, VITAS, Mimecast, Barrett Steel, Butterfield Bank
Find out what your peers are saying about ArcSight Logger vs. Elastic Observability and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.