

ArcSight Logger and Falcon LogScale compete in log management solutions. Falcon LogScale appears to have the upper hand due to its advanced features and user satisfaction.
Features: ArcSight Logger provides comprehensive integration capabilities, extensive compliance reporting, and robust log data analysis. Falcon LogScale offers real-time data insights, a user-friendly search mechanism, and innovative threat detection.
Room for Improvement: ArcSight Logger users suggest enhancements in navigation, customization, and configuration ease. Falcon LogScale users want improvements in reporting functions, scalability, and customer service responsiveness.
Ease of Deployment and Customer Service: ArcSight Logger is known for smooth deployment but faces some configuration challenges; however, its customer service is strong. Falcon LogScale has a straightforward setup with mixed reviews on customer service responsiveness.
Pricing and ROI: ArcSight Logger is noted for lower setup costs and commendable ROI. Falcon LogScale, while more expensive upfront, offers superior long-term value due to its advanced features.
You save man hours, and man hours convert to business time and money time as well.
Falcon LogScale helps ease this process and sends logs to XDR for further verification.
I have definitely seen ROI with Falcon LogScale so far.
We provide pre-implementation, implementation, and post-implementation support.
I would rate the customer support a 10 on a scale of one to 10.
I raised a customer support request, and in response, they released a new version with a fix for that problem.
The information contained in Falcon LogScale's documentation is very clear.
If there is a critical incident with an associated IP, associated user, endpoints, or whatever factor it is supposed to associate, it associates it by default and makes our life easier, making the SOC life easier.
You could integrate as many endpoints as you want within a fraction of seconds, and it accommodates the number of resources that you integrate with it while maintaining the same response time.
When we add new log sources or suddenly increase our ingestion volume, the performance does not dip.
It uses an index-free architecture, it does not suffer from index corruption or the complications that other legacy tools face.
Falcon LogScale is very strong in real-time log search.
We did not have any problems with Falcon LogScale in terms of stability and reliability.
Splunk does much more than SIEM, including log analysis, user behavior analysis, threat intelligence, and customer behavior analysis.
For the ease of use for Falcon administrators, the same documentation on the Falcon LogScale portal should be on the CrowdStrike dashboard.
KQL is simpler when compared to SQL. However, SQL is faster and quite efficient, but the language is a bit tough.
What they have done now is added what is called Charlotte AI, which is their new AI capabilities that can help with this.
I believe when it comes to log ingestion, it is comparatively low compared to any other services like Microsoft, Trend Micro, or Splunk.
For us, it is a very cost-effective solution.
My experience with pricing, setup cost, and licensing is that it is straightforward, and the cost is quite low.
ArcSight Logger installs on very minimal resources with very few requirements
You can describe what you want to do in English, and it converts it to a query language for you to use.
Traditional SIEM tools index logs, which is slow and expensive. Falcon LogScale stores logs without heavy indexing and searches directly, making it very fast.
Falcon LogScale has positively impacted my organization by providing visibility of the logs, making it easier for us to troubleshoot any issues.
| Product | Mindshare (%) |
|---|---|
| Falcon LogScale | 0.9% |
| ArcSight Logger | 0.9% |
| Other | 98.2% |

| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 9 |
| Large Enterprise | 17 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 9 |
| Large Enterprise | 3 |
ArcSight Logger effectively manages vast log data volumes, streamlining complex query execution and data compression while supporting various devices to meet compliance needs.
ArcSight Logger, known for scalability, simplifies handling extensive log data and executes complex queries swiftly. Its data compression features, coupled with versatile device support, allow for smooth security analytics and log collection. Users appreciate its real-time network insights and intuitive interface. However, improvements are needed in indexing speed, user navigation simplification, enhanced system integration, advanced analytics, and comprehensive threat management. Companies leverage ArcSight Logger for on-premises log management, vital for IT asset event monitoring and compliance within telecom and enterprise sectors.
What are the key features?In industries like telecom and enterprise, ArcSight Logger facilitates on-premises deployments to manage logs, process queries, and integrate with security tools, essential for incident response. It aids in retaining logs, monitoring Windows events, overseeing communications, and is employed in fraud prevention and security monitoring involving syslog servers.
Falcon LogScale is a modern log management tool that offers robust features for organizations seeking efficient log analysis. It provides high-speed log ingestion and query capabilities, enabling detailed insights into system performance and security events.
Falcon LogScale provides an efficient way for IT teams to handle massive volumes of log data. Its architecture supports rapid ingestion and real-time querying, making it ideal for security and operational analytics. With customizable search capabilities, it allows deep analysis to detect anomalies and troubleshoot issues effectively. Users appreciate its scalability and performance-driven approach, making it suitable for large infrastructures.
What are the most important features of Falcon LogScale?
What benefits or ROI should be anticipated?
Falcon LogScale is particularly beneficial in industries requiring detailed compliance reporting and real-time threat detection, such as finance and healthcare. It's implemented to support security operations and incident response teams by providing timely insights and operational efficiencies.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.