
![Falcon LogScale [EOL] Logo](https://images.peerspot.com/image/upload/c_scale,dpr_3.0,f_auto,q_100,w_64/6kg7xzh8gpk9rcvunqaslh6fr4ae.jpg?_a=BACAGSGT)
ArcSight Logger and Falcon LogScale [EOL] compete in the log management category. Falcon LogScale [EOL] generally has an edge due to its advanced real-time analytics and index-free architecture, which enhance query speed significantly.
Features: ArcSight Logger offers mature real-time correlation, compliance features, and detailed data handling. Its scalability and flexible log collection options stand out. Falcon LogScale [EOL] is known for high-speed querying, real-time threat hunting, and seamless integration capabilities across various logs, backed by its index-free architecture for rapid searches.
Room for Improvement: ArcSight Logger needs improvements in query response times, handling large data volumes, and user interface enhancements. Falcon LogScale [EOL] could improve its complexity, especially in crafting custom queries, its data retention strategies, and performance during heavy log workloads.
Ease of Deployment and Customer Service: ArcSight Logger is complex, requiring dedicated teams for on-premise deployment and often experiences slow technical support. Falcon LogScale [EOL] provides flexible deployment options and more seamless technical support, facilitating adoption in cloud-centric infrastructures.
Pricing and ROI: ArcSight Logger is perceived as expensive with complex pricing, though valued for its compliance and security returns. Falcon LogScale [EOL] is favored for its cost-effective, volume-based pricing structure, which benefits budget-conscious enterprises with its affordability and licensing flexibility.
You save man hours, and man hours convert to business time and money time as well.
Falcon LogScale helps ease this process and sends logs to XDR for further verification.
I have definitely seen ROI with Falcon LogScale so far.
We provide pre-implementation, implementation, and post-implementation support.
I would rate the customer support a 10 on a scale of one to 10.
I raised a customer support request, and in response, they released a new version with a fix for that problem.
The information contained in Falcon LogScale's documentation is very clear.
If there is a critical incident with an associated IP, associated user, endpoints, or whatever factor it is supposed to associate, it associates it by default and makes our life easier, making the SOC life easier.
You could integrate as many endpoints as you want within a fraction of seconds, and it accommodates the number of resources that you integrate with it while maintaining the same response time.
When we add new log sources or suddenly increase our ingestion volume, the performance does not dip.
It uses an index-free architecture, it does not suffer from index corruption or the complications that other legacy tools face.
Falcon LogScale is very strong in real-time log search.
We did not have any problems with Falcon LogScale in terms of stability and reliability.
Splunk does much more than SIEM, including log analysis, user behavior analysis, threat intelligence, and customer behavior analysis.
For the ease of use for Falcon administrators, the same documentation on the Falcon LogScale portal should be on the CrowdStrike dashboard.
KQL is simpler when compared to SQL. However, SQL is faster and quite efficient, but the language is a bit tough.
What they have done now is added what is called Charlotte AI, which is their new AI capabilities that can help with this.
I believe when it comes to log ingestion, it is comparatively low compared to any other services like Microsoft, Trend Micro, or Splunk.
For us, it is a very cost-effective solution.
My experience with pricing, setup cost, and licensing is that it is straightforward, and the cost is quite low.
ArcSight Logger installs on very minimal resources with very few requirements
You can describe what you want to do in English, and it converts it to a query language for you to use.
Traditional SIEM tools index logs, which is slow and expensive. Falcon LogScale stores logs without heavy indexing and searches directly, making it very fast.
Falcon LogScale has positively impacted my organization by providing visibility of the logs, making it easier for us to troubleshoot any issues.

| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 9 |
| Large Enterprise | 17 |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 8 |
| Large Enterprise | 3 |
ArcSight Logger effectively manages vast log data volumes, streamlining complex query execution and data compression while supporting various devices to meet compliance needs.
ArcSight Logger, known for scalability, simplifies handling extensive log data and executes complex queries swiftly. Its data compression features, coupled with versatile device support, allow for smooth security analytics and log collection. Users appreciate its real-time network insights and intuitive interface. However, improvements are needed in indexing speed, user navigation simplification, enhanced system integration, advanced analytics, and comprehensive threat management. Companies leverage ArcSight Logger for on-premises log management, vital for IT asset event monitoring and compliance within telecom and enterprise sectors.
What are the key features?In industries like telecom and enterprise, ArcSight Logger facilitates on-premises deployments to manage logs, process queries, and integrate with security tools, essential for incident response. It aids in retaining logs, monitoring Windows events, overseeing communications, and is employed in fraud prevention and security monitoring involving syslog servers.
Falcon LogScale is a modern log management tool that offers robust features for organizations seeking efficient log analysis. It provides high-speed log ingestion and query capabilities, enabling detailed insights into system performance and security events.
Falcon LogScale provides an efficient way for IT teams to handle massive volumes of log data. Its architecture supports rapid ingestion and real-time querying, making it ideal for security and operational analytics. With customizable search capabilities, it allows deep analysis to detect anomalies and troubleshoot issues effectively. Users appreciate its scalability and performance-driven approach, making it suitable for large infrastructures.
What are the most important features of Falcon LogScale?
What benefits or ROI should be anticipated?
Falcon LogScale is particularly beneficial in industries requiring detailed compliance reporting and real-time threat detection, such as finance and healthcare. It's implemented to support security operations and incident response teams by providing timely insights and operational efficiencies.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.