ArcSight Logger vs IBM SevOne Network Performance Management (NPM) comparison

ArcSight Logger vs. IBM SevOne Network Performance Management (NPM)

Download the complete report

Helped 859,129 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Logger

Ranking in Log Management

24th

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

IBM SevOne Network Performa...

Ranking in Log Management

48th

Average Rating

8.4

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Network Monitoring Software (45th), Server Monitoring (19th), IT Infrastructure Monitoring (44th), Cloud Monitoring Software (30th)

Mindshare comparison

As of June 2025, in the Log Management category, the mindshare of ArcSight Logger is 0.8%, down from 1.1% compared to the previous year. The mindshare of IBM SevOne Network Performance Management (NPM) is 0.4%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Nagendra Nekkala.

Senior Manager ICT & at Bangalore International Airport Limited

A scalable and stable solution that enables users to see all the event logs in one place

The technical support team is very slow. The support persons do not take prompt action. They take too much time to implement new changes. Even if we tell them that we are not able to get critical logs, they take almost three to four days to provide a resolution. The support is not good.

Read full review

Grzegorz Nowak

Solution Architect at Wingu

Improves infrastructure planning by helping us analyze network traffic

We use SevOne to collect and report on network flows SevOne improves infrastructure planning by helping us analyze network traffic. We can look at bandwidth for specific endpoints on the customer's network and analyze traffic to identify issues. For example, maybe some connectors are unavailable.…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I am impressed with the product's ability to pick up logs. It also has UEBA which has reduced the time to take charge of the events."

"In terms of ArcSight Logger's most valuable feature, it is their scalability. ArcSight's real advantage is its scalability because they have two layers, including the logger layer."

"In our country we are a little bit private in terms of solutions, so we are just starting to use the basic data capture. Now some users can start to use additional features that come with Micro Focus ArcSight like user behavior analytics for investigating."

"Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."

"ArcSight's robustness is its most valuable feature."

"The technical support team is good...It is a scalable solution."

"The most valuable feature is the search capability, which is simple to use."

"It provides in-depth information on business activities once we log into the system."

More ArcSight Logger pros

"The comprehensiveness of this solution's collection of network performance and flow data is one of the basics in the field for what it does. It meets all of our needs. So for all those areas, for the most straightforward collection capabilities, right up to NetFlow and even telemetry, it meets all those demands. Not only just basic or fundamental SNMP collection capability, but the product also supports what we need for the future with telemetry streaming. So it's very comprehensive."

"It also gives us the closest thing to real-time insight into network performance that we have, with just a 10-second delay. It's very important for us to know the health of the infrastructure very quickly."

"One of the most valuable features is the graphs, which you can build instantly. I have used some open-source platforms in the past, but they are not as good. With SevOne, the sampling in the graph can be every few seconds, not just every few minutes, and that's really helpful. It's really fast."

"The modules and the performance management reports that come with data insights are two of the most valuable features. I also find the reports for Wi-Fi, Netflow, LAN, and WAN for monitoring to be very good."

"The network data collection has been very flexible for us. It's been thorough in areas that were lacking. They have a team that I've worked with to add other pieces to it. So if it's missing something out of the box, they work with me to add it. I was able to collect that data. It's not perfect, but it's pretty thorough."

"With this tool it is interesting to show the info to the client and explain where the traffic is."

"Data Insight reporting tool is the most valuable feature. They came up with it a couple of years ago. The most pleasing factor is the dark theme. You don't have a white background. It has templates that you can create for all kinds of reports that you can hit on the fly. It's much better printing of the reports. If you want to send PDFs to people, the reports are actually decent. Whereas for years, the old architecture of the PDFs was rubbish and even our customers said, "We have to manipulate your PDFs because they all have bad margin breaks. SevOne fixed that a couple of years ago with the new Data Insight. It's fantastic."

"It's a great solution for highlighting and discovering useful information regarding our network's elements."

More IBM SevOne Network Performance Management (NPM) pros

Cons

"I would rate the technical support only 5 out of 10. The technical support is not satisfactory."

"We find that the search and access functionality is quite slow."

"ArcSight has been sold two or three times, and the quality has decreased."

"In the next release, I want to see more intelligence."

"The initial setup was a little bit complex."

"I think the ArcSight team should try to simplify legacy products for the customers, because that product is not easy to use or to work with. It needs more more competency or appeal to use. We hope Micro Focus is trying to resolve this."

"The speed of Logger indexing and searching for certain bugs for some queries that we provide could be improved. It can handle a huge number of logs but it can be improved."

"The next release should have AI capabilities."

More ArcSight Logger cons

"The tool needs improvement in non-Cisco SD-WAN."

"The method of searching for SIP and the way to create the groups."

"There is no service mode setup in this monitoring tool if you want to snooze alerts for any specific amount of time, to account for any activity change or major incident."

"Software upgrades can be tricky is not easy."

"In terms of having a complete view of our network performance, I would rate it a nine out of 10. The reason for not giving it a 10 is that there is no packet capture associated with SevOne, but we do have other tools in place to do that."

"Their virtualization solution is not compatible with our Kubernetes environment, which is one of the reasons we are ending our relationship with them."

"The one area with room for improvement is probably administration. They added data insights to make a better user experience, but I'd like to see some improvements in the way the system's administered."

"With the administrative management of the appliance, if some object appears from SevOne because something changed in the network or whatever, then as an administrator you will not be aware. If you are using this object in a report, this object will disappear from the report and you will not be aware of it. So, if you have 1,000 reports, you cannot always check these reports everyday to see if objects are missing or information has disappeared. We don't have any information on alerts, saying that something is happening there and maybe we need to take action. If an object was replaced by another one, or if a link was replaced by another one, then the graph needs to be changed because it doesn't exist in the graph anymore. However, we don't have this information."

More IBM SevOne Network Performance Management (NPM) cons

Pricing and Cost Advice

"The pricing is quite harsh."

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"ArcSight is an expensive solution."

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"I would rate the product a seven out of ten since it's an enterprise product."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"We have a lifetime license, so we don't pay a monthly fee."

"The pricing has not evolved with the market, which is one of the reasons we are moving to a new product."

"Many tools price things based on the number of KPIs that you're collecting around a device. In many cases, there could be hundreds of metrics that you need to collect. SevOne provides device-level pricing. That gives us the flexibility to turn on, and expand on, the metrics that we're collecting around those devices, without taking a financial hit."

"Although I don't have exact details in terms of cost, my experience has been that SevOne is willing to make a deal with the customer."

"The pricing has been fair."

"Choose a SevOne partner who can provide SevOne as a service and can deliver professional services and maintenance."

"There are different options available for licensing, with the per-device option being more expensive but more flexible."

"The tool is not expensive. We were able to negotiate with SevOne on pricing."

"Have a bank of licenses, because it is about the number of objects (RAM, ports, CPU, etc.)."

More IBM SevOne Network Performance Management (NPM) pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

859,129 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

18%

Computer Software Company

17%

Government

Educational Organization

Financial Services Firm

15%

Manufacturing Company

15%

Computer Software Company

13%

Legal Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

What needs improvement with ArcSight Logger?

The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...

What needs improvement with SevOne Network Data Platform?

There is room for improvement in the integration with different vendors and the reporting capabilities. It would be beneficial to have out-of-the-box integration with third-party vendors and improv...

What is your primary use case for SevOne Network Data Platform?

The primary use case of IBM SevOne Network Performance Management (NPM) ( /products/ibm-sevone-network-performance-management-npm-reviews ) is network monitoring. It helps to maintain the infrastru...

What advice do you have for others considering SevOne Network Data Platform?

To compete with custom-built tools, IBM SevOne Network Performance Management (NPM) should accommodate the desired features and be timely in the delivery of feature updates. I would rate the overal...

Splunk Enterprise Security vs ArcSight Logger

Comparisons

Compared 39% of the time

IBM Security QRadar vs ArcSight Logger

Compared 36% of the time

Elastic Security vs ArcSight Logger

Compared 10% of the time

Wazuh vs ArcSight Logger

Compared 8% of the time

Grafana Loki vs ArcSight Logger

Compared 5% of the time

More ArcSight Logger Competitors

Instana Infrastructure Monitoring vs IBM SevOne Network Performance Management (NPM)

Compared 10% of the time

Zabbix vs IBM SevOne Network Performance Management (NPM)

Compared 8% of the time

NETSCOUT nGeniusONE vs IBM SevOne Network Performance Management (NPM)

Compared 8% of the time

Splunk Enterprise Security vs IBM SevOne Network Performance Management (NPM)

Compared 7% of the time

SolarWinds Network Device Monitor vs IBM SevOne Network Performance Management (NPM)

Compared 7% of the time

More IBM SevOne Network Performance Management (NPM) Competitors

Product Reports

ArcSight Logger

Download ArcSight Logger product report

IBM SevOne Network Performance Management (NPM)

Download IBM SevOne Network Performance Management (NPM) product report

IBM SevOne Network Performance Management (NPM) report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

SevOne

Overview

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

OpenText

The IBM® SevOne Network Performance Management (IBM SevOne NPM) solution helps you spot, address, and prevent network performance issues early with machine learning-powered analytics from a single source. Boost network performance and improve your user application experience by proactively monitoring your multivendor end-to-end network across enterprise, communication, and managed service provider networks.

Transform raw network performance data into intelligent and actionable insights. The IBM SevOne NPM solution goes beyond detection, combining industry-leading expertise and advanced technology to help your IT team plan and optimize your network and act on what matters: improving network performance to provide an exceptional customer experience.

For further information, please visit www.ibm.com/cloud/sevo...

IBM

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

ATOS, Devereux, Spark New Zealand, Access4, Rogers Communication, Lumen (formerly known as CenturyLink)

ArcSight Logger vs. IBM SevOne Network Performance Management (NPM)