ArcSight Logger vs IBM SevOne Network Performance Management (NPM) comparison

ArcSight Logger vs. IBM SevOne Network Performance Management (NPM)

Download the complete report

Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Logger

Ranking in Log Management

31st

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

IBM SevOne Network Performa...

Ranking in Log Management

44th

Average Rating

8.4

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Network Monitoring Software (37th), Server Monitoring (18th), IT Infrastructure Monitoring (43rd), Cloud Monitoring Software (29th)

Mindshare comparison

As of May 2025, in the Log Management category, the mindshare of ArcSight Logger is 0.8%, down from 1.1% compared to the previous year. The mindshare of IBM SevOne Network Performance Management (NPM) is 0.3%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Geraldo Freitas

Analista de TI - suporte a redes e segurança at Tribunal de Contas da União

Enhances our security incident investigation but not good for correlation

Investigation is good when you know what you want to search for in Logger. The most difficult part is parsing the logs and configuring the parsers. For investigation, it's good. For correlation, it's not good. We use Sentinel, and Sentinel has pre-built use cases that are much easier to configure. So, it enhances our security incident investigation. We have inbound integration, but configuring the parsers is sometimes very difficult. We only have two use cases where we have a correlation set up. We send the information to Check Point to block IP addresses when we see a lot of blocks from the same source. We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist. So, it offers the ease of integration.

Read full review

Grzegorz Nowak

Solution Architect at Wingu

Improves infrastructure planning by helping us analyze network traffic

We use SevOne to collect and report on network flows SevOne improves infrastructure planning by helping us analyze network traffic. We can look at bandwidth for specific endpoints on the customer's network and analyze traffic to identify issues. For example, maybe some connectors are unavailable.…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's a brilliant log collection tool, and it can handle hundreds of thousands of servers in a single shot to ingest the data."

"The most valuable feature is the level of detail that you can see about certain events, even when they do not come up in the console."

"Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."

"I am impressed with the product's ability to pick up logs. It also has UEBA which has reduced the time to take charge of the events."

"The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."

"ArcSight provides the basic information that we want."

"The log digestion features from threat intelligence platforms like Recorded Future or Talos are valuable."

"In terms of ArcSight Logger's most valuable feature, it is their scalability. ArcSight's real advantage is its scalability because they have two layers, including the logger layer."

More ArcSight Logger pros

"Another useful feature is that SevOne gives you real-time insights into your network performance. It polls every five minutes. That is important for our customers because there are some network teams that are always monitoring their networks."

"The network data collection has been very flexible for us. It's been thorough in areas that were lacking. They have a team that I've worked with to add other pieces to it. So if it's missing something out of the box, they work with me to add it. I was able to collect that data. It's not perfect, but it's pretty thorough."

"We find that the reporting is particularly valuable in terms of not only communicating with our peer teams but also with the executives."

"The out of the box reports and workflows are pretty good and they meet our requirements well."

"It's a great solution for highlighting and discovering useful information regarding our network's elements."

"The feature that I have found most valuable is the scale-up and scale-down. The scale-up is an operation where the CPU boosts-up and then the memory will boost-up. That works awesomely."

"It also gives us the closest thing to real-time insight into network performance that we have, with just a 10-second delay. It's very important for us to know the health of the infrastructure very quickly."

"One of the most valuable features is the graphs, which you can build instantly. I have used some open-source platforms in the past, but they are not as good. With SevOne, the sampling in the graph can be every few seconds, not just every few minutes, and that's really helpful. It's really fast."

More IBM SevOne Network Performance Management (NPM) pros

Cons

"The integration with other systems could be improved."

"We find that the search and access functionality is quite slow."

"The solution should make it possible to integrate network analysis features."

"The next release should have AI capabilities."

"The solution could be improved in maintenance settings."

"We have had problems with archiving."

"It is really difficult to work in ArcSight Logger, as it is very slow."

"The initial setup was a little bit complex."

More ArcSight Logger cons

"The tool needs improvement in non-Cisco SD-WAN."

"There are some tweaks and enhancements that I've already requested. One is to be able to make changes per device rather than as a global setting. That has to do with naming. It's minor."

"NMS has several areas for improvement. It should be more user-friendly inside of NMS for some of the functionality in there. It's been getting better the last version or two, but the there have been bugs in there whenever I've gone to new versions."

"High-frequency polling is data-intensive because you're pulling more. If SevOne could figure out a way to manage the impact of high-frequency polling on the system, that would be very popular."

"I would like to see live maps as an added feature. Also, build modules on AI and EML to provide better data insights that would proactively tell us what we should be looking after."

"The one area with room for improvement is probably administration. They added data insights to make a better user experience, but I'd like to see some improvements in the way the system's administered."

"Telemetry is hot these days, and IBM can improve SevOne's support for telemetry correction. Reporting is another feature that could be better. It provides the bare minimum functionality, which is good enough for most engineers, but the management isn't advanced. The new portal provides a much lighter view and better visualization, but the management is not so good."

"Their virtualization solution is not compatible with our Kubernetes environment, which is one of the reasons we are ending our relationship with them."

More IBM SevOne Network Performance Management (NPM) cons

Pricing and Cost Advice

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"The pricing is quite harsh."

"I would rate the product a seven out of ten since it's an enterprise product."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"We have a lifetime license, so we don't pay a monthly fee."

"ArcSight is an expensive solution."

"Choose a SevOne partner who can provide SevOne as a service and can deliver professional services and maintenance."

"There are different options available for licensing, with the per-device option being more expensive but more flexible."

"Although I don't have exact details in terms of cost, my experience has been that SevOne is willing to make a deal with the customer."

"For the value that you get from SevOne, it's worth the price. There are a lot of cheaper alternatives on the market, and even free options. But they require more staff, more resources, and engineers with more advanced knowledge of monitoring. That's what makes SevOne worth the price."

"The pricing has been fair."

"The pricing has not evolved with the market, which is one of the reasons we are moving to a new product."

"A blocking point is the high upfront cost because it is challenging to get it accepted and the purchase approved."

"Prices per license are not huge, but they exist."

More IBM SevOne Network Performance Management (NPM) pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

850,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

19%

Computer Software Company

17%

Government

Educational Organization

Financial Services Firm

17%

Manufacturing Company

14%

Computer Software Company

14%

Legal Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

What needs improvement with ArcSight Logger?

The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...

What needs improvement with SevOne Network Data Platform?

There is room for improvement in the integration with different vendors and the reporting capabilities. It would be beneficial to have out-of-the-box integration with third-party vendors and improv...

What is your primary use case for SevOne Network Data Platform?

The primary use case of IBM SevOne Network Performance Management (NPM) ( /products/ibm-sevone-network-performance-management-npm-reviews ) is network monitoring. It helps to maintain the infrastru...

What advice do you have for others considering SevOne Network Data Platform?

To compete with custom-built tools, IBM SevOne Network Performance Management (NPM) should accommodate the desired features and be timely in the delivery of feature updates. I would rate the overal...

Splunk Enterprise Security vs ArcSight Logger

Comparisons

Compared 37% of the time

IBM Security QRadar vs ArcSight Logger

Compared 35% of the time

Elastic Security vs ArcSight Logger

Compared 8% of the time

Wazuh vs ArcSight Logger

Compared 8% of the time

Grafana Loki vs ArcSight Logger

Compared 5% of the time

More ArcSight Logger Competitors

Instana Infrastructure Monitoring vs IBM SevOne Network Performance Management (NPM)

Compared 11% of the time

NETSCOUT nGeniusONE vs IBM SevOne Network Performance Management (NPM)

Compared 10% of the time

SolarWinds Network Device Monitor vs IBM SevOne Network Performance Management (NPM)

Compared 10% of the time

Splunk Enterprise Security vs IBM SevOne Network Performance Management (NPM)

Compared 9% of the time

Zabbix vs IBM SevOne Network Performance Management (NPM)

Compared 8% of the time

More IBM SevOne Network Performance Management (NPM) Competitors

Product Reports

ArcSight Logger

Download ArcSight Logger product report

IBM SevOne Network Performance Management (NPM)

Download IBM SevOne Network Performance Management (NPM) product report

IBM SevOne Network Performance Management (NPM) report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

SevOne

Overview

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

OpenText

The IBM® SevOne Network Performance Management (IBM SevOne NPM) solution helps you spot, address, and prevent network performance issues early with machine learning-powered analytics from a single source. Boost network performance and improve your user application experience by proactively monitoring your multivendor end-to-end network across enterprise, communication, and managed service provider networks.

Transform raw network performance data into intelligent and actionable insights. The IBM SevOne NPM solution goes beyond detection, combining industry-leading expertise and advanced technology to help your IT team plan and optimize your network and act on what matters: improving network performance to provide an exceptional customer experience.

For further information, please visit www.ibm.com/cloud/sevo...

IBM

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

ATOS, Devereux, Spark New Zealand, Access4, Rogers Communication, Lumen (formerly known as CenturyLink)

ArcSight Logger vs. IBM SevOne Network Performance Management (NPM)