ArcSight Logger vs Logstash comparison

OpenText and Elastic are both solutions in the Log Management category. OpenText is ranked #27 with an average rating of 7.0, while Elastic is ranked #24 with an average rating of 9.0. OpenText holds a 0.7% mindshare in Log Management, compared to Elastic’s 0.6% mindshare. Additionally, 81% of OpenText users are willing to recommend the solution, compared to 75% of Elastic users who would recommend it.

ArcSight Logger

Read 32 ArcSight Logger reviews

1,237 Views
1,237 Comparison Views

81% willing to recommend

Logstash

Read 5 Logstash reviews

810 Views
810 Comparison Views

75% willing to recommend

ArcSight Logger

Logstash

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between ArcSight Logger and Logstash based on real PeerSpot user reviews.

Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed ArcSight Logger vs. Logstash Report (Updated: July 2025).

Buyer's Guide

ArcSight Logger vs. Logstash

July 2025

Download the complete report

Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Logger

Ranking in Log Management

27th

Average Rating

7.6

Reviews Sentiment

5.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Logstash

Ranking in Log Management

24th

Average Rating

9.0

Reviews Sentiment

5.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2025, in the Log Management category, the mindshare of ArcSight Logger is 0.7%, down from 1.0% compared to the previous year. The mindshare of Logstash is 0.6%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Nagendra Nekkala.

Senior Manager ICT & at Bangalore International Airport Limited

A scalable and stable solution that enables users to see all the event logs in one place

The technical support team is very slow. The support persons do not take prompt action. They take too much time to implement new changes. Even if we tell them that we are not able to get critical logs, they take almost three to four days to provide a resolution. The support is not good.

Read full review

PRANIL CHANDARKAR

Associate Consultant at a computer software company with 1,001-5,000 employees

Open-source accessibility and ease of implementation empower adaptable log management

As both a customer and an integrator, I think the best features in Logstash are that people prefer it because it is open to all, as it is an open-source version. The functionality of Logstash is quite easy to implement. I can say that the plugin ecosystem of Logstash is great. I have used some plugins for shell script monitoring and for SQL monitoring, and these are all working well with Logstash. The real-time processing capabilities of Logstash are also pretty fine with the tool. When I use the community edition, I have to do many things manually. If I am using enterprise Elastic, then that is taken care of by the Elastic native machine learning.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Our return on investment for implementing ArcSight Logger over the past 12 months has been positive."

"It provides in-depth information on business activities once we log into the system."

"ArcSight Logger is very stable and useful for customers."

"The most valuable feature is the search capability, which is simple to use."

"In terms of ArcSight Logger's most valuable feature, it is their scalability. ArcSight's real advantage is its scalability because they have two layers, including the logger layer."

"The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."

"It is one of the best products available in the market."

"ArcSight Logger is very stable and useful for customers."

More ArcSight Logger pros

"Everything aligns well with improving our organization."

"I can collect logs from various data sources, including hardware."

"We have three or four Logstash servers for high availability."

"Logstash has numerous plugins for inputs and outputs, allowing it to work well in environments that do not contain other Elastic components."

"The transformation means we ship the logs in the way that we want them to be presented in Kibana, which is the main function we use Logstash for."

Cons

"The platform is quite expensive. They should reduce its cost."

"The solution could be improved in maintenance settings."

"The solution must provide readymade connectors for different applications."

"The product's connectors should work better and the user manuals need an update."

"The integration with other systems could be improved."

"We have had problems with archiving."

"We find that the search and access functionality is quite slow."

"I would rate the technical support only 5 out of 10. The technical support is not satisfactory."

More ArcSight Logger cons

"Elastic does not provide proper support for Logstash worldwide, and I rate their technical support as one out of ten."

"An enhancement we could implement is the ability to cluster Logstash to exist in more than one node."

"There can be a UI to implement with Logstash. Currently, I have to work with config files and everything."

"We still have a problem with importing the log system."

"The product needs to improve its compatibility."

"Almost all the research can be very bad. We still have a problem with importing the log system."

Pricing and Cost Advice

"We have a lifetime license, so we don't pay a monthly fee."

"ArcSight is an expensive solution."

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"I would rate the product a seven out of ten since it's an enterprise product."

"The pricing is quite harsh."

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

865,384 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

11%

Government

Educational Organization

Financial Services Firm

16%

Computer Software Company

12%

Government

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

See all answers

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

See all answers

What needs improvement with ArcSight Logger?

This decision is made by higher management as they don't want to have multiple solutions for one solution. ArcSight Logger themselves don't provide good support, but companies such as ours provide ...

See all answers

What do you like most about Logstash?

I can collect logs from various data sources, including hardware.

See all answers

What needs improvement with Logstash?

Customization can be automated with Logstash, but it is at the developer's disposal. The developer has to do it, not the tool as such. There is scope for optimization, but that is all outside the t...

See all answers

What is your primary use case for Logstash?

The purposes for which I am using Logstash largely include log aggregation and application monitoring.

See all answers

Comparisons

Splunk Enterprise Security vs ArcSight Logger

Compared 38% of the time

IBM Security QRadar vs ArcSight Logger

Compared 35% of the time

Elastic Security vs ArcSight Logger

Compared 11% of the time

Wazuh vs ArcSight Logger

Compared 7% of the time

Grafana Loki vs ArcSight Logger

Compared 5% of the time

More ArcSight Logger Competitors

Cribl vs Logstash

Compared 42% of the time

syslog-ng vs Logstash

Compared 17% of the time

Grafana Loki vs Logstash

Compared 17% of the time

Wazuh vs Logstash

Compared 13% of the time

Graylog vs Logstash

Compared 11% of the time

More Logstash Competitors

Product Reports

Buyer's Guide

ArcSight Logger

August 2025

Download ArcSight Logger product report

Buyer's Guide

Log Management

July 2025

Download Logstash product report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

No data available

Overview

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

OpenText

Logstash is a versatile data processing pipeline that ingests data from multiple sources, transforms it, and sends it to preferred destinations, enabling seamless data utilization across systems.

Logstash provides an efficient and flexible way to manage data flow, supporting diverse input sources and offering a rich set of plugins. Its real-time processing capability and ease of integration with Elasticsearch make it advantageous for businesses looking to enhance data analytics. While valuable, Logstash can benefit from improvements like scalability enhancements and more robust error-handling mechanisms.

What are the key features of Logstash?

Input Plugin Support: Connects to a wide range of data sources for seamless ingestion.
Filter Plugin: Processes and enriches logs before output.
Output Plugin Flexibility: Delivers data to various endpoints efficiently.
Real-Time Pipeline: Processes data in real-time for immediate insights.

What benefits does Logstash provide?

Enhanced Data Processing: Streamlines data ingestion and transformation workflows.
Improved Analytics: Facilitates deeper insights through seamless Elasticsearch integration.
Cost Efficiency: Reduces total expenses by optimizing data handling processes.
Scalability: Adapts to diverse data volumes and use cases.

Industries like finance and e-commerce leverage Logstash for managing extensive log data and improving decision-making by feeding enriched data into analytics platforms. Its ability to handle diverse formats and integrate with Elastic Stack has proven crucial in implementing comprehensive data strategies.

Elastic

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

Information Not Available

Buyer's Guide

ArcSight Logger vs. Logstash

July 2025

Free Report: ArcSight Logger vs. Logstash

Find out what your peers are saying about ArcSight Logger vs. Logstash and other solutions. Updated: July 2025.

DOWNLOAD NOW

865,384 professionals have used our research since 2012.

See our ArcSight Logger vs. Logstash report.

See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.