ArcSight Logger vs Logstash comparison

OpenText and Elastic are both solutions in the Log Management category. OpenText is ranked #24 with an average rating of 7.4, while Elastic is ranked #25 with an average rating of 9.3. OpenText holds a 0.7% mindshare in Log Management, compared to Elastic’s 0.6% mindshare. Additionally, 81% of OpenText users are willing to recommend the solution, compared to 66% of Elastic users who would recommend it.

ArcSight Logger

Read 32 ArcSight Logger reviews

1,322 Views
328 Comparison Views

81% willing to recommend

Logstash

Read 4 Logstash reviews

772 Views
362 Comparison Views

66% willing to recommend

ArcSight Logger

Logstash

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between ArcSight Logger and Logstash based on real PeerSpot user reviews.

Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed ArcSight Logger vs. Logstash Report (Updated: June 2025).

Buyer's Guide

ArcSight Logger vs. Logstash

June 2025

Download the complete report

Helped 859,957 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Logger

Ranking in Log Management

24th

Average Rating

7.8

Reviews Sentiment

5.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Logstash

Ranking in Log Management

25th

Average Rating

9.4

Reviews Sentiment

6.4

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of July 2025, in the Log Management category, the mindshare of ArcSight Logger is 0.7%, down from 1.1% compared to the previous year. The mindshare of Logstash is 0.6%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Nagendra Nekkala.

Senior Manager ICT & at Bangalore International Airport Limited

A scalable and stable solution that enables users to see all the event logs in one place

The technical support team is very slow. The support persons do not take prompt action. They take too much time to implement new changes. Even if we tell them that we are not able to get critical logs, they take almost three to four days to provide a resolution. The support is not good.

Read full review

Mustafa Husny

Senior System Engineer at Techline-eg

Helps to collect logs from various data sources, including hardware

I use Logstash primarily for connecting logs from hardware. This is the main use case. The second use case involves making correlations between logs from various sources. I can collect logs from various data sources, including hardware. The product needs to improve its compatibility. I rate…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The machine learning is a good feature."

"The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."

"It's an efficient solution."

"In our country we are a little bit private in terms of solutions, so we are just starting to use the basic data capture. Now some users can start to use additional features that come with Micro Focus ArcSight like user behavior analytics for investigating."

"ArcSight Logger is very stable and useful for customers."

"ArcSight's robustness is its most valuable feature."

"The most valuable feature is the level of detail that you can see about certain events, even when they do not come up in the console."

"I am impressed with the product's ability to pick up logs. It also has UEBA which has reduced the time to take charge of the events."

More ArcSight Logger pros

"Everything aligns well with improving our organization."

"Logstash has numerous plugins for inputs and outputs, allowing it to work well in environments that do not contain other Elastic components."

"I can collect logs from various data sources, including hardware."

"We have three or four Logstash servers for high availability."

"The transformation means we ship the logs in the way that we want them to be presented in Kibana, which is the main function we use Logstash for."

Cons

"We find that the search and access functionality is quite slow."

"ArcSight Logger doesn't have features for user or customer behavior analysis."

"ArcSight has been sold two or three times, and the quality has decreased."

"The solution must provide readymade connectors for different applications."

"I had some latency issues for two months. I had to increase our storage capacity significantly to reduce the latency."

"The console in older versions is not user-friendly."

"Using the ArcSight Logger dashboard is not particularly intuitive or efficient, so it is important to be trained in its use."

"The platform is quite expensive. They should reduce its cost."

More ArcSight Logger cons

"An enhancement we could implement is the ability to cluster Logstash to exist in more than one node."

"We still have a problem with importing the log system."

"Elastic does not provide proper support for Logstash worldwide, and I rate their technical support as one out of ten."

"Almost all the research can be very bad. We still have a problem with importing the log system."

"The product needs to improve its compatibility."

Pricing and Cost Advice

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"I would rate the product a seven out of ten since it's an enterprise product."

"ArcSight is an expensive solution."

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"The pricing is quite harsh."

"We have a lifetime license, so we don't pay a monthly fee."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

859,957 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

18%

Computer Software Company

16%

Government

Educational Organization

Financial Services Firm

17%

Computer Software Company

12%

Government

10%

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

See all answers

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

See all answers

What needs improvement with ArcSight Logger?

The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...

See all answers

What do you like most about Logstash?

I can collect logs from various data sources, including hardware.

See all answers

What needs improvement with Logstash?

Logstash lacks a graphical user interface, necessitating a strong programming background to handle it effectively. It is challenging for business users who need a skilled team for its operation. Ch...

See all answers

What is your primary use case for Logstash?

I am considered an expert in Elastic Observability ( /products/elastic-observability-reviews ) in the Middle East. During my experience, I have worked heavily on Logstash ( /products/logstash-38586...

See all answers

Comparisons

Splunk Enterprise Security vs ArcSight Logger

Compared 38% of the time

IBM Security QRadar vs ArcSight Logger

Compared 35% of the time

Elastic Security vs ArcSight Logger

Compared 10% of the time

Wazuh vs ArcSight Logger

Compared 8% of the time

Grafana Loki vs ArcSight Logger

Compared 4% of the time

More ArcSight Logger Competitors

Cribl vs Logstash

Compared 42% of the time

Grafana Loki vs Logstash

Compared 18% of the time

syslog-ng vs Logstash

Compared 17% of the time

Wazuh vs Logstash

Compared 14% of the time

Graylog vs Logstash

Compared 9% of the time

More Logstash Competitors

Product Reports

Buyer's Guide

ArcSight Logger

June 2025

Download ArcSight Logger product report

Buyer's Guide

Log Management

May 2025

Download Logstash product report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

No data available

Overview

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

OpenText

Logstash is a versatile data processing pipeline that ingests data from multiple sources, transforms it, and sends it to preferred destinations, enabling seamless data utilization across systems.

Logstash provides an efficient and flexible way to manage data flow, supporting diverse input sources and offering a rich set of plugins. Its real-time processing capability and ease of integration with Elasticsearch make it advantageous for businesses looking to enhance data analytics. While valuable, Logstash can benefit from improvements like scalability enhancements and more robust error-handling mechanisms.

What are the key features of Logstash?

Input Plugin Support: Connects to a wide range of data sources for seamless ingestion.
Filter Plugin: Processes and enriches logs before output.
Output Plugin Flexibility: Delivers data to various endpoints efficiently.
Real-Time Pipeline: Processes data in real-time for immediate insights.

What benefits does Logstash provide?

Enhanced Data Processing: Streamlines data ingestion and transformation workflows.
Improved Analytics: Facilitates deeper insights through seamless Elasticsearch integration.
Cost Efficiency: Reduces total expenses by optimizing data handling processes.
Scalability: Adapts to diverse data volumes and use cases.

Industries like finance and e-commerce leverage Logstash for managing extensive log data and improving decision-making by feeding enriched data into analytics platforms. Its ability to handle diverse formats and integrate with Elastic Stack has proven crucial in implementing comprehensive data strategies.

Elastic

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

Information Not Available

Buyer's Guide

ArcSight Logger vs. Logstash

June 2025

Free Report: ArcSight Logger vs. Logstash

Find out what your peers are saying about ArcSight Logger vs. Logstash and other solutions. Updated: June 2025.

DOWNLOAD NOW

859,957 professionals have used our research since 2012.

See our ArcSight Logger vs. Logstash report.

See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.