Try our new research platform with insights from 80,000+ expert users

ArcSight Logger vs Logstash comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ArcSight Logger
Ranking in Log Management
26th
Average Rating
7.6
Reviews Sentiment
5.8
Number of Reviews
32
Ranking in other categories
No ranking in other categories
Logstash
Ranking in Log Management
24th
Average Rating
9.0
Reviews Sentiment
5.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2025, in the Log Management category, the mindshare of ArcSight Logger is 0.7%, down from 0.9% compared to the previous year. The mindshare of Logstash is 0.7%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Market Share Distribution
ProductMarket Share (%)
Logstash0.7%
ArcSight Logger0.7%
Other98.6%
Log Management
 

Featured Reviews

Nagendra Nekkala. - PeerSpot reviewer
A scalable and stable solution that enables users to see all the event logs in one place
The technical support team is very slow. The support persons do not take prompt action. They take too much time to implement new changes. Even if we tell them that we are not able to get critical logs, they take almost three to four days to provide a resolution. The support is not good.
PRANIL CHANDARKAR - PeerSpot reviewer
Open-source accessibility and ease of implementation empower adaptable log management
As both a customer and an integrator, I think the best features in Logstash are that people prefer it because it is open to all, as it is an open-source version. The functionality of Logstash is quite easy to implement. I can say that the plugin ecosystem of Logstash is great. I have used some plugins for shell script monitoring and for SQL monitoring, and these are all working well with Logstash. The real-time processing capabilities of Logstash are also pretty fine with the tool. When I use the community edition, I have to do many things manually. If I am using enterprise Elastic, then that is taken care of by the Elastic native machine learning.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's a robust, mature product and you can do some really complex operations and analytics."
"In our country we are a little bit private in terms of solutions, so we are just starting to use the basic data capture. Now some users can start to use additional features that come with Micro Focus ArcSight like user behavior analytics for investigating."
"Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."
"ArcSight Logger is very stable and useful for customers."
"It's a brilliant log collection tool, and it can handle hundreds of thousands of servers in a single shot to ingest the data."
"The most valuable feature is the search capability, which is simple to use."
"ArcSight Logger is very stable and useful for customers."
"ArcSight provides the basic information that we want."
"I can collect logs from various data sources, including hardware."
"We have three or four Logstash servers for high availability."
"Everything aligns well with improving our organization."
"The transformation means we ship the logs in the way that we want them to be presented in Kibana, which is the main function we use Logstash for."
"Logstash has numerous plugins for inputs and outputs, allowing it to work well in environments that do not contain other Elastic components."
 

Cons

"I think the ArcSight team should try to simplify legacy products for the customers, because that product is not easy to use or to work with. It needs more more competency or appeal to use. We hope Micro Focus is trying to resolve this."
"We find that the search and access functionality is quite slow."
"The initial setup was a little bit complex."
"You have limited reporting capabilities and I wouldn't choose ArcSight Logger for this purpose."
"We have had problems with archiving."
"The product's connectors should work better and the user manuals need an update."
"The next release should have AI capabilities."
"In the next release, I want to see more intelligence."
"We still have a problem with importing the log system."
"Elastic does not provide proper support for Logstash worldwide, and I rate their technical support as one out of ten."
"The product needs to improve its compatibility."
"There can be a UI to implement with Logstash. Currently, I have to work with config files and everything."
"Almost all the research can be very bad. We still have a problem with importing the log system."
"An enhancement we could implement is the ability to cluster Logstash to exist in more than one node."
 

Pricing and Cost Advice

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."
"The pricing is quite harsh."
"ArcSight is an expensive solution."
"We have a lifetime license, so we don't pay a monthly fee."
"It's not cheap at all as it's a big product and has been in the market for quite some time now."
"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."
"I would rate the product a seven out of ten since it's an enterprise product."
"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."
Information not available
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
869,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
11%
Government
8%
Educational Organization
7%
Financial Services Firm
16%
Computer Software Company
12%
Government
9%
University
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise10
Large Enterprise16
No data available
 

Questions from the Community

What do you like most about ArcSight Logger?
We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.
What is your experience regarding pricing and costs for ArcSight Logger?
The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.
What needs improvement with ArcSight Logger?
This decision is made by higher management as they don't want to have multiple solutions for one solution. ArcSight Logger themselves don't provide good support, but companies such as ours provide ...
What do you like most about Logstash?
I can collect logs from various data sources, including hardware.
What needs improvement with Logstash?
Customization can be automated with Logstash, but it is at the developer's disposal. The developer has to do it, not the tool as such. There is scope for optimization, but that is all outside the t...
What is your primary use case for Logstash?
The purposes for which I am using Logstash largely include log aggregation and application monitoring.
 

Comparisons

 

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger
No data available
 

Overview

 

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa
Information Not Available
Find out what your peers are saying about ArcSight Logger vs. Logstash and other solutions. Updated: September 2025.
869,760 professionals have used our research since 2012.