ArcSight Logger vs ManageEngine EventLog Analyzer comparison

ArcSight Logger vs. ManageEngine EventLog Analyzer

Download the complete report

Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Logger

Ranking in Log Management

31st

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

ManageEngine EventLog Analyzer

Ranking in Log Management

46th

Average Rating

7.4

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (43rd)

Mindshare comparison

As of May 2025, in the Log Management category, the mindshare of ArcSight Logger is 0.8%, down from 1.1% compared to the previous year. The mindshare of ManageEngine EventLog Analyzer is 0.8%, down from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Geraldo Freitas

Analista de TI - suporte a redes e segurança at Tribunal de Contas da União

Enhances our security incident investigation but not good for correlation

Investigation is good when you know what you want to search for in Logger. The most difficult part is parsing the logs and configuring the parsers. For investigation, it's good. For correlation, it's not good. We use Sentinel, and Sentinel has pre-built use cases that are much easier to configure. So, it enhances our security incident investigation. We have inbound integration, but configuring the parsers is sometimes very difficult. We only have two use cases where we have a correlation set up. We send the information to Check Point to block IP addresses when we see a lot of blocks from the same source. We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist. So, it offers the ease of integration.

Read full review

Md Abdul Hakim

System Engineer at Corporate Projukti Limited

Efficient log management enhances activity monitoring despite VPN user issue

Last month, we faced an issue with a Hawaiian VPN user activity. It's like a Fortinet device configured for VPN users. When a VPN user logs in, it doesn't really capture the time before this. If you're testing with existing or new device integration, then the product will be good in the market.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's an efficient solution."

"ArcSight provides the basic information that we want."

"It is one of the best products available in the market."

"The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."

"Some of the most valuable features I really appreciate are the performance, how quick the solution is, and how easy it is to create a query."

"The most valuable feature is the level of detail that you can see about certain events, even when they do not come up in the console."

"We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist."

"Our return on investment for implementing ArcSight Logger over the past 12 months has been positive."

More ArcSight Logger pros

"It is stable."

"The initial setup is straightforward"

"The dashboard for administrators or assigned engineers can identify vulnerabilities, activities, infected systems, large files, or DDoS attacks."

"What I found most useful in ManageEngine EventLog Analyzer is its integration with other ManageEngine applications. It seamlessly integrates throughout the ManageEngine suite, and that's beneficial. I also like that the solution has chain management capabilities, it has a modular approach, and it's easy to reach the support team."

"The reporting features are noteworthy, as they provide templates that streamline the process of generating reports"

"It's one of the easiest products. It's very simple to use."

"The log management has helped to improve my organization."

"I have made use of technical support and am certainly very satisfied with them."

More ManageEngine EventLog Analyzer pros

Cons

"I would rate the technical support only 5 out of 10. The technical support is not satisfactory."

"It's not a new product and is a bit complex. So, it requires a person dedicated to working on it and to know about it in and out. It is a huge product, and the search operation is a bit complicated for a new user or someone who has not used it for long. So for that person, it becomes a bit difficult."

"The product's connectors should work better and the user manuals need an update."

"I would like to see better scheduling in the next release of this solution."

"ArcSight has been sold two or three times, and the quality has decreased."

"The solution should make it possible to integrate network analysis features."

"The console in older versions is not user-friendly."

"You have limited reporting capabilities and I wouldn't choose ArcSight Logger for this purpose."

More ArcSight Logger cons

"Support could improve to make the solution better."

"I would like to see more detailed reports."

"The solution should improve on its log capturing capabilities."

"What I'd like to see as an improvement to ManageEngine EventLog Analyzer is for it to be more AI-driven. Having more automation would also make the solution better."

"The customization of reports could be a lot easier. It is not difficult but it could be made easier."

"Last month, we faced an issue with a Hawaiian VPN user activity."

"There's a lot to improve in terms of connectivity. Currently, we're utilizing it across various infrastructures and environments, including others' cloud. However, connecting it to our infrastructure and integrating it with some of our SMAX solutions poses difficulties."

"The solution is stable. However, there are limits. For example, we can do 2,500 Syslog events per second, but if we want to do more we have to install the distributor structure, and then we can expand how many events we can do. They could improve the stability."

More ManageEngine EventLog Analyzer cons

Pricing and Cost Advice

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"The pricing is quite harsh."

"I would rate the product a seven out of ten since it's an enterprise product."

"We have a lifetime license, so we don't pay a monthly fee."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"ArcSight is an expensive solution."

"We paid for the license of the solution and the deployment. The price of ManageEngine EventLog Analyzer is less expensive than other solutions."

"Licensing for ManageEngine EventLog Analyzer is paid yearly."

"ManageEngine EventLog Analyzer is a low-cost solution. It costs approximately $1,000 per month per server for a perpetual license."

"There is a license required for these solutions. The customer can choose the license type, such as an annual license purchase or a perpetual license. If the customer wants maintenance they will have to pay annually."

"ManageEngine EventLog Analyzer is expensive. Its licensing costs are annual."

"There is a yearly subscription for the solution."

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

850,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

19%

Computer Software Company

17%

Government

Educational Organization

Computer Software Company

20%

Government

Healthcare Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

What needs improvement with ArcSight Logger?

The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...

What do you like most about ManageEngine EventLog Analyzer?

The reporting features are noteworthy, as they provide templates that streamline the process of generating reports

What needs improvement with ManageEngine EventLog Analyzer?

What is your primary use case for ManageEngine EventLog Analyzer?

I find this solution useful for IT devices as a live stream to work with Syshun, serving as both the router and the target. All activities are logged, and they can be accessed within one console. T...

Splunk Enterprise Security vs ArcSight Logger

Comparisons

Compared 37% of the time

IBM Security QRadar vs ArcSight Logger

Compared 35% of the time

Elastic Security vs ArcSight Logger

Compared 8% of the time

Wazuh vs ArcSight Logger

Compared 8% of the time

Grafana Loki vs ArcSight Logger

Compared 5% of the time

More ArcSight Logger Competitors

ManageEngine Log360 vs ManageEngine EventLog Analyzer

Compared 40% of the time

Wazuh vs ManageEngine EventLog Analyzer

Compared 19% of the time

Fortinet FortiAnalyzer vs ManageEngine EventLog Analyzer

Compared 14% of the time

SolarWinds Kiwi Syslog Server vs ManageEngine EventLog Analyzer

Compared 10% of the time

Graylog vs ManageEngine EventLog Analyzer

Compared 4% of the time

More ManageEngine EventLog Analyzer Competitors

Product Reports

ArcSight Logger

Download ArcSight Logger product report

ManageEngine EventLog Analyzer

Download ManageEngine EventLog Analyzer product report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

EventLog Analyzer

Overview

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

OpenText

Your organizations IT infrastructure generate huge amount of logs every day and these machine generated logs have vital information that can provide powerful insights and network security intelligence into user behaviors, network anomalies, system downtime, policy violations, internal threats, regulatory compliance, etc. However, the task of analyzing these event logs and syslogs without automated log analyzer tools can be both time-consuming and painful if done manually.

EventLog Analyzer provides the most cost-effective Security Information and Event Management (SIEM) software on the market. Using this Log Analyzer software, organizations can automate the entire process of managing terabytes of machine generated logs by collecting, analyzing, correlating, searching, reporting, and archiving from one central location. This event log analyzer software helps to monitor file integrity, conduct log forensics analysis, monitor privileged users and comply to different compliance regulatory bodies by intelligently analyzing your logs and instantly generating a variety of reports like user activity reports, historical trend reports, and more.

ManageEngine

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

Moody National Bank, EnCircle, Goldleaf Financial Solutions, Inc, IBM, Ernst & Young, Micro Linear, Silverbeck-Rymer Solicitors, Provincial Court of British Columbia, Eleventh Judicial Circuit of Florida, OGILVY & MATHER, E! Entertainment, Tribune-Review Publishing Co.

ArcSight Logger vs. ManageEngine EventLog Analyzer