ArcSight Logger vs Snare comparison

OpenText and Intersect Alliance are both solutions in the Log Management category. OpenText is ranked #33 with an average rating of 8.0, while Intersect Alliance is ranked #49. OpenText holds a 0.9% mindshare in Log Management, compared to Intersect Alliance’s 1.1% mindshare. Additionally, 81% of OpenText users are willing to recommend the solution, compared to 100% of Intersect Alliance users who would recommend it.

ArcSight Logger

Read 32 ArcSight Logger reviews

2,948 Views
2,889 Comparison Views

81% willing to recommend

Snare

Read 3 Snare reviews

2,923 Views
2,105 Comparison Views

100% willing to recommend

ArcSight Logger

Snare

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 9, 2024

ArcSight Logger and Snare compete in the security information and event management category. ArcSight Logger seems to have the upper hand in log management and data integration, while Snare is favored for its customization and scalability.

Features: ArcSight Logger is valued for its data processing and integration capabilities, ideal for seamless log management, reporting, and support satisfaction. Snare offers flexible custom log filtering, broad compatibility across different environments, providing scalability and versatile security monitoring options.

Room for Improvement: ArcSight Logger could enhance its alerting mechanisms, search performance, and streamline its interface. Snare users often need better documentation, simplified complex configurations, and improved user guidance resources.

Ease of Deployment and Customer Service: ArcSight Logger is noted for deployment simplicity but encounters lengthy setup due to complex configurations. Its customer service is generally rated well. Snare is praised for its straightforward deployment process and consistent, helpful support, ensuring a smooth start.

Pricing and ROI: ArcSight Logger is viewed as having a higher upfront setup cost, with mixed feedback on ROI. Snare offers better value with its flexible pricing structure, appealing to cost-conscious enterprises.

To learn more, read our detailed ArcSight Logger vs. Snare Report (Updated: August 2026).

Buyer's Guide

ArcSight Logger vs. Snare

August 2026

Download the complete report

Helped 910,005 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Logger

Ranking in Log Management

33rd

Average Rating

7.6

Reviews Sentiment

5.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Snare

Ranking in Log Management

49th

Average Rating

8.0

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (54th)

Mindshare comparison

As of August 2026, in the Log Management category, the mindshare of ArcSight Logger is 0.9%, up from 0.7% compared to the previous year. The mindshare of Snare is 1.1%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management Mindshare Distribution
Product	Mindshare (%)
ArcSight Logger	0.9%
Snare	1.1%
Other	98.0%

Log Management

Featured Reviews

Mohammed Shoaib Abdulla

Sr. Cybersecurity Consultant IT/OT at EJADA

Compliance and cost-effectiveness have improved while critical infrastructure security adapts to evolving needs

ArcSight Logger fulfills compliance requirements and passes audit requirements. It is one of the Aramco standards requirements and is recommended by Aramco for any implementation. Aramco, SABIC, water companies, and electricity companies are critical infrastructure with air-gapped networks. In an air-gapped network, there is no communication going out from that network area to the outside world, even to the corporate network. ArcSight Logger is installed on minimal resources with minimal requirements. There are not many upgrades or new features that come up frequently, though they do occur occasionally.

Read full review

Frank Eargle

Information Security Engineer at Glasshouse Systems

A highly scalable solution that is easy to manage and super easy to set up

We use Snare for picking up Windows logs, and we used to use it for SQL as well. We had used it for Linux once or twice. We're mainly using it for Windows and Windows flat files The most valuable feature of Snare is flexibility or the ability to filter all things you don't want and don't have…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is one of the best products available in the market."

"The ESM use cases are the most valuable; it enables us to use the big data collection inside our company, and we are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."

"The solution is scalable, and we have approximately 6,000 machines sending logs."

"The most valuable feature is the level of detail that you can see about certain events, even when they do not come up in the console."

"In our country we are a little bit private in terms of solutions, so we are just starting to use the basic data capture. Now some users can start to use additional features that come with Micro Focus ArcSight like user behavior analytics for investigating."

"This product was used to help us get PCI compliant, and its automated functions made it easier so we could concentrate more on real issues instead of standard log collecting and alerting issues."

"It's a robust, mature product and you can do some really complex operations and analytics."

"We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist."

More ArcSight Logger pros

"The most valuable feature of Snare is flexibility or the ability to filter all things you don't want and don't have security value."

"The best thing about Snare is its format and consistency."

"Snare has good agents, especially for Windows."

Cons

"ArcSight Logger is an outdated product. It hasn't been changed in the last ten years."

"The speed of Logger indexing and searching for certain bugs for some queries that we provide could be improved. It can handle a huge number of logs but it can be improved."

"HP needs to work on the stability as it is mostly dependent on Java and there are console-related issues."

"Overall, it is a good system for what we use it for, but some licensing parts are really annoying."

"ArcSight has been sold two or three times, and the quality has decreased."

"Clicking on a log source on the main page should not pull all stored logs as this is too slow and way excessive."

"I had some latency issues for two months. I had to increase our storage capacity significantly to reduce the latency."

"You have limited reporting capabilities and I wouldn't choose ArcSight Logger for this purpose."

More ArcSight Logger cons

"Users will initially find it difficult to identify the event types and installation in Snare."

"Snare should modernize its GUI a little bit."

"The solution is now developing a SIEM-like feature on Snare Central Server, but it's not complete yet."

Pricing and Cost Advice

"We have a lifetime license, so we don't pay a monthly fee."

"ArcSight is an expensive solution."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"I would rate the product a seven out of ten since it's an enterprise product."

"The pricing is quite harsh."

"On a scale from one to ten, where one is cheap, and ten is expensive, I rate Snare's pricing a four out of ten."

"Snare has reasonable pricing."

"Snare is a cheap solution because a lot of customers are using it."

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

910,005 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

10%

Outsourcing Company

10%

Financial Services Firm

Comms Service Provider

Financial Services Firm

16%

Outsourcing Company

Construction Company

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	9
Large Enterprise	17

No data available

Questions from the Community

What needs improvement with ArcSight Logger?

This decision is made by higher management as they don't want to have multiple solutions for one solution. ArcSight Logger themselves don't provide good support, but companies such as ours provide ...

See all answers

What is your primary use case for ArcSight Logger?

We do work for multiple SIEM solutions such as Splunk, QRadar, LogRhythm. My team and I mostly work on ArcSight Logger and Splunk because we are dealing with projects related to these solutions. We...

See all answers

What advice do you have for others considering ArcSight Logger?

As a department head, my staff uses my credentials and contacts everywhere. Only ArcSight Logger with Splunk was implemented in Aramco, not in other organizations. I rate ArcSight Logger 8 out of 10.

See all answers

Ask a question

Earn 20 points

Comparisons

Splunk Enterprise Security vs ArcSight Logger

Compared 12% of the time

Elastic Security vs ArcSight Logger

Compared 8% of the time

IBM Security QRadar vs ArcSight Logger

Compared 7% of the time

LogRhythm SIEM vs ArcSight Logger

Compared 6% of the time

USM Anywhere vs ArcSight Logger

Compared 6% of the time

More ArcSight Logger Competitors

Splunk Enterprise Security vs Snare

Compared 11% of the time

Elastic Security vs Snare

Compared 10% of the time

LogRhythm SIEM vs Snare

Compared 5% of the time

Cribl vs Snare

Compared 4% of the time

Fortra's Tripwire Log Center vs Snare

Compared 4% of the time

More Snare Competitors

Product Reports

Buyer's Guide

ArcSight Logger

August 2026

Download ArcSight Logger product report

Buyer's Guide

Log Management

August 2026

Download Snare product report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

No data available

Overview

ArcSight Logger effectively manages vast log data volumes, streamlining complex query execution and data compression while supporting various devices to meet compliance needs.

ArcSight Logger, known for scalability, simplifies handling extensive log data and executes complex queries swiftly. Its data compression features, coupled with versatile device support, allow for smooth security analytics and log collection. Users appreciate its real-time network insights and intuitive interface. However, improvements are needed in indexing speed, user navigation simplification, enhanced system integration, advanced analytics, and comprehensive threat management. Companies leverage ArcSight Logger for on-premises log management, vital for IT asset event monitoring and compliance within telecom and enterprise sectors.

What are the key features?

Scalability: Handles large log data volumes efficiently.
Complex Query Execution: Quickly executes intricate queries.
Data Compression: Optimizes storage with excellent compression.
Device Support: Out-of-the-box compatibility with numerous devices.
Customization: Easily customizes to user needs.
Security Analytics: Provides robust analytics for security requirements.
Real-time Insights: Offers awareness of ongoing network activities.

What benefits and ROI should be considered?

Compliance Assurance: Meets audit requirements with comprehensive insights.
Time Efficiency: Fast query execution reduces analysis time.
Reduced Storage Costs: Data compression lowers storage expenses.
Enhanced Security: Improves security posture with real-time analytics.

In industries like telecom and enterprise, ArcSight Logger facilitates on-premises deployments to manage logs, process queries, and integrate with security tools, essential for incident response. It aids in retaining logs, monitoring Windows events, overseeing communications, and is employed in fraud prevention and security monitoring involving syslog servers.

OpenText

Snare provides scalable log management solutions tailored for enterprises seeking efficient security and compliance. It collects logs from diverse environments, enabling real-time monitoring and response.

Snare is designed to facilitate seamless integration of log data to aid in security intelligence and policy adherence. It's versatile in capturing logs across platforms, offering organizations the ability to centralize monitoring efforts. With its robust analytics framework, businesses can detect anomalies and ensure regulatory compliance more effectively.

What are Snare’s most important features?

Centralized log management: Consolidates logs from various sources for comprehensive analysis.
Real-time monitoring: Allows immediate threat detection and response across networks.
Compliance reporting: Provides built-in templates to facilitate quick compliance checks.
Scalability: Supports growing data volumes with ease, ensuring performance consistency.
Cross-platform support: Enables integration with systems like Windows, Linux, and more.

What benefits should users seek in reviews?

Operational efficiency: Reduces time spent on manual log aggregation and analysis.
Enhanced threat detection: Improves security posture by identifying risks proactively.
Cost-effectiveness: Offers competitive pricing compared to traditional log solutions.
User-friendly configuration: Streamlines setup processes without extensive training.
Flexible deployment options: Allows adaptable implementation in cloud, on-premises, or hybrid environments.

In finance, Snare helps meet compliance standards by providing comprehensive audit trails. Retail sectors use it for detecting fraud while maintaining data integrity. Technology companies leverage its scalability to monitor expansive infrastructures effectively.

Intersect Alliance

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

Military, Defence and Security Agencies, Banking Finance and Insurance companies, Retail, Health and Utilities.

Buyer's Guide

ArcSight Logger vs. Snare

August 2026

Free Report: ArcSight Logger vs. Snare

Find out what your peers are saying about ArcSight Logger vs. Snare and other solutions. Updated: August 2026.

DOWNLOAD NOW

910,005 professionals have used our research since 2012.

See our ArcSight Logger vs. Snare report.

See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.