We performed a comparison between ArcSight Logger and Splunk Enterprise Security based on real PeerSpot user reviews.
Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The ESM use cases are the most valuable. It enables us to use the big data collection inside our company. We are able to create use cases for whatever it suits and I find that the most interesting part of any SIEM solution."
"It's a robust, mature product and you can do some really complex operations and analytics."
"The machine learning is a good feature."
"The most valuable feature is the search capability, which is simple to use."
"The technical support team is good...It is a scalable solution."
"The ability to customize the solution in great detail is its most valuable features. We can customize the use cases and also have the ability to do scripting. We can personalize our dashboard as well. The scalability the solution offers is quite impressive."
"ArcSight provides the basic information that we want."
"We check a lot of logs in ArcSight Logger because we're running a massive database platform."
"Splunk's strongest suit is its user interface. We can integrate multiple solutions and adjust settings in the Splunk interface."
"The most valuable features of Splunk Enterprise Security are its high-performance data collection, flexible query language, and its versatility across the organization."
"I have also been able to take advantage of some of the more complex statistical capabilities when analyzing logs."
"The most valuable aspect of the solution is the dashboard. It's very intuitive."
"Splunk is a user-friendly solution."
"It scales better in the cloud than on-premise."
"Internal tracking is helpful because we do not like to deal with multiple ticketing systems, and I am not a fan of ServiceNow. We are able to keep everything internal and utilize Enterprise Security."
"The correlation search functions that generate all the notables are valuable. That can get pretty complicated, and it handles that pretty well."
"It's not a new product and is a bit complex. So, it requires a person dedicated to working on it and to know about it in and out. It is a huge product, and the search operation is a bit complicated for a new user or someone who has not used it for long. So for that person, it becomes a bit difficult."
"It is really difficult to work in ArcSight Logger, as it is very slow."
"Using the ArcSight Logger dashboard is not particularly intuitive or efficient, so it is important to be trained in its use."
"The next release should have AI capabilities."
"The speed of Logger indexing and searching for certain bugs for some queries that we provide could be improved. It can handle a huge number of logs but it can be improved."
"We have had problems with archiving."
"The solution must provide readymade connectors for different applications."
"You have limited reporting capabilities and I wouldn't choose ArcSight Logger for this purpose."
". Having a trial version or more training on Splunk would be helpful."
"There are a lot of competitive products that are doing better than what Splunk is doing on the analytics side."
"Splunk can improve regex/asset analysis as we do not want to crawl until it is done."
"The threat detection library needs to increase the frequency at which the playbooks are updated."
"Splunk can improve its third-party device application plugins."
"There can be a bit of complexity around some fields during the initial setup."
"The UI could be better. This is applicable to Splunk in general. I know that a lot of people who get their hands on Splunk are hesitant to use it just because they find it overwhelming. There are a lot of options."
"The CIM model is the method Splunk uses to normalize data and categorize its important parts, but it is quite complex."
ArcSight Logger is ranked 29th in Log Management with 29 reviews while Splunk Enterprise Security is ranked 1st in Log Management with 221 reviews. ArcSight Logger is rated 7.8, while Splunk Enterprise Security is rated 8.4. The top reviewer of ArcSight Logger writes "A scalable and stable solution that enables users to see all the event logs in one place". On the other hand, the top reviewer of Splunk Enterprise Security writes "It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query ". ArcSight Logger is most compared with IBM Security QRadar, Elastic Security, Wazuh, LogRhythm SIEM and VMware Aria Operations for Logs, whereas Splunk Enterprise Security is most compared with Wazuh, Dynatrace, IBM Security QRadar, Elastic Security and Fortinet FortiAnalyzer. See our ArcSight Logger vs. Splunk Enterprise Security report.
See our list of best Log Management vendors.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.