We performed a comparison between ArcSight Logger and Splunk Enterprise Security based on real PeerSpot user reviews.
Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The technical support team is good...It is a scalable solution."
"The log digestion features from threat intelligence platforms like Recorded Future or Talos are valuable."
"We check a lot of logs in ArcSight Logger because we're running a massive database platform."
"I am impressed with the product's ability to pick up logs. It also has UEBA which has reduced the time to take charge of the events."
"ArcSight's robustness is its most valuable feature."
"The indexing and data collection are valuable."
"The ability to digest any information and then correlate it in accordance with what you need is valuable. The ability to connect to pretty much everything and bring the information in the same format is also valuable. On top of that, we can use their language in order to create and customize the dashboards, correlations, or analytics that we want to incorporate."
"The dashboard and reporting are very good... It provides very good visibility in a hybrid cloud environment, and you can build custom utilization APIs using Splunk."
"I haven't had the chance to properly sink my teeth into Enterprise Security but so far I like that they added the MITRE ATT&CK features."
"I like Splunk's data aggregation and search capabilities."
"The Splunk user community and forum are most valuable."
"The UI of Splunk makes it easier for our analysts to move around and see what they need to see."
"It is very scalable."
"It is really difficult to work in ArcSight Logger, as it is very slow."
"The initial setup was a little bit complex."
"Using the ArcSight Logger dashboard is not particularly intuitive or efficient, so it is important to be trained in its use."
"The product's connectors should work better and the user manuals need an update."
"I had some latency issues for two months. I had to increase our storage capacity significantly to reduce the latency."
"Splunk could enhance its services by providing more comprehensive professional assistance aimed at optimizing our investment."
"This solution could be improved by better pricing in general and by easier installation."
"In the next releases, I would like to see more pricing flexibility."
"Splunk could be improved by reducing the cost. The cost is one of the biggest challenges for us in keeping to our production requirements."
"We were inundated with the amount of alerts and alarms that we could get out of it. It is also a resource hog and we didn't have the resources to support it on-prem so we're taking it offline now."
"The algorithms customization of Splunk could improve. They have limited algorithms for machine learning support. If they can allow the user to add more machine learning algorithms, such as the ability to choose the algorithm that a user might want. Additionally, they should provide the required libraries for those algorithms, and then analyzes the data for use."
"It would be nice if they had a wizard to construct searches, including more complex searches that include math or statistics."
"While there aren't any major areas where the solution has to be improved, there are certain integrations that are still not available. I would specifically like to see legacy applications integrated."
ArcSight Logger is ranked 32nd in Log Management with 5 reviews while Splunk Enterprise Security is ranked 1st in Log Management with 71 reviews. ArcSight Logger is rated 6.8, while Splunk Enterprise Security is rated 8.4. The top reviewer of ArcSight Logger writes "Extremely stable and scalable and can manage large amounts of log data". On the other hand, the top reviewer of Splunk Enterprise Security writes "Can be used to find any threats or vulnerabilities inside a user’s environment". ArcSight Logger is most compared with IBM Security QRadar, Elastic Security, VMware Aria Operations for Logs, LogRhythm SIEM and Wazuh, whereas Splunk Enterprise Security is most compared with Wazuh, Microsoft Sentinel, Dynatrace, Elastic Security and Fortinet FortiAnalyzer. See our ArcSight Logger vs. Splunk Enterprise Security report.
See our list of best Log Management vendors.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
