We found the correlation engine to be very good. It takes logs from different types of devices and does the correlation in a good way.
OpenText Behavioral Signals boasts a robust correlation engine, excelling in log processing across devices, and offers customizable environments surpassing competitors like Splunk. Despite its strength, it demands frequent updates and enhanced rule feeds to address global threats effectively. ArcSight Intelligence, while providing comprehensive dashboards and valuable data management features, suffers from slower performance and high pricing, requiring improvements for better market appeal. Enhancing both platforms could significantly benefit tech buyers.
