The data correlation feature in ArcSight Security Orchestration Automation Response helps to improve incident response times, but I believe that there are many other things that need to be done. The competition is coming up with new jargons and new features that need to be taken into account. I believe that ArcSight Security Orchestration Automation Response also has to change the user experience slightly to a phase-based view, which seems to be slightly dull, and many times customers or partners have reported this back. The UI could be slightly better and that is an area for improvement. ArcSight Security Orchestration Automation Response is taking an edge lesser than the competition. When I look at that, there is Splunk, Exabeam, Gurucul, Securonix, and others that are taking quite a leverage in the market. Three or four years ago, the market ratio was about 40 to 45% captured by ArcSight Security Orchestration Automation Response, but now it has been reduced to 10 to 12%. As much as the competition needs to be evaluated on the functionality perspective, I think ArcSight Security Orchestration Automation Response is losing its ground, so it needs to buckle up.
Find out what your peers are saying about OpenText, LevelBlue, SolarWinds and others in Security Information and Event Management (SIEM). Updated: January 2026.
Security Information and Event Management (SIEM) tools offer comprehensive visibility and management of an organization’s security events through real-time analysis and correlation of data from multiple sources.
SIEM solutions provide a centralized platform for managing security alerts and logs from various sources such as network devices, servers, and applications. They help identify and mitigate potential threats by analyzing event data for unusual patterns and correlations. These tools...
The data correlation feature in ArcSight Security Orchestration Automation Response helps to improve incident response times, but I believe that there are many other things that need to be done. The competition is coming up with new jargons and new features that need to be taken into account. I believe that ArcSight Security Orchestration Automation Response also has to change the user experience slightly to a phase-based view, which seems to be slightly dull, and many times customers or partners have reported this back. The UI could be slightly better and that is an area for improvement. ArcSight Security Orchestration Automation Response is taking an edge lesser than the competition. When I look at that, there is Splunk, Exabeam, Gurucul, Securonix, and others that are taking quite a leverage in the market. Three or four years ago, the market ratio was about 40 to 45% captured by ArcSight Security Orchestration Automation Response, but now it has been reduced to 10 to 12%. As much as the competition needs to be evaluated on the functionality perspective, I think ArcSight Security Orchestration Automation Response is losing its ground, so it needs to buckle up.