ArcSight Logger vs Graylog comparison

Cancel
You must select at least 2 products to compare!
OpenText Logo
2,139 views|2,004 comparisons
80% willing to recommend
Graylog Logo
10,115 views|8,549 comparisons
94% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between ArcSight Logger and Graylog based on real PeerSpot user reviews.

Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed ArcSight Logger vs. Graylog Report (Updated: April 2024).
772,649 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The most valuable feature is the search capability, which is simple to use.""The technical support team is good...It is a scalable solution.""The log digestion features from threat intelligence platforms like Recorded Future or Talos are valuable.""It's an efficient solution.""It is one of the best products available in the market.""The solution provides information about the risk factors.""The most valuable feature is the level of detail that you can see about certain events, even when they do not come up in the console.""It provides in-depth information on business activities once we log into the system."

More ArcSight Logger Pros →

"We have scaled from a single machine installation (a VM with a Graylog + ES + MongoDB) to (2 Graylog + 2 ES + 3 MongoDB). This was done smoothly with a minimal impact on logging.""Storing logs in Elasticsearch means log retrieval is extremely fast, and full text search is available by default.""The build is stable and requires little maintenance, even compared to some extremely expensive products.""Graylog's search functionality, alerting functionality, user management, and dashboards are useful.""It is used as a log manager/SIEM. It provides visibility into the infrastructure and security related events.""We run a containerized microservices environment. Being able to set up streams and search for errors and anomalies across hundreds of containers is why a log aggregation platform like Graylog is valuable to us.""The best feature of Graylog is the Elasticsearch integration. We can integrate and we can run filters, such as an event of interest, and those logs we can send to any SIEM tool or as an analytic. Additionally, there are clear and well-documented implementation instructions on their website to follow if needed.""One of the most valuable features is that you are able to do a very detailed search through the log messages in the overview."

More Graylog Pros →

Cons
"ArcSight has been sold two or three times, and the quality has decreased.""The product's connectors should work better and the user manuals need an update.""I would rate the technical support only 5 out of 10. The technical support is not satisfactory.""The console in older versions is not user-friendly.""Using the ArcSight Logger dashboard is not particularly intuitive or efficient, so it is important to be trained in its use.""We find that the search and access functionality is quite slow.""I would like to see better scheduling in the next release of this solution.""In the next release, I want to see more intelligence."

More ArcSight Logger Cons →

"Lacks sufficient documentation.""Graylog can improve the index rotation as it's quite a complex solution.""I would like to see a date and time in the Graylog Grok patterns so that I can save time when searching for a log. I like how the streams and the search query work, but adding a date and time will allow me to pull out a log in a milli-second.""I would like to see a default dashboard widget that shows the topology of the clusters defined for the graylog install.""It would be great if Graylog could provide a better Python package in order to make it easier to use for the Python community.""I hope to see improvements in Graylog for more interactivity, user-friendliness, and creating alerts. The initial setup is complex.""More customization is always useful.""With technical support, you are on your own without an enterprise license."

More Graylog Cons →

Pricing and Cost Advice
  • "ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."
  • "The pricing is quite harsh."
  • "It's not cheap at all as it's a big product and has been in the market for quite some time now."
  • "ArcSight is an expensive solution."
  • "I would rate the product a seven out of ten since it's an enterprise product."
  • "I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."
  • "Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."
  • "We have a lifetime license, so we don't pay a monthly fee."
  • More ArcSight Logger Pricing and Cost Advice →

  • "Having paid official support is wise for projects."
  • "I am using a community edition. I have not looked at the enterprise offering from Graylog."
  • "If you want something that works and do not have the money for Splunk or QRadar, take Graylog.​​"
  • "​You get a lot out-of-the-box with the non-enterprise version, so give it a try first."
  • "Consider Enterprise support if you have atypical needs or setup requirements.​"
  • "I use the free version of Graylog."
  • "It's an open-source solution that can be used free of charge."
  • "We're using the Community edition."
  • More Graylog Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Log Management solutions are best for your needs.
    772,649 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.
    Top Answer:The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.
    Top Answer:The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I think… more »
    Top Answer:The product is scalable. The solution is stable.
    Top Answer:We are using the free version of the product. However, the paid version is expensive.
    Top Answer:Since it's a free tool, I don't have much to say. Troubleshooting is important to me. The initial setup is complex. I hope to see improvements in Graylog for more interactivity, user-friendliness, and… more »
    Ranking
    20th
    out of 95 in Log Management
    Views
    2,139
    Comparisons
    2,004
    Reviews
    10
    Average Words per Review
    341
    Rating
    7.1
    11th
    out of 95 in Log Management
    Views
    10,115
    Comparisons
    8,549
    Reviews
    6
    Average Words per Review
    802
    Rating
    7.3
    Comparisons
    Also Known As
    Micro Focus Arcsight Logger, HPE Arcsight Logger
    Graylog2
    Learn More
    Overview
    HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

    Graylog is purpose-built to deliver the best log collection, storage, enrichment, and analysis. Graylog is:

    • Considerably faster analysis speeds.
    • More robust and easier-to-use analysis platform.
    • Simpler administration and infrastructure management.
    • Lower cost than alternatives.
    • Full-scale customer service.
    • No expensive training or tool experts required.
    Sample Customers
    China Merchants Bank, Bank AlJazira, Banca Intesa
    Blue Cross Blue Shield, eBay, Cisco, LinkedIn, SAP, King.com, Twilio, Deutsche Presse-Agentur
    Top Industries
    REVIEWERS
    Financial Services Firm22%
    Government22%
    Comms Service Provider17%
    Retailer6%
    VISITORS READING REVIEWS
    Financial Services Firm18%
    Computer Software Company15%
    Government11%
    Comms Service Provider8%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Comms Service Provider10%
    Government8%
    Educational Organization7%
    Company Size
    REVIEWERS
    Small Business24%
    Midsize Enterprise30%
    Large Enterprise45%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise15%
    Large Enterprise65%
    REVIEWERS
    Small Business50%
    Midsize Enterprise7%
    Large Enterprise43%
    VISITORS READING REVIEWS
    Small Business33%
    Midsize Enterprise18%
    Large Enterprise49%
    Buyer's Guide
    ArcSight Logger vs. Graylog
    April 2024
    Find out what your peers are saying about ArcSight Logger vs. Graylog and other solutions. Updated: April 2024.
    772,649 professionals have used our research since 2012.

    ArcSight Logger is ranked 20th in Log Management with 31 reviews while Graylog is ranked 11th in Log Management with 18 reviews. ArcSight Logger is rated 7.8, while Graylog is rated 8.0. The top reviewer of ArcSight Logger writes "A scalable and stable solution that enables users to see all the event logs in one place". On the other hand, the top reviewer of Graylog writes "Great detailed search features and easy Java integration, but needs improvement in integration with Python". ArcSight Logger is most compared with Splunk Enterprise Security, IBM Security QRadar, Elastic Security and Wazuh, whereas Graylog is most compared with Grafana Loki, Wazuh, syslog-ng, Fortinet FortiAnalyzer and Splunk Enterprise Security. See our ArcSight Logger vs. Graylog report.

    See our list of best Log Management vendors.

    We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.