ArcSight Reviews - Pros & Cons, Ratings & more

ManageEngine Log360

Datadog

ManageEngine EventLog Analyzer

IBM Security QRadar

Symantec Data Center Security

Logsign Unified SO Platform

ArcSight is a vulnerability scanning software that helps businesses utilize machine learning technology to detect threats, handle investigations, create prioritized event lists, and more on a centralized platform. It enables staff members to extract entities from log files and observe events and behavior across users, IP addresses, servers, and machines.

ArcSight

Web-based

Windows

Manager Information Systems Security

ESM's log supporting surface is very high and almost all the types of logs are supported which is one of the best features of the tool.

Further logs can be routed through the smart connectors and through these connectors EPS count can be managed which is a good option when it comes to licensing.

Solution Consultant

Processing power is amazing, it can analyze hundreds of gigs per minute very easily and efficiently with not a lot of resource consumption.

Senior Information Security Specialist

Sometimes we have some problems with search mechanism, it needs some improvements.

Because of our big organization and large products which gather logs sometimes we have problems with troubleshooting issues that is little bit hard for us.

Excellent Enterprise Grade Security Log Analyzer.

Account Manager

Very powerful SIEM with plenty of predefined corellation scenarios. Could be integrate easily with almost everything.

Cyber Incident Response Manager

The 'meat' of this product is very powerful allowing for complex searches of ingested log data.

Our company and our partners facing a lot incidents masked as a normal events. The SIEM helped us to be protected and to prioritize the events, based of the security risk. Automations of the responses is the other feauture that is a key differentiator.

Heart of the SOC

I have been using this product for about 3 years. We use ESM and Logger products. As a SIEM solution, we are able to host this product in our environment. We monitor the alarm and correlation rules, abnormal activities and cyber threats, which we write through the logs we receive from various security products and applications in our environment and monitor our incident response processes.

It provides powerful features to make every operation with received logs.

Thank you for the 4-star review, it is very much appreciated. We did note your comments about your `least favorite feature? and this certainly helps us build a better product. ArcSight has Case Management; that is different from Ticket Management. Ticket Management is more of a support function / ITSM issue; and while ArcSight does have connectors for ServiceNow, we know it's been problematic for some customers. As you point out, we typically recommend that Professional Services be engaged as each implementation has its idiosyncrasies. That said, improving this area is a KPI for us and we will be looking at options as we move to advance the ?Open? portion of our strategy in late 2019. We'd be happy to hear your thoughts / recommendations in more depth.

Arcsight ESM is a powerful but complex tool that needs deep knowledge of the product.

Arcsight - Good but complex SIEM solution

We have a lot of security products and applications. We gather all logs from these products and we can easily manage our logs according to rules. Reporting  module and dashboard are the best feature of this product. 

Micro Focus ArcSight SIEM

My name is Michael Mychalczuk, and I am the Director Of Product Management for Micro Focus' Security Operations portfolio which includes ArcSight.  I would like to personally take a moment, and thank you for the review you provided. We are thrilled that you were able to find the product feature rich, easy to use, and find value in the solution. We do agree that there is more we can do in making the product easier to use, and we are working to make that happen in the near future. In fact, any suggestions you might have to improve ArcSight, please do not hesitate to submit them to the Idea Exchange: https://community.microfocus.com/t5/ArcSight-Idea-Exchange/idb-p/ArcSightIdeas. Speaking for the entire ArcSight product team nothing makes us happier than finding someone who is very likely to recommend us to other.

ArcSight Review

Best On-prem SIEM tool

The ArcSight product is seen as one of the leaders and leaders in the Safety Information and Event Management category, according to Gartner's Magic Quadrant report.

ArcSight's approach is to create a single point of communication for observation and control. Gathers all appropriate event data and puts it into a standard form. It collects at a central location for analysis. As a result, the company allows you to easily monitor and, if necessary, take measures. This increases your compliance with your legal requirements and business continuity.

World of Data

Lack of Support

Thank you for the review and I'm sorry to read that your experience with Micro Focus was not wholly what we strive to deliver.

It is true that our connectors do not yet support some popular SSO products like Okta. I have reached out to the ArcSight Connectors Product Manager for information on the roadmap. We do support many others, such as RSA, IBM, Layer 7, etc.

This does not solve the challenges you experienced with Customer Support. I would welcome the opportunity to remediate the situation. Could you be more specific? You should receive my contact details via Capterra.

I look forward to having the opportunity to help improve your impression of Micro Focus.

David Shephard
Program Manager, Customer Engagement
david.shephard@microfocus.com

Very powerfull Security Log Analyzer and visualizer, simply enterprise grade

Excellent Enterprise Grade Security Log Analyzer

Luis,

My name is Michael Mychalczuk, and I am the Dir. Of Product Management for Micro Focus' Security Operations portfolio which includes ArcSight. I would like to personally take a moment, and thank you for the review you provided. We are thrilled that you were able to find the product feature rich, easy to use, and find value in the solution. We do agree that there is more we can do in making the product easier to use, and we are working to make that happen in the near future. Speaking for the entire ArcSight product team nothing makes us happier than finding someone who is very likely to recommend us to other. I would also like to direct you to our Ideas Exchange: https://community.microfocus.com/t5/ArcSight-Idea-Exchange/idb-p/ArcSightIdeas?utm_campaign=00164298 to share your ideas with us.  

Respectfully
Michael Mychalczuk

Poor. 'meat' of the product is good but the UI is difficult to use. Due to this, my company moved to Logrhythm, A company leveraging ex Arcsight employees to improve on the faults of Arcsight whilst retaining the benefits

Outdated UI - Powerful backend 

The current configuration of the platform allows the intake of millions of events and its ability to integrate third-party applications and addons facilitates the availability of a functional SIEM in a reasonable time. However, deepening and getting to have very customized configurations implies...

ArcSight Reviews (2025)

Suggested alternatives

Pros and cons

12 reviews