8/9/2019 4AA4-4849ENW

1/2

Data sheet

HP ArcSight LoggerUnify collection, storage, and analysis of logs for intelligence

HP ArcSight Logger delivers a cost-e ective universal logmanagement solution that uni es searching, reporting,alerting, and analysis across any type of enterprise machine

data. This uni ed machine data can be used for compliance,regulations, security, IT operations, and log analytics.

Comprehensive collectionCollect, categorize, and normalize log data from more than 350 distinct log-generating sourcesfor complete log analysis. HP ArcSight Logger supports data collection from the broadest set ofsources at high speed.

Ease of deployment and managementHP ArcSight Logger can be managed through a centralized management center (HP ArcMC), enablingyou to manage large deployments through a single console or manage small deployments withlimited resources. This lets you focus on your use cases and not the tool itself. HP ArcSight Loggeralso comes as an appliance, software, and as a virtual appliance for deployment exibility.

Ultra-fast forensics through full-text searchingHP ArcSight Logger leverages the HP ArcSight Common Event Format (CEF) that enriches themachine data with rich metadata allowing you to perform full-text searches. Machine data is alsofully indexed and is available for fast searching and reporting via a simple search interface in your logmanagement solution. Interesting search patterns can easily be converted into real-time alerts. TheCEF data does not require familiarity with source-speci c log formats thereby avoiding the need fordevice or vendor-speci c analysis or subject matter expertise.

Highlights

Comprehensive log collection and storage fromover 350 sources

Ultra-fast searching of logs in full-text

Simpli ed forensic investigation

Built-in content for regulatory and securitycompliance requirements

Support IT operational analytics

Store years worth of data through highcompression ratio of up to 10:1

Scale to support billions of events per day

Extend log management to security informationand event management (SIEM) solution

8/9/2019 4AA4-4849ENW

2/2