ArcSight Announces Fundamental Breakthrough in Log Data Management

Next Generation ArcSight Logger Removes Tradeoffs Facing Log Management Industry With Patent-Pending 3-in-1 Data Storage Architecture

CUPERTINO, CA – November 3, 2008 – ArcSight, Inc. (NASDAQ: ARST), a leading global provider of compliance and security management solutions, today announced the third generation of its log management platform, ArcSight Logger 3, a single appliance that captures, stores, alerts, searches and reports on log data.

“Most people are familiar with the old saying that you can have it good, fast, or cheap, as long as you pick only two,” said Hugh Njemanze, CTO and EVP of research and development of ArcSight. “The log management industry has faced the same limitation. In the past, customers could not get all three: good data analysis, fast data capture, and affordability. We’ve designed Logger 3 to give the best of all three – great high speed search and “business intelligence caliber” reporting, fast data capture, and packaged on a single, cost-effective appliance.”

High Speed, High Volume Log Management Delivered
The amount of log data being generated and stored is exploding as more users access more networks and systems and more logging is required for compliance, security, forensics, and IT operations. To manage this volume of information, organizations rely on log management solutions for capturing, storing, searching, and reporting on security, audit, and IT operational logs. To date, all solutions on the market forced customers to either purchase multiple appliances or choose between fast data capture, fast search and reporting, and massive storage capacity.

ArcSight Logger 3 delivers a new breakthrough data storage architecture that removes the tradeoff. Logger 3 can capture up to 100,000 events per second and can search up to 3,000,000 events per second, while storing up to 35 terabytes of log information, all on a single appliance. Historically, log management solutions addressed the performance and storage trade-off by requiring two or more dedicated appliances each focused on either storage or reporting. Logger 3 makes that historical need obsolete with its 3-in-1 architecture. ArcSight has filed patent applications on this breakthrough architecture.

Customers interested in green initiatives or just facing increasing energy and data center operations costs can also benefit from purchasing fewer appliances to capture and store the ever increasing amount of log data. At the same time, these customers will gain extremely fast data capture and reporting performance.

Industry Leading Business Analytics
Coupled with this no tradeoff log data architecture is industry leading analytics characterized as “forensics-on-the-fly.” This capability enables security, compliance, IT or forensics teams to quickly conduct informative top-down investigations. These teams can do point-and-click drill down into source events from dashboards, reports, searches, and alerts.

“We believe that Logger 3 changes the game in the log management market,” said Reed Henry, senior vice president of marketing at ArcSight. “We challenge any and all competitors to deliver the same performance and analytics on a single appliance. When it comes to log management, accept no compromise.”

Users Underscore Logger 3 Benefits
An example of how an IT operations team can benefit from Logger 3 is demonstrated by the University of Tennessee, a very large public university system. “In the past, a UT staffer would have to manually sift through all the logs on the school’s routers and switches to identify hardware that might be failing. This was a big problem because the school’s IT department has its hands full with more critical projects,” said James Perry, information security officer, University of Tennessee. “But Logger is now able to proactively identify issues without the need for manual intervention. This new level of automation is helping the university’s IT organization save significant time and money”

Pricing & Availability
ArcSight Logger 3 is available now. Pricing starts at $20,000.

For More Information
Visit ArcSight online to learn more about ArcSight Logger 3.

About ArcSight
ArcSight (NASDAQ: ARST) is a leading global provider of compliance and security management solutions that protect enterprises and government agencies. ArcSight helps customers comply with corporate and regulatory policy, safeguard their assets and processes, and control risk. The ArcSight platform collects and correlates user activity and event data across the enterprise so that businesses can rapidly identify, prioritize, and respond to compliance violations, policy breaches, cybersecurity attacks, and insider threats. For more information, visit www.arcsight.com.