# OpenText ArcSight Enterprise Security Manager (ESM) Reviews **Vendor:** OpenText **Category:** [Security Information and Event Management (SIEM) Software](https://www.g2.com/categories/security-information-and-event-management-siem) **Average Rating:** 3.7/5.0 **Total Reviews:** 17 ## About OpenText ArcSight Enterprise Security Manager (ESM) ArcSight Enterprise Security Manager (ESM) is a comprehensive threat detection, analysis, triage, and compliance management SIEM platform that dramatically reduces the time to mitigate cyber-security threats. ## OpenText ArcSight Enterprise Security Manager (ESM) Reviews ### 1. A SIEM tool for monitoring real-time security events. **Rating:** 4.5/5.0 stars **Reviewed by:** Hiran T. | SOC Analyst, Information Technology and Services, Mid-Market (51-1000 emp.) **Reviewed Date:** February 28, 2024 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** ArcSight ESM gives real-time security events from the security devices, network devices, and endpoint machines. The ArcSight connectors support Linux and Windows servers. The microfocus customer support is good and responsive. The User interface of the ArcSight ESM is in classic style. It is easy to assign and annotate the security to the client and senior security analysts. We can integrate the firewall, proxy, Web application firewall, EDR, Servers, IPS, IDS, etc with the Arcsight SIEM Tool. The security analyst can create custom correlation rules and import the most used case for correlation. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** The license and pricing model is expensive for small-scale enterprises. Violation of the license usage may result in disabling the searching and reporting feature. The implementation of ArcSight needs skill and support from the vendor to deploy on the IT infrastructure. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** ArcSight ESM helps in looking over the real-time cyber attacks happening to the company. We can see the security events in real time and can help in incident response. We can create dashboards and reports according to the client's requirements and also share the base logs and security logs with the client. ### 2. The Pioneer in SIEM **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) **Reviewed Date:** September 13, 2023 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** What I liked about ArcSight ESM was its robust security event management capabilities. It allowed us to efficiently collect, correlate, and analyze security data from various sources, aiding us in quickly identifying and responding to past security threats. The platform's flexibility in customization, alerting, and reporting made it a valuable asset in our previous cybersecurity efforts. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** What I didn't like about ArcSight ESM was its complexity and learning curve. It required a significant amount of time and effort to fully grasp its features and functionalities. Additionally, the licensing costs for certain modules or additional features can be quite high, making it less accessible for smaller organizations with limited budgets. While powerful, it may not be the most cost-effective solution for everyone. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** ESM has been instrumental in solving our security monitoring and threat detection challenges. Its ability to collect and analyze a wide range of security data has helped us identify and address security incidents more effectively. This, in turn, has reduced our exposure to potential data breaches and other security risks. Additionally, ESM's reporting capabilities have simplified compliance reporting, saving us valuable time and resources. Overall, ESM has significantly enhanced our cybersecurity posture by providing actionable insights and facilitating a proactive approach to security. ### 3. Excellent customizability and maneuverability for analysts **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) **Reviewed Date:** November 15, 2022 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** ArcSight offers incredible customizability for creating, viewing and managing any use cases a SOC needs from dashboards, active channels, reports, trends and many others. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** The console's UI seems a bit outdated, also, selecting a dashboard or an active channel from the viewer changes the location of all other tabs on it, which is kind of annoying, to me, at least. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** Excellent at creating dashboards and active channels for any search an analyst wants to perform. Great reporting capabilities; reports can be set up and generated in no time. ### 4. Very basic Siem tool **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** August 31, 2022 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** Well used this product for 2 to 3 years, Only good thing about this product was the event search tab which was easy to search and hunt while doing an investigation. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** The agent is resource intensive, the UEBA module is missing, Alarm/alert trigger quite late which leads to a breach of SLAs. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** Its helping us in analyzing logs , once they are aggregated and normalized we can see if any anatomy is there in logs which further helps to hunt malicious activities within firm. ### 5. Arcsight ESM **Rating:** 4.5/5.0 stars **Reviewed by:** Munigala R. | Cyber Security Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** March 08, 2022 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** Each log can be viewed in detail if we have integrated all the devices teuiqred to monitor properly from logger.Also for additional investigation we can analyse the logger logs which is pretty simple to check. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** Integration of devices to ESM is time taking and gets lots of errors and needs lots of experience. **Recommendations to others considering OpenText ArcSight Enterprise Security Manager (ESM):** Good as SIEM tool to monitor.There are recent upgradation on the tool by the vendor where they have automated few of the integration services **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** We can analyse the user logs, networks logs and any other device logs of an organisation which helps in monitoring the environment to keep it secure from anamolous activities. ### 6. very good solution, it have a lot of features. **Rating:** 4.5/5.0 stars **Reviewed by:** Fabrice B. | Technical Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** May 29, 2020 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** The scalability and flexibility provided. You can customize and implement any type of use case. Variables and custom columns very useful. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** Multiple interfaces Provided to access and manage the SIEM. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** Security issue and problems detection and alert. Customs application integration via Flex connectors and corresponding use cases. ### 7. Highly customisable and scalable solution **Rating:** 4.5/5.0 stars **Reviewed by:** Mohit G. | Asst. Vice President - Information Security , Enterprise (> 1000 emp.) **Reviewed Date:** August 31, 2021 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** Arcslight gives you plenty of option of to play with, it is highly customizable in terms of dashboards and reporting. It can be integrated with almost any device and ticketing system that gives it an ability to create tickets for the potential incidents automatically. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** It's GUI can be overwhelming at the beginning but with time you can get used to of it. **Recommendations to others considering OpenText ArcSight Enterprise Security Manager (ESM):** If you are looking for an enterprise wide solution capable of handle huge amount of data and can create insightful dashboards and automatically create tickets, then this will fit the bill. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** Mostly detecting potential attacks on the enterprise and automating the ticketing of incidents. ### 8. ArcSight - The best on-prem SIEM tool **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** July 13, 2021 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** ArcSight has the best co-relation engine when it comes to the SIEM tool. It helps users to follow the CIA triad and the rules engine is the best selling point of the ArcSight ESM. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** ArcSight does not have very flexible support for the third party devices when it comes to integration compared to it's competitors it supports very less devices for integration. **Recommendations to others considering OpenText ArcSight Enterprise Security Manager (ESM):** If you are looking for a on prem SIEM tool than I think that ArcSight Enterprise Security Manager is the best SIEM tool out there in the markets right now. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** We have been using the ArcSight as the SIEM tool for our clients environment and it helps us in asset monitoring, events monitoring, threat detection and IOC monitoring. ### 9. Support has been fantastic with MF **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Banking | Mid-Market (51-1000 emp.) **Reviewed Date:** September 02, 2021 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** The product is good. This have defined roadmap & support is good. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** Training is what is critical, MF is lagging on that front. Certications support & training should provided **Recommendations to others considering OpenText ArcSight Enterprise Security Manager (ESM):** Yes, its a good security product. I plan to use the additional features available to make my environment more secured. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** We about 4 + tickets, pertaining to suppory is logged with MF. ### 10. Decent tool for security management, needs revamping **Rating:** 3.0/5.0 stars **Reviewed by:** Nina B. | Sr. Manager, Product, Customer Resiliency, Mid-Market (51-1000 emp.) **Reviewed Date:** June 29, 2021 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** Fairly customizable, easy to use and their support works quickly with users **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** I wish that the newest security patches were updated to the manager a little sooner, sometimes it takes up to 3 days **Recommendations to others considering OpenText ArcSight Enterprise Security Manager (ESM):** I would just check if it fulfills your specific capability requirements and then commit to it, if it does. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** Threat detection and monitoring ### 11. Micro Focus ArcSight Enterprise Security Manager **Rating:** 2.5/5.0 stars **Reviewed by:** Kelvin N. | Software validation engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** August 17, 2021 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** The GUI was easy to use and the data collected was relevant **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** Sometimes it wasn't easy to fetch specific data **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** Protecting intellectual property ### 12. Robust Solution for enterprises **Rating:** 4.0/5.0 stars **Reviewed by:** Carlos G. | Mid-Market (51-1000 emp.) **Reviewed Date:** August 25, 2020 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** The ESM is very granular, you can define any kind of policie you want, using several resources like lists, networks. The Smartconnectors allow us to monitor the major of the products available in the market. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** The solution havent changed a lot during last years, other vendors have implemented solutions like user behavior inside the SIEM solution. The techinical support some times takes a long time to solve a problem. **Recommendations to others considering OpenText ArcSight Enterprise Security Manager (ESM):** The solution can really help you improve your security environment through a very powerfull and granular console, where you can configure rules to monitor any kind of problem. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** I can monitor different kind of tools from several vendors, most of the toos are nativelly supported, the rules allow us to monitor any anomally in the environment, bringing good results for the company. ### 13. Arcsight Esm **Rating:** 5.0/5.0 stars **Reviewed by:** Viral P. | Principal Software Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** July 29, 2020 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** Monitoring of security policy across multiple platforms. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** Too many logging. Sometimes cumbersome to find issue. **Recommendations to others considering OpenText ArcSight Enterprise Security Manager (ESM):** Could be expensive. So check requirement scope. How frequently you going to upgrade. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** Improved process of controlling configuration and deployment. ### 14. flexibility **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Banking | Mid-Market (51-1000 emp.) **Reviewed Date:** September 10, 2020 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** flexibility for font integration the level of complexity that can be taken to develop a use case **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** response times when querying the database, because it uses a limited DB engine. data synchronization should be improved in HA environments **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** modules and services of high availability ### 15. Amazing product, effective and powerful eco-system. **Rating:** 5.0/5.0 stars **Reviewed by:** Massimo F. | Small-Business (50 or fewer emp.) **Reviewed Date:** June 01, 2020 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** This is not only a unique security product, it's an eco-system of different and integrated security products **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** Security products as ArcSight are yet not so simple to use. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** I use ArcSight in my organization only to understand the power of the product in a LAB enviroment in order to propose to potential customers. ### 16. The jack of all trades...but mostly the master of nothing **Rating:** 3.0/5.0 stars **Reviewed by:** Noah W. | Data Scientist Intern, Computer Software, Enterprise (> 1000 emp.) **Reviewed Date:** December 12, 2017 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** It is capable of incredible customization. I quickly picked up on how to use most of the features but I am still learning all of the nuances, which is really a good thing! **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** The user interface is archaic and slow, it could be the implementation at my company, but it is so so slow. The user interface is confusing, it is logical so it wasn't hard to pick up on, but I suspect that if someone was not technically savvy they would be in trouble. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** Customization, graphs, and diagrams make it easy to show how stuff works. As a user coming in to an existing environment I appreciated being able to trace back what everything was doing and where it is connected to. ### 17. It doesn't matter how good you are if you don't ever fix your bugs **Rating:** 1.0/5.0 stars **Reviewed by:** Gregg W. | President, Small-Business (50 or fewer emp.) **Reviewed Date:** December 16, 2017 **What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?** I like the aggregation capability of folding multiple events into a single event, to save space and search faster. **What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?** My client has had this product for many years and there are bugs that they reported in the first months of using it that are acknowledged but are still not patched. We are done. We are moving to Splunk. **What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?** We (like everybody) use this for a SIEM at the core of our security posture/defense and it is definitely well-suited for this. ## OpenText ArcSight Enterprise Security Manager (ESM) Discussions - [What is ESM in Siem?](https://www.g2.com/discussions/what-is-esm-in-siem) - [What is the purpose of ArcSight?](https://www.g2.com/discussions/what-is-the-purpose-of-arcsight) - [What are the components of ArcSight?](https://www.g2.com/discussions/what-are-the-components-of-arcsight) - [What is ESM in security?](https://www.g2.com/discussions/what-is-esm-in-security) - [How do i train my SOC team better to optimize the solution](https://www.g2.com/discussions/how-do-i-train-my-soc-team-better-to-optimize-the-solution) - 1 upvote - [View OpenText ArcSight Enterprise Security Manager (ESM) pricing details and edition comparison](https://www.g2.com/products/opentext-arcsight-enterprise-security-manager-esm/reviews?section=pricing&secure%5Bexpires_at%5D=2026-05-30+20%3A14%3A53+-0500&secure%5Bsession_id%5D=59731029-77fa-4a0c-a71d-01320666280b&secure%5Btoken%5D=6ba20686d9e374be8384a9a60237e683b994d09aaf23ec59643e7e9ea5fcd07c&format=llm_user) ## OpenText ArcSight Enterprise Security Manager (ESM) Features **Network Management** - Activity Monitoring - Asset Management - Log Management **Incident Management** - Event Management - Automated Response - Incident Reporting **Security Intelligence** - Threat Intelligence - Vulnerability Assessment - Advanced Analytics - Data Examination **Agentic AI - Security Information and Event Management (SIEM)** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making ## Top OpenText ArcSight Enterprise Security Manager (ESM) Alternatives - [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) - 4.4/5.0 (272 reviews) - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) - 4.4/5.0 (280 reviews) - [Splunk Enterprise Security](https://www.g2.com/products/splunk-enterprise-security/reviews) - 4.3/5.0 (222 reviews)