OpenText Enterprise Security Manager Reviews

Name: OpenText Enterprise Security Manager
Brand: OpenText
Rating: 3.9 (97 reviews)

3.9 out of 5

97 reviews
88% willing to recommend

What is OpenText Enterprise Security Manager?

OpenText Enterprise Security Manager enables real-time threat detection through scalable and adaptable solutions, integrating seamlessly with multiple platforms for complex security scenarios across different environments.

Get the OpenText Enterprise Security Manager Buyer's Guide and find out what your peers are saying about OpenText Enterprise Security Manager, Wazuh, Microsoft Sentinel and more!

OpenText Enterprise Security Manager is the #21 ranked solution in top Security Information and Event Management (SIEM) solutions. PeerSpot users give OpenText Enterprise Security Manager an average rating of 7.8 out of 10. OpenText Enterprise Security Manager is most commonly compared to Wazuh: OpenText Enterprise Security Manager vs Wazuh. OpenText Enterprise Security Manager is popular among the large enterprise segment, accounting for 57% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 15% of all views.

Buyer's Guide

OpenText Enterprise Security Manager

July 2025

Get the report

Helped 863,641 peers since 2012

Featured OpenText Enterprise Security Manager reviews

Gaurav Ranade

CTO at Rah Infotech Pvt Ltd

ArcSight is a legacy technology, and many customers want AI-powered technologies integrated with it. That hasn't been done yet, but ArcSight needs to catch up with the newer solutions and technologies available in the market. It can't just rely on the legacy technology from 2010 or 2012. You can't run that in 2024. It's a legacy technology with its own limitations. Customers often face issues that other software or newer solutions can resolve easily. That's the main challenge we face from customers right now. So, the only concerns are that AI needs to be integrated and scalability improved. Those are the main areas to be improved.

Read full review

Ramnesh Dubey

Solutions Architect at Ericsson

The first limitation is with the ArcSight Data Storage Manager (ADSM). ArcSight's total capacity is currently capped at 12 TB. This becomes an issue if a customer needs a longer real-time data retention period, such as exceeding 90 days or reaching a year or even ten months. Increasing the disk space beyond 12 TB is not currently possible. So, increasing the storage capacity is one area for improvement. Additionally, the real-time data retention is limited due to the 12 TB restriction. Depending on the Events Per Second (EPS) you receive, you might only be able to retain data for seven to ten days. Overall, the 12 TB limit is the main issue we face in terms of maximizing real-time data storage. Moreover, there are a few improvements I would like to see in future releases. My main suggestion for ArcSight is to simplify the deployment process. Currently, the installation process is quite complex. There are various components involved, including transformations, multiple installations, and containerization for various components. Ideally, I'd recommend that ArcSight allow the entire installation, including the ESM and database, to be completed within a single unified setup process for a streamlined experience. Additionally, having readily available and well-organized documentation for the step-by-step installation process would be incredibly helpful. I would also like to see better support.

Read full review

LENIN RAMIREZ

SIEM MANAGER at a comms service provider with 1,001-5,000 employees

It is easy to maintain the solution. The architecture can be somewhat complex because it uses specific components for different tasks, such as collecting data sources, parsing, generating reports, and displaying the main console. Each task has its dedicated component, which can make deployment more challenging. In contrast, our system uses fewer components, making deployment simpler and more efficient. This can save both time and money. Ultimately, customers want clear visibility and quick alerting to detect and respond to attacks as swiftly as possible. They also use machine learning and AI, which can be very helpful. For instance, AI can assist in filtering out false positives and providing more accurate information. When dealing with specific layers, AI can enhance the system's ability to identify relevant data and improve efficiency. IBM QRadar, for instance, uses machine learning with its UVA technology. On the other hand, Curator requires installing a specific agent on endpoints. Machine learning in Curator helps detect unusual activities, such as a user logging into a different computer than usual. This capability allows for early detection of potential security issues. Overall, I rate the solution an eight out of ten.

Read full review

OpenText Enterprise Security Manager mindshare

As of July 2025, the mindshare of OpenText Enterprise Security Manager in the Security Information and Event Management (SIEM) category stands at 1.2%, down from 1.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

PeerResearch reports based on OpenText Enterprise Security Manager reviews

Type	Title	Date
Category	Security Information and Event Management (SIEM)	Jul 27, 2025	Download
Product	Reviews, tips, and advice from real users	Jul 27, 2025	Download
Comparison	OpenText Enterprise Security Manager vs Splunk Enterprise Security	Jul 27, 2025	Download
Comparison	OpenText Enterprise Security Manager vs Wazuh	Jul 27, 2025	Download
Comparison	OpenText Enterprise Security Manager vs Microsoft Sentinel	Jul 27, 2025	Download

Title	Rating	Mindshare	Recommending
Wazuh	3.7	12.6%	80%	48 interviews Add to research
Microsoft Sentinel	4.1	6.8%	93%	97 interviews Add to research

Valuable Features

OpenText Enterprise Security Manager excels in flexibility, integration capabilities, and advanced correlation features. Users appreciate its scalability, ease of customization, and high performance in real-time threat detection. It supports diverse log sources and offers sophisticated data parsing, making it ideal for complex scenarios. The dashboard interface enhances user experience, providing comprehensive, customizable monitoring. Its powerful correlation engine effectively reduces noise, offering precise threat intelligence and efficient incident management.

"ArcSight Enterprise Security Manager (ESM) is very cheap compared to other tools."
"The most valuable feature is the correlation of different logs that are collected."
"On the positive side, ArcSight ESM's performance was excellent. It was very fast when writing queries. It provided good performance monitoring and had built-in rules to show which rules triggered most often and impacted performance. This performance monitoring was well-implemented."

Room for Improvement

OpenText Enterprise Security Manager requires enhancements in reporting, vendor log support, and technical assistance. Connectivity with other systems and high availability are also concerning. Users find the interface outdated and the platform complex, with a steep learning curve. The integration, customization, and documentation require improvement, along with processing speed and query performance. Updating its components for better ease of use, modern design, and seamless integration with current technologies like AI and machine learning is crucial.

"The stability of ArcSight Enterprise Security Manager (ESM) is not very robust."
"The only concern is that AI needs to be integrated"
"I faced some problems implementing certain attacks, which was my biggest concern. The visualization wasn't very good, and I couldn't create good monitoring dashboards."

ROI

OpenText Enterprise Security Manager's ROI is mixed, with some finding value in detecting more incidents and ensuring compliance while others struggle to justify its cost. It helps in preventing potential data breaches and supports compliance, though calculating tangible ROI proves challenging. Some experienced a noticeable return due to its effective threat detection and response, while others highlighted immediate returns from Micro Focus's licensing model. Many emphasize its intangible benefits despite high costs.

Pricing

OpenText Enterprise Security Manager has a varied pricing experience, with many users noting its high cost compared to competitors. The licensing model is often described as expensive, especially in large deployments, although some users find it cost-effective and affordable for enterprise licensing. Pricing is based on Events Per Second (EPS), which enables scalable options but can be hard to budget. Discounts are available for bulk or enterprise purchases, and hardware costs can impact total expenditure.

"Price-wise, ArcSight ESM was a bit high compared to competitors, which factored into our decision to switch to Splunk. It couldn't cover all our business needs for what we wanted to implement."
"Pricing is good, I'd rate the pricing a seven out of ten, with ten being low price. It's better than Splunk and IBM QRadar because their pricing is based on EPS."
"The pricing model is expensive compared to open-source alternatives."

Popular Use Cases

Organizations leverage OpenText Enterprise Security Manager mainly for log data consolidation and security information and event management. They use it for cybersecurity monitoring, threat detection, and compliance. Multiple users incorporate it across various sectors like finance, defense, and healthcare. It also serves as a platform for incident response, forensic investigations, and log analysis, providing real-time alerts and monitoring. Many entities deploy it either on-premises or in the cloud for comprehensive security operations.

Service and Support

OpenText Enterprise Security Manager's customer service varies, with some finding it good while others see room for improvement. Technical support receives mixed feedback, with critiques on response times, problem-solving efficacy, and support team expertise. While some appreciate the improvement and helpfulness of support, others find it lacking, citing slow issue resolution and a need for better-trained first-line support. Users experience inconsistencies, noting that complex queries often face delays or minimal resolutions.

Deployment

Users report mixed experiences with OpenText Enterprise Security Manager's initial setup. Some find it straightforward due to thorough documentation and a single installable package, while others describe it as complex, requiring significant customization and expertise. The complexity often depends on organizational size and specific infrastructure needs. It takes experienced teams to manage, with deployment durations varying from a few days to several months, influenced by factors like integration requirements, configuration, and ongoing maintenance.

Scalability

OpenText Enterprise Security Manager has strong scalability potential, though cost can be a major consideration. Users report significant scalability across various environments, adapting to both small and large enterprises. While some express satisfaction with its scalability features, concerns arise regarding expense and resource requirements. Many find it effective for expanding their capabilities, but initial setup and scaling processes may require expert knowledge. Overall, scalability appears satisfactory to many, albeit with potential cost implications.

Stability

OpenText Enterprise Security Manager exhibits high stability in most installations, especially with correct setup and maintenance. Users report consistent stability and minimal issues, attributing occasional problems to improper setup. Newer versions have improved, with few experiencing crashes. Virtual environments and inadequate infrastructure sizing can pose challenges, impacting performance. While some note difficulties with components like Connectors, many find it stable and reliable, appreciating significant improvements over previous versions. Properly sized deployments perform exceptionally well.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our OpenText Enterprise Security Manager Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

13%

Manufacturing Company

10%

Government

Educational Organization

Performing Arts

Comms Service Provider

Legal Firm

Transportation Company

Retailer

Media Company

Outsourcing Company

University

Healthcare Company

Energy/Utilities Company

Non Profit

Insurance Company

Construction Company

Recreational Facilities/Services Company

Real Estate/Law Firm

Logistics Company

Aerospace/Defense Firm

Security Firm

Consumer Goods Company

Renewables & Environment Company

Hospitality Company

Compare OpenText Enterprise Security Manager with alternative products

Learn more about OpenText Enterprise Security Manager

OpenText Enterprise Security Manager offers extensive security monitoring capabilities, combining log analysis and incident management to enhance cybersecurity and compliance. Its powerful event correlation engine provides real-time alerts for rapid incident response. Users benefit from customizable dashboards and comprehensive log collection, making it a significant tool in the SIEM market. Flexible deployment options cater to both on-premises and cloud environments, supporting enterprises in managing IT infrastructure and threat detection efficiently.

What are the key features of OpenText Enterprise Security Manager?

Event Correlation Engine: Real-time threat detection with advanced correlation capabilities.
Scalability: Adapts to enterprise-level demands and complex security needs.
Integration: Seamlessly integrates with multiple platforms and third-party tools.
Customizable Dashboards: Tailored views and active lists enhance user experience.
Advanced Alerting: Provides timely incident response and security alerts.

Why should users look for reviews when evaluating OpenText Enterprise Security Manager?

Timely Incident Responses: Fast alerting and action against threats.
User-Friendly Experience: Customizable dashboards simplify monitoring tasks.
Comprehensive Security Management: Integrated log management and threat detection across domains.
Adaptability and Scalability: Supports both on-premises and cloud deployments.

In industries such as finance, healthcare, and energy, OpenText Enterprise Security Manager is implemented for monitoring critical systems and ensuring compliance with regulatory needs. Enterprises leverage its capabilities for forensic investigations and active threat management, serving as a central hub for cybersecurity operations across diverse IT infrastructures.

OpenText Enterprise Security Manager was previously known as Micro Focus ArcSight, HPE ArcSight, ArcSight .