Contributed a review of ArcSight Enterprise Security Manager (ESM): Scalable though it is not "plug-and-play".