Demo Video

Home > ManageEngine Exchange Reporter Plus vs ArcSight ESM

Looking for an alternative to
ArcSight ESM

100000+ Technicians trust ManageEngine Exchange Reporter Plus to manage their Windows environment

Try ManageEngine Exchange Reporter Plus

Thank you for downloading!

Your download should begin automatically in 15 seconds. If not, click here to download manually.

    Download fully functional
    30-days FREE trial!

  • By clicking 'Start a free trial', you agree to processing of personal data according to the Privacy Policy.


One of our solution experts will get in touch with you shortly

Comparing ManageEngine Exchange Reporter Plus vs ArcSight ESM

About ManageEngine Exchange Reporter Plus

ManageEngine Exchange Reporter Plus is a reporting, auditing, monitoring, and content search tool for Exchange Server, Exchange Online, and Skype for Business. It offers over 450 comprehensive and intuitive reports on all aspects of Exchange, like mailboxes, Outlooks Web Access (OWA), ActiveSync, email traffic, storage, distribution lists, public folders, and more. It audits every user activity, and stores the logs for an indefinite period. This solution also helps you monitor Exchange Server services and endpoints 24/7, and sends real-time alert notifications via email or SMS.

About ArcSight Enterprise Security Manager (ESM)

ArcSight Enterprise Security Manager is a security information and event management (SIEM) solution which focuses on analyzing information logs to provide in depth details on various aspects of the Exchange environment. It has open architecture for collecting security data and performs real-time correlation. The tool offers threat detection and prioritizes them to resolve issues quickly. To enhance this tool's capabilities and receive management options like security orchestration and automation, you might have to purchase other products like ArcSight SOAR, ArcSight Intelligence, ArcSight Investigate and ArcSight Logger.

Features comparison

The following table compares the features provided by ManageEngine Exchange Reporter Plus and ArcSight Enterprise Security Manager.

ManageEngine Exchange Reporter Plus

Feature Description Exchange Reporter Plus
Try now
ArcSight Enterprise Security Manager
Hybrid Exchange and Skype for Business reporting
Mailbox content reports Locate messages sent and received based on:
  • Keywords in the subject
  • Keywords in the body
  • Attachment name
  • Attachment file extension
  • Attachment size and more
Mailbox size reports Get granular details about the size, growth, and quotas of Exchange mailboxes.    
Inactive, hidden, and disconnected mailboxes reports Discover inactive mailboxes based on last logon time, last mail sent time, and last mail received time along with the mailboxes that are hidden and disconnected.    
Mailbox permissions reports View the mailbox access rights and folder permissions users have.    
OWA logons reports Track OWA logons based on IP addresses, browsers, users' departments, and servers used.    
Inactive ActiveSync devices reports View information about inactive ActiveSync-enabled mobile devices in your organization.    
Email traffic insights Get information about email traffic in your organization, including message metrics, intraorganizational traffic, and more.   *

After installing the ArcSight's Smart Connector to fetch Microsoft Exchange Message Tracking Log.

Undelivered email reports Get info about undelivered emails and the reasons for failure.    
Storage insights Check the sizes and growth of mailboxes.    
Public folder traffic reports View public folder traffic data based on message count, users, and subject of the messages.    
Public folder permissions reports Get all administrative and client permissions over public folders    
Shared mailboxes reports View shared mailbox details, including the last logon time and permissions.    
Room mailboxes reports Get details about the usage, number of bookings, and appointments of room mailboxes in your organization.    
Email response time insight View a summary of email reply times.  

Also displays if a person hasn't replied yet

Exchange security reports Get information about the spam and malware emails received.    
Data loss prevention (DLP) policy matches Get complete details about emails that match data loss prevention (DLP) policies.    
Message delivery settings reports View message delivery settings, including the maximum send/ receive size and recipient limit.    
User-to-user email activity reports Check email activity, including count, size, delivery, and spam between specified users.    
Inactive Exchange Online users reports Identify inactive Exchange Online users based on last mail sent or received, or last logon time.    
OWA attachment policies reports View information about attachment policies, and check the policy associated with each user.    
Exchange Online calendar reports Get information about calendar log events and folder permissions.    
Account status reports Learn about the status of mailboxes along with enabled and disabled users.    
Compliance reports Get GDPR, GLBA, FISMA, HIPAA, PCI, and SOX compliance-related reports.    

Helps in compliance management.

Skype for Business reports Get complete details about Skype for Business conferences, audio, video activities, file transfers, and more.    
Hybrid Exchange auditing
Mailbox auditing Audit all creation, deletion, and modification activities in Exchange mailboxes.    
Mailbox permission changes auditing Track changes to full access, send as, and other permissions, and get real-time alerts about them.    
Non-owner mailbox access alerts Receive real-time alerts when anyone other than the owner gains access to a mailbox.    
Mailbox storage quota changes reports Receive real-time alerts about changes to mailbox storage quotas.    
Database changes auditing Identify databases that were recently mounted or dismounted, and get alerts about other database changes.    
Email auditing Audit emails being deleted or moved across folders within mailboxes.    
Distribution list auditing Audit changes made to distribution lists in Exchange.    
Threat detection Apply real-time correlation for threat detection and management.    
Risk management Implement workflow processing, native security orchestration, and automation.    
Customizing audit profiles Create and add new actions that you want to audit.    
SIEM integration Integrate audit data with other security information and event management (SIEM) solutions.  

Splunk and syslog support.


The tool itself is an SIEM tool.

Exchange Server monitoring
Organization monitoring Monitor all Exchange servers in your organization.    

Based on log analysis.

Service health monitoring Monitor Exchange services, and get real-time alerts when a service starts or stops.    
Client access connectivity monitoring Monitor POP, IMAP, ECP, ActiveSync, OWA, and web service connectivity.    
CPU and memory utilization Monitor the usage of CPU and server memory.    
Database backup monitoring Monitor the different types of backups performed in your organization.    
Email queue monitoring Monitor the number of messages in the queue and the health of all email queues.    
Database availability group (DAG) monitoring Monitor the replication health and database copy status of DAGs.    
Alerts Receive near real-time alerts about important incidents via email and SMS.    
Other features
Mailbox content search Use pattern, attribute, and keyword-based searches to locate important information in your organization's mailboxes.    
Dashboard customization Add widgets, and customize graphs and data tables as required.    
Custom reports Create your own reports for Exchange under the listed categories.   *

Offers customizable rule sets only for correlation and analysis.

Technician roles Create custom roles for technicians to access only the required dashboards, configurations, and analytical, auditing, and monitoring reports.    
Reports scheduling Schedule reports to be automatically generated and emailed to stakeholders.    

Can the solution be considered value for money?

Exchange Reporter Plus Standard edition
Starts at $345 for 100 mailboxes per year.

Why should you choose ManageEngine Exchange Reporter Plus over ArcSight Enterprise Security Manager?

Simple license model and navigation The licensing policy of Exchange Reporter Plus helps you save money by enabling you to select only the required mailboxes you need to have monitored. It's simple, less complex, and flexible, based on the number of mailboxes configured at any given point in time. Besides, this tool features a user-friendly UI and is very easy to navigate and learn.
Mailbox content search Perform pattern, keyword, or attribute-based searches to identify important information shared via your organization's mailbox. Create custom mailbox search profiles to constantly keep an eye on confidential information.
Custom role-based delegation Create new roles with just the required set of rights and permissions that you would like to provide to different tiers of technicians in your organization. Keep an eye on their activities using technician logs and control product logins using two-factor authentication.
Granular reports on Exchange objects Exchange Reporter Plus offers over 450 intuitive reports on various Exchange objects, such as room mailboxes, equipment mailboxes, connectors, and more. It provides insights about permission changes, mail traffic, and storage changes.


As the above comparison makes clear, Exchange Reporter Plus is a one-stop solution that will satisfy your Exchange reporting, auditing, monitoring, and mailbox content search needs. Whereas, ArcSight Enterprise Security Manager (ESM) is an SIEM solution that only gives you an in-depth analysis of the threats in your Exchange environment so you can take necessary actions. Both these solutions are competent in their own niches, but if you are looking for a holistic approach to protect your Exchange environment, you must choose a solution that audits, monitors the services and endpoints 24/7, and searches for important content or malicious attachments in your mailboxes. Exchange Reporter Plus offers all these capabilities so it qualifies as your best option.


What customers say about us

  • CAMH will be able to save close to $26,000 a year on service desk calls related to Active Directory password resets and locked accounts, and will see a return on investment within the first six months of product implementation.

    Judy OlivierProject Manager, CAMH

About ManageEngine Exchange Reporter Plus

ManageEngine Exchange Reporter Plus is a web-based analysis, monitoring, and change auditing tool for Exchange Server, including versions 2003, 2007, 2010, 2013, 2016, and 2019. It features over 300 unique reports on various Exchange entities such as mailboxes, public folders, Outlook Web Access, and ActiveSync. With Exchange Reporter Plus, IT admins can generate reports and export them to a specific folder, and also have reports emailed to them at specified times in several file formats, including CSV, PDF, XLS, and HTML. Configurable alerts in Exchange Reporter Plus give IT admins instant notifications on critical changes that require their attention

For more information about Exchange Reporter Plus, please visit

Get quote

Thank you for downloading!

Your download should begin automatically in 15 seconds. If not, click here to download manually.

Download fully functional30-days FREE trial!

    By clicking 'Claim Your Free Trial', you agree to processing of personal data according to the Privacy Policy.

Thank you

Thank you for your interest in ManageEngine Exchange Reporter Plus. We have received your request for a price quote and will contact you shortly.

Get a personalized Quote,that best suits your requirements

  • By clicking 'Submit', you agree to processing of personal data according to the Privacy Policy.

Thank you

Thank you for your interest in ManageEngine Exchange Reporter Plus. We have received your request for a personalized demo and will contact you shortly.

Schedule apersonalized web demo

  • By clicking 'Submit', you agree to processing of personal data according to the Privacy Policy.

Disclaimer: ManageEngine does not guarantee the accuracy of any information presented in this document, and there is no commitment, expressed or implied, on ManageEngine’s part to update or otherwise amend this document. The furnishing of this document does not provide any license to patents, trademarks, copyrights or other intellectual property rights owned or held by ManageEngine.

Exchange Reporter Plus trusted by

The one-stop solution for Exchange reporting, auditing,
monitoring, and content search