Look at SIEM as a service options before you buy a SIEM. All SIEMS are just log correlation tools. Without resources to operationalize the SIEM. It will quickly become a very expensive logging tool. You will need skilled people to setup alerts and maintain the log…