We just deployed another SIEM. The 8th of my career. The 7th will be decommed when the logs TTL. The other 6 SIEMS no longer exist, I'm sure of it. It gets ha

We just deployed another SIEM. The 8th of my career. The 7th will be decommed when the logs TTL. The other 6 SIEMS no longer exist, I'm sure of it. It gets harder to drum up the enthusiasm for Yet Another Security Appliance. They all have accounts, and roles, and reporting, and a little black box that does the magic trick...and they're all largely the same.