A SIEM tool is the foundation of any mature Security Operations Center (SOC). These tools have operated over the past 15+ years by collecting identified security log sources and then applying correlation rules or saved searches. As the demand for 100% event collection from all business and operational sources has increased due to compliance and incident response requirements, traditional SIEM solutions have struggled to adapt because of scale challenges or onerous software licensing schemes.