The problem with SIEM systems they not provide enough automation and integration.
Our clients use HP ArcSight and RSA Security Analytics but most of them integrate with automation tools like Ayehu eyeShare to perform complicated tasks after the detection of suspicious events.
They understood that to get the most out of security incident and event management products, integration with automation is essential. This will help to not only manage incoming alerts more effectively, but also streamline incident response and investigation workflows after the fact. The result is an increased level of intelligence for security personnel, and a much safer IT environment for the entire organization. Doing this successfully can also dramatically improve operational efficiency.