“…we believe there is room for both traditional log management tools and the real-time analysis capabilities provided by SIEM tools, but we suspect that organizations would prefer to go to a single vendor for both. Clearly organizations have to solve the first problem (log management) in order to address the second (analysis and monitoring), but the wise purchaser will know that after the first problem is addressed the second will become immediately apparent. Plan accordingly.”

Resource: Are SIEM and Log Management the Same Thing?

Source: Greg Shipley, CIO Magazine

SIM Resource Guide Section: Security Information Management Purchasing Best Practices