{"id":2454,"date":"2019-02-27T12:24:26","date_gmt":"2019-02-27T16:24:26","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=2454"},"modified":"2019-06-24T12:46:26","modified_gmt":"2019-06-24T16:46:26","slug":"3-potential-siem-problems-and-how-to-solve-them","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/","title":{"rendered":"3 Potential SIEM Problems (and How to Solve Them)"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1062\" src=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1.jpg\" alt=\"3 Potential SIEM Problems (and How to Solve Them)\" width=\"800\" height=\"350\" srcset=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1.jpg 800w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1-300x131.jpg 300w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1-768x336.jpg 768w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1-600x263.jpg 600w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1-617x270.jpg 617w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1-180x79.jpg 180w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1-400x175.jpg 400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">SIEM problems pose a distinct challenge to enterprises looking to improve their overall cybersecurity posture in an increasingly dangerous digital marketplace. On the one hand, enterprises continue to express struggles with SIEM deployment and maintenance. Yet at the same time, enterprises inflate the severity of SIEM problems, possibly to avoid having to select a solution at all.<\/span><\/p>\n<div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a href=\"https:\/\/solutionsreview.com\/security-information-event-management\/security-information-event-management-vendor-map\/\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" src=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/02\/SIEM_VM_SB.jpg\" alt=\"Download Link to SIEM Vendor Map\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">The facts are clear. Enterprises need the log management, threat detection, and compliance SIEM provides to best mitigate and re-mediate modern threats which can penetrate their network perimeter. Focusing on SIEM problems instead of recognizing how your enterprise can solve them precludes you from reaping its benefits.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">We read \u201c<a href=\"https:\/\/solutionsreview.com\/security-information-event-management\/alienvault-unified-security-management-vs-siem-technical-comparison\/\" target=\"_blank\" rel=\"noopener noreferrer\">Unified Security Management (USM) vs. SIEM<\/a>\u201d a whitepaper by SIEM provider AlienVault. It outlines the top 3 SIEM problems and what enterprises can do to mitigate them. <\/span><\/p>\n<h3><b>1) Cost <\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">One of the most recurrent SIEM problems enterprises cite is its cost. The initial upfront costs to a traditional SIEM solution include the licensing costs, implementation costs, and renewal costs. Additionally, your enterprise needs to consider the training costs for your employees to properly maintain the solution. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">However, these costs shouldn\u2019t prove extravagant compared to other cybersecurity solutions such as identity management and endpoint security. However, AlienVault contends two issues contribute to the perception of SIEM as being costly:<\/span><\/p>\n<ul style=\"text-align: justify\">\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Enterprises continue to sink money into legacy solutions which can\u2019t perform compared to the modern threat landscape. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Enterprises don\u2019t invest the resources, time, or energy to maintaining their SIEM solution in the long term. <\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">In many ways, the perception of cost as one of the SIEM problems to handle creates self-fulfilling prophecy. Enterprises believe SIEM will be too expensive to work with, and therefore become gun shy about investing in it properly. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Consider SIEM as a major long term investment in your overall cybersecurity and provide it with the time and energy it thus deserves. Additionally, the training SIEM requires will supplement your IT security team\u2019s strengths across the long term. <\/span><\/p>\n<h3 style=\"text-align: justify\"><b>2) Poor Correlation Rules \u00a0<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Part of the SIEM problems enterprises face is failing to maintain it with the proper security event correlation information. SIEM solutions do not operate in a vacuum; they draw on threat intelligence to detect potential threats dwelling on the network and create an alert your security team can investigate. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Not feeding your SIEM solution enough threat intelligence and correlation rules means it will miss serious and evolving threats. However, feeding it too much information means your security teams may become overwhelmed with security alerts; moreover, many of these alerts prove false positives, which waste time and energy in investigations. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Therefore, you should have your IT security team carefully examine any update you make to your network and digital assets to ensure the correlation rules still make sense. They also do so when you make any update to your other cybersecurity solutions, your servers, and applications. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Furthermore, you need to choose your threat intelligence feeds carefully. Not every enterprise faces the same types of digital threats; preparing your SIEM solution to search for more unlikely cyber attacks results in more false positives down the line. However, as threat intelligence feeds change, so should your correlation rules. <\/span><\/p>\n<h3 style=\"text-align: justify\"><b>3) Ease of Use <\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Complexity remains on of the most commonly referenced SIEM problems. Compared to endpoint security and identity management, SIEM certainly appears intimidating. With the ever-encroaching cybersecurity staffing crisis, that appearance looks even more daunting. How do you feed the SIEM solution proper correlation rules? How do you examine its security alerts? How do you follow them up? How does it compliance compilation capabilities work? <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">The solution to this problem is to find a SIEM solution which possesses a user interface which works best for your IT security team and your IT environment. Don\u2019t select a solution blindly or to rashly solve a problem; consult with your security team, request to see a product demonstration, and choose a solution you can see yourself working with long term. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">You can learn more in the \u201c<a href=\"https:\/\/solutionsreview.com\/security-information-event-management\/alienvault-unified-security-management-vs-siem-technical-comparison\/\" target=\"_blank\" rel=\"noopener noreferrer\">Unified Security Management (USM) vs. SIEM<\/a>\u201d white paper by AlienVault. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\"><br \/>Widget not in any sidebars<br \/> \u00a0\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>SIEM problems pose a distinct challenge to enterprises looking to improve their overall cybersecurity posture in an increasingly dangerous digital marketplace. On the one hand, enterprises continue to express struggles with SIEM deployment and maintenance. Yet at the same time, enterprises inflate the severity of SIEM problems, possibly to avoid having to select a solution [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":1062,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551],"tags":[175,128,353,56,95,145,112,86,212,306,21,57,22],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>3 Potential SIEM Problems (and How to Solve Them)<\/title>\n<meta name=\"description\" content=\"Focusing on SIEM problems instead of recognizing how your enterprise can solve them precludes you from reaping its benefits.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"3 Potential SIEM Problems (and How to Solve Them)\" \/>\n<meta property=\"og:description\" content=\"Focusing on SIEM problems instead of recognizing how your enterprise can solve them precludes you from reaping its benefits.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools &amp; Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2019-02-27T16:24:26+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-06-24T16:46:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/\",\"name\":\"3 Potential SIEM Problems (and How to Solve Them)\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1.jpg\",\"datePublished\":\"2019-02-27T16:24:26+00:00\",\"dateModified\":\"2019-06-24T16:46:26+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Focusing on SIEM problems instead of recognizing how your enterprise can solve them precludes you from reaping its benefits.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1.jpg\",\"width\":800,\"height\":350,\"caption\":\"FireEye and Mandiant Security Validation Find Limited Cybersecurity Effectiveness\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"3 Potential SIEM Problems (and How to Solve Them)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools &amp; Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics &amp; SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"3 Potential SIEM Problems (and How to Solve Them)","description":"Focusing on SIEM problems instead of recognizing how your enterprise can solve them precludes you from reaping its benefits.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/","og_locale":"en_US","og_type":"article","og_title":"3 Potential SIEM Problems (and How to Solve Them)","og_description":"Focusing on SIEM problems instead of recognizing how your enterprise can solve them precludes you from reaping its benefits.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/","og_site_name":"SIEM Tools &amp; Security Event Management | Solutions Review","article_published_time":"2019-02-27T16:24:26+00:00","article_modified_time":"2019-06-24T16:46:26+00:00","og_image":[{"width":800,"height":350,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/","name":"3 Potential SIEM Problems (and How to Solve Them)","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1.jpg","datePublished":"2019-02-27T16:24:26+00:00","dateModified":"2019-06-24T16:46:26+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Focusing on SIEM problems instead of recognizing how your enterprise can solve them precludes you from reaping its benefits.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/10\/Untitled-1.jpg","width":800,"height":350,"caption":"FireEye and Mandiant Security Validation Find Limited Cybersecurity Effectiveness"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-potential-siem-problems-and-how-to-solve-them\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"3 Potential SIEM Problems (and How to Solve Them)"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools &amp; Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics &amp; SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/2454"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=2454"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/2454\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/1062"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=2454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=2454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=2454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}