Hello,
I am looking for general guidance on what anyone has done to prioritize the integration of multiple SIEMs in an implementation (if it calls for it). This is aside from the customer stating which SIEM they want as their primary versus secondary etc. Is there a clear standardization process (risk scoring for example) anyone has utilized that they found successful?
