Are you currently using a SIEM solution in your organization?
1. What was your primary motivation of deploying the solution?
2. Is your solution performing to your expectations and giving results as expected?
3. Are you using an on-premise or cloud solution?
4. Do you consider your log storage to be secure?
5. What was the biggest challenge while deploying the solution?
1. Why haven't you deployed a log management/SIEM solution?
2. If you were to deploy a solution in the future, which mode of deployment would you prefer?
3. What would be the main parameter you use to evaluate the solution?