What is a SIEM?

A Security Information and Event Management platform collects logs and events from across your IT — servers, endpoints, network gear, cloud and applications — into one place, then correlates them to detect threats and raise alerts. It also retains those logs for investigation and compliance. In short, it turns a flood of scattered events into a manageable view of what's actually happening in your environment.