Glossary
Security information and event management (SIEM)
Also called SIEM.
Definition
A SIEM collects logs and security events from across an organisation, stores them, and runs searches and detection rules to find threats and support investigations and audits.
Why it matters when you’re buying
It is usually the system of record for security operations and compliance evidence. Cost tends to follow data volume, so ingestion pricing, retention options and detection quality decide most evaluations.
How it relates to other terms
XDR overlaps with it on detection, and SIEMs and observability tools increasingly share the same log pipelines.
Where to go next
- Security: news, companies and community questions
- How to evaluate Security vendors: criteria, questions to ask and red flags
Written by Techarda editors · Updated . Think a definition is wrong or missing something? Email engage@techarda.com. All terms.