This will largely depend on the usecase. For security usecases I still have a preference for QRadar, but any of those products is a step in the right direction. The most important thing is be loyal to the choice and use the tool to its full potential. Regards Hans