The best solution depends on lots of factors. How large is the team, how large is the budget, will it be on-prem or cloud-based?

The first thing you need to do it begin figuring out what to truly want to accomplish with a SIEM. Every SIEM had different strengths and weaknesses so you need to know what is most important to you in terms of goals do you don't waste time looking at something that can't do…