6 ways to screw up a SIEM implementation

Perfect  headline and I like #1 and #6.
Short and sweet article



From the article:

1. Collect everything
2. Poor source data health
3. Overcomplicated network models
4. Too much focus on top 10
5. Lost in compliance
6. Using a SIEM (disproportionately) as a log search too

For more info:
http://h30499.www3.hp.com/t5/HP-Security-Products-Blog/6-ways-to-screw-up-a-SIEM-implementation/ba-p/6758713