...result? Security event and log management solutions that only cover part of the broader security architecture frequently lagbehind changing network topologies and do not provide analysis for events and logs until long after an incident...
http://www.findwhitepapers.com/whitepaper2978/