Siem integration

[kkbrk]

At a high level -- can you summarize your request?
For atomic tests for larger environment. Several agent can forward this events to siem.Its better for large volume log storage.Better add gathered event to forward siem using syslog protocol.

What is the current alternative solution?
There is some alternative solutions but no opensource.