skip to main content
Close Icon We use cookies to improve your website experience.  To learn about our use of cookies and how you can manage your cookie settings, please see our Cookie Policy.  By continuing to use the website, you consent to our use of cookies.
Global Search Configuration

Ovum view

Summary

Over the last year, Ovum has seen that customers and vendors appear to be signaling that the security incident and event management (SIEM) platform might be in its last years of life. Among many transactions, HPE spun off ArcSight in 2016 to merge with MicroFocus, which at a minimum, suggests it is a very mature technology. Ovum does not therefore expect much growth in traditional SIEM technology, but does anticipate a flurry of activity to supplement and replace this now legacy technology.

Industry activity seems to indicate SIEM's end-of-life position

Ovum believes that enterprise customers and MSSPs view traditional SIEM platforms as not providing the security posture nirvana they had expected and have become part of the security tool exhaustion most CISOs are now dealing with.

It is unclear whether SIEM will become part of the security tool graveyard, or whether it will morph into some new expanded, open, next-generation security management platform. While vendors of new security tools are at pains to highlight that they can integrate with SIEM platforms, companies developing rival oversight and monitoring technologies, as well as several emerging MSPs, are attacking SIEM's value and functions. Many new security vendors and SPs are initially pitching their offerings as complementary to SIEM, but have plans (not so hidden) to replace it over time. New technology, including cloud-based security and advanced analytics with machine learning/AI, encourage customers to try new approaches, with and without SIEM in place.

Ovum’s research shows that the SIEM market is a mature enterprise technology segment, where most high-end target customers already have a SIEM platform. This makes it a market characterized by recurring/maintenance fees (this is what will have attracted Micro Focus to the ArcSight business), where customer wins typically mean ousting a rival.

The future seems limited for traditional SIEM, and the need of enterprise customers to know and maintain or improve their required security posture will create alternatives to the use of a singular technology such as SIEM as the long-term solution. Future platforms will need to be open, fully integrated with third parties, and cloud-aware, if not fully cloud-based.

Appendix

Author

Mike Sapien, Chief Analyst, Enterprise Services

mike.sapien@ovum.com

Rik Turner, Principal Analyst, Infrastructure Solutions

rik.turner@ovum.com

Recommended Articles

  • Service Provider Markets, Consumer & Entertainment Services,...

    MWC 2018 Highlights

    By Ronan De Renesse 27 Feb 2018

    Over 20 of our senior Ovum analysts and consultants attended this year’s Mobile World Congress in Barcelona at the end of February. In between meetings, briefings and presentations, our analyst team were blogging and tweeting about key developments, trends and rumors. Have a look through our daily MWC 2018 Highlights to find out what happened.

    Topics 5G AI IoT Cloud Payments SDN/NFV Smart home

  • Enterprise Decision Maker, Enterprise IT Strategy and Select...

    2017 Trends to Watch: Big Data

    By Tony Baer 21 Nov 2016

    The breakout use case for big data will be fast data. The Internet of Things (IoT) is increasing the urgency for enterprises to embrace real-time streaming analytics, as use cases from mobile devices and sensors become compelling to a wide range of industry sectors.

    Topics Big data and analytics IoT

  • Consumer & Entertainment Services

    US pay TV: Is it facing an existential threat?

    By Adam Thomas 28 Mar 2018

    With US pay TV having endured the worst year in its history, thoughts have inevitably turned to the future. The likelihood remains that the immediate future will remain highly uncomfortable for everyone except the scaled multinational digital platforms.

;

Have any questions? Speak to a Specialist

Europe, Middle East & Africa team - +44 (0) 207 017 7700


Asia-Pacific team - +61 (0)3 960 16700

US team - +1 646 957 8878

+44 (0) 207 551 9047 - Operational from 09.00 - 17.00 UK time

You can also contact your named/allocated Client Services Executive using their direct dial.
PR enquiries - Call us at +44 7770704398 or email us at pr@ovum.com

Contact marketing - 
marketingdepartment@ovum.com

Already an Ovum client? Login to the Knowledge Center now