The big problem facing the security world today is not the lack of information, but rather the ability to process and act on it. The goal is to have some combination of software sifting through our massive amount of data, looking for things to bring to the attention of a human. To fully review all logs and reports manually, a typical midsize company would need a bunch of employees staring at data for eight hours a day. Such positions are pretty hard to justify to company management. Further, the work is so boring that nobody would want the job anyway.”]
Source: https://www.csoonline.com/article/3075001/are-you-buried-under-your-security-data.html