A lot of organizations are simply not mature enough to realize the dream of SIEM as another form of BI. “I really don’t see infosec teams applying BI principles to IT monitoring to the degree they should,” says MacDougall. He believes until more vendors open up their repositories to work with data warehousing, it is going to be too costly for most organizations to truly embrace BI analysis using SIEM. The issue is that information security is just now starting to track who is making changes to which files.”]
Source: https://www.darkreading.com/analytics/siem-meets-business-intelligence