58 percent of organizations surveyed by SANS employ a log management tool for gathering and analyzing logs. Some 22 percent say they have “little or no” automation for logging and analysis, with no plans to remedy that. Windows servers, security devices, networking devices, and networking and security systems are gathering logs mainly from Windows servers. Some 35 percent spend “none to a few hours a week” analyzing logs, according to the SANS survey. More organizations are using log event management and Security Information and Event Management (SIEM) products.”]
Source: https://www.darkreading.com/analytics/logs-still-tough-to-decipher-sans-survey-says