Security teams working with modern SIEM platforms face a practical problem very quickly. Data arrives from everywhere.