No, the log aggregation and specific rule alerting that a SIEM can deliver can be very useful for a SOC.