SIEM Critical capabilities are to provide comprehensive visibility , to provide incident with complete details, should provide correlation of the logs from different sources should provide UEBA capability.