Question: is security onion a siem?
Answer: ELSA integration into Security Onion will provide a SIEM alternative out of the box. The Security Onion Live Distribution enables a monitoring system to be set up and provides a convenient setup shortcut on the screen to configure the NSM infrastructure.