Log Review and Events Correlation service is performed through SIEM tools. SIEM stands for Security Information and Event Management. An effective SIEM Managed Security Service empowers security teams. It brings insight into the system environment through logs, events and other data. Additionally, it combines actionable intelligence with analytical and triage capabilities. Each SIEM product comprises of a Correlation Engine, Event Analyzer, and Management Console. First, the Correlation engine runs and aggregates the information based on the rules/policies by correlation. Following that, the Event analyzer conducts analyses on the data and forms the output to the management console. The scaled-up form of the SIEM is the Security Operation Center (SOC) which integrates the SIEM, with a specialized team and processes for monitoring the network for security events.