Yes, I would like to suggest you to start evaluate 2 to 3 SIEM products, needs to do the granular POC to test the Use Cases and verifying log method limitations or if there is any compatibility issues in regards to your log sources ( Logical domains)
I would also suggest…