Iceberg ahead: Why your legacy SIEM is a sinking ship