Greg, you definitely make some well pointed observations about the SIEM market in general, and the high degree of variance in both the environments that need to be supported and the way in which this technology is used. As you pointed out, NetIQ is working hard on addressing the configuration challenges that result from the flexibility of deployment options. We have been working for several years on meeting the needs of ongoing “security operationalization”, not only through event integration, but also through the context of IT Process Automation. This article ( http://www.networkworld.com/newsletters/nsm/2008/070708nsm2.html ) posted by your colleague Denise Dubie on NWW this morning provides further details.