Extracting logs.......Please wait........

0 %
Steven Butterworth
Detection Engineer.
Noise Killer.
Log Tamer.
  • Base:
    United Kingdom
  • City:
    Manchester
  • Clients:
    Global
Splunk ES
LogScale
Detection Engineering
Alert Tuning
Parser Builds
OT/ICS Security
CRIBL
Use Case Dev
Data Normalisation
SIEM Architecture
Industrial Threat Detection
IT/OT Visibility
  • Vetted, Gov/Defence
  • Log Strategy
  • SIEM Strategy
  • DevSecOps Delivery

Blog

Case Study : Taming the 21,000-Alert-a-Day SIEM
October 6, 2025 / Case Study
Case Study : Taming the 21,000-Alert-a-Day SIEM

How I helped restore clarity and control to a chaotic Splunk ES environment

Detection Is Broken Because Your Logs Are a Mess
Detection Is Broken Because Your Logs Are a Mess

Most of the time when a team says “our detection rules aren’t working,” it’s not the logic that’s broken —…

1 2
© 2026 LogSmith • SIEM Detection Engineering by Steven Butterworth
Email: steven@logsmith.io