A handful of options still enable customers to deploy SIEM entirely on prem, including some solid open-source solutions. An SIEM solution is only as good as the information you can get out of it.