A significant portion of existing SIEM detection rules, 13% on average, are broken. These rules are non-functional and will never trigger. This is a 5% decrease from the 2024 report.
A significant portion of existing SIEM detection rules, 13% on average, are broken. These rules are non-functional and will never trigger. This is a 5% decrease from the 2024 report. — This cybersecurity statistic was published by CardinalOps in June 2025. It covers topics including SIEM. The original data appears in 2025 State of SIEM Report. For the full methodology and detailed findings, refer to the original report.
Share or Copy this stat
Frequently Asked Questions
What does this statistic say?
A significant portion of existing SIEM detection rules, 13% on average, are broken. These rules are non-functional and will never trigger. This is a 5% decrease from the 2024 report. This data was published by CardinalOps and covers SIEM.
Where does this data come from?
This statistic comes from 2025 State of SIEM Report, published by CardinalOps on June 5, 2025. You can view the original report at https://cardinalops.com/white-papers/2025-state-of-siem-report-download/.
What cybersecurity topics does this cover?
This statistic relates to SIEM. Browse more statistics on SIEM or from CardinalOps.