Splunk videos:

http://www.splunk.com/article/2130

Don

I have a fair amount of experience using Splunk.

It is certainly a robust solution for log indexing and correlation, but I'm sure you will find - depending on the amount of data you feed it, you will need a solid business case.

The effectiveness of the tool (in my opinion) relies on the creativity of the operational people using it.

The searches you create can be captured and turned into useful dashboards with great reporting functionality. I personally find this application much more useful than any SIEM out there.

Splunk can literally take any information, in any format - and index it, so it can be searched later. I don't know of many SIEMs capable of that.

There is a trial version availible - and I'd more than willing to answer any direct questions you have, rather than continuing to ramble on...