Processing SIEM tickets with AI: workflow tool or pure agent?
Melodic_Tooth6885 · reddit · 2026-09-14
A security practitioner asks for advice: a client wants AI to process SIEM tickets to improve classification and produce proposed solutions, then create tickets in a CMDB.
The author proposed an orchestration approach using n8n or Logic Apps: pull data from SIEM → search similar cases in CMDB for enrichment → an agent processes and outputs results with a confidence score → submit back to CMDB.
Their manager argues everything can be done by a single agent without a workflow tool. With limited agentic AI experience, the author asks which approach is right — a classic structured-orchestration vs. autonomous-agent tradeoff involving reliability, auditability and cost.
More from coding & agent
- Claude Design named best tool for AI-drawn UI with high implementation fidelity — dotey · 2026-09-14
- New Data Agent Benchmark: Best Frontier Agent Passes Just a Third of 54 Multi-DB Queries — CShorten30 · 2026-09-14
- Free DaVinci Resolve + AI agent workflow cuts a week of editing down to 30 minutes — alexcovo_eth · 2026-09-14
- Motioneer: Direct Motion Films Through Claude Code or Codex, with a Local Editable Timeline — Sea-Assignment6371 · 2026-09-14
- Cranpose: a Rust GUI framework with Jetpack Compose syntax built for coding agents — Secure_Pirate9838 · 2026-09-14
- Anthropic: same 600K tokens, an advising agent scores 89 vs 76 for pure execution — AI Engineer · 2026-09-14