Database activity monitoring (DAM) and security information and event management (SIEM) technologies historically have worked separately. To gain a comprehensive view of the activity in the database and its surrounding environs, organizations need to feed their DAM information into a SIEM tool, analysts and other observers advise. “If all a customer is doing is trying to monitor a database, then clearly there isn’t a lot of leverage in using SIEM for that use case,” says Mike Rothman, analyst with Securosis.