Category collecting correlating security logs siem