Machine learning (as distinct from AI) has been on everyone's lips for a long time and has a diverse range of applications, so that it is used in many areas of the most varied companies. The advantages of using suitable algorithms in the field of cyber defence were established relatively late and still are not. We want to show how to take the right path and what path certain software manufacturers such as Splunk/Exabeam are taking when it comes to everyday SIEM and UEBA & RBA.