If you use the ELM module, here is a list of initial preparations for optimal results.
1. Activate and configure system events on network devices such as Switches, Firewall, UPS, etc…
2. Install and configure an event logs agent on Windows servers (Optional).
3. Activate and configure system events on Linux (Unix) servers (Optional).