Comment by neonnomad

There are some players that are more established than others but check out:

https://panther.com - Built on top of Snowflake, so it scales well and they are building a more Splunk like interface.

https://runreveal.com - Still seed but shows a lot of promise

https://matando.dev - Still seed and don't have a hosted product yet but smart founders that have the right idea

https://hunters.ai - More threat hunting than SIEM but maybe that what certain folks need

https://gem.security - Still fairly early but if you are focused on cloud use cases this could be more of an option. (Disclaimer: I'm an Investor)