The Future of SIEM?

I'm curious to hear from cybersec practitioners where they think the future of SIEM lies.

From my own limited experience, selling cybersecurity solutions rather than being a techie, it seems like a lot of organizations are moving away from legacy SIEMs (which even seems to include Splunk nowadays) and more towards Chronicle and Sentinel, the former because it's a great tool and the latter because it's Microsoft and a lot of companies simply have to.

Was wondering what everyone else …

chronicle cybersec cybersecurity cybersecurity solutions experience future legacy lies lot moving organizations own selling sentinel siem solutions splunk