How should the perfect SIEM-Solution look like?

We were discussing in our team today, wether our SIEM-Solution is suitable and if we should establish a seperate Log-Management, that would only forward security relevant events to the SIEM since we get a lot of unrelevant data.
So I was wondering: What does your ideal SIEM-Solution look like? Is there a Best-Practice?

cybersecurity data events forward log lot management perfect practice relevant security siem solution suitable team today