Splunk and unified-platform SIEM architecture, tuning detections, and reducing alert fatigue at scale.