Today, SIEM tools use internal proprietary format to describe alerts. Most of those formats are inspired of LogManagement tools and based on syslog. The effort of standardization has not been done yet and it’s one of the purpose of the SECEF project.