We use quite a lot of custom built tools and Splunk to funnel the logs from everywhere, so we can use their AI/ML to detect anomalies etc.