Federated search

One query, fanned out in parallel to every SIEM this tenant has connected, using that tenant's own stored credentials. Each backend answers independently.