Not necessarily, but it is often organizationally beneficial. Security teams may prefer firewall events delivered to a SIEM, while performance engineers may want HTTP request logs in a high-density analytics platform like Hydrolix.