Avoiding security event information overload

I often run into computer security event monitoring teams that brag about how much information they collect each day or second, or tout how many petabytes of new storage arrays they have recently bought. I usually see such proclamations as a sign that they are doing it wrong. Many times, less information is better.