SIMS - Security Information Management

I would be interested in hearing from people that have actually deployed and have running SIM solutions (eg; netforensics). How have you found then - has it been worth the time and money - whay do they do well for you (and what they dont do well).

I'm personally starting to think SIMS are a bit like PKI 5-6 years ago - but I havnt deployed one myself yet.