Use cases for SIEM with Hashicorp Vault

We are looking for some strong use cases from other customers of HashiCorp vault from the community, of how they are making use of Vault audit logs to generate alerts and responses from Vault events.

Use cases of any SIEM tool is ok for us.

Could anyone share any relevant links or published use cases.