soc with security onion plateform for detection and elk as siem

[nessrinehedi]

hello i need help for project soc, im beginner
i will deploy a soc with siem elk and security onion as ids and monitoring and threat hunting and edr in the same time is that possible?
if yes how can be the architectre of this soc!
and the siem elk in machine ubuntu separate and security onion in other machine? is that true? and they communicate with cofiguration of filebeat in security onion that send information and everything to logstash of siem elk? and all be present in the dashbord of kibana of the siem?
if all that false how can be the deploiement!
help please!