1. A method for security information management in a network, comprising: receiving event information for a plurality of events at a first network node, wherein the event information for a particular event comprises a plurality of attributes associated with the particular event; assigning a plurality of attribute values to each event, the attribute values of each event defining a point in n-dimensional space; generating a first n-dimensional graph comprising a plurality of points, the points corresponding to the events; receiving a second n-dimensional graph comprising a plurality of points, the second n-dimensional graph generated by a second network node; dimming the plurality of points in the second n-dimensional graph based at least in part on a distance between the first network node and the second network node, wherein: dimming the plurality of points in the second n-dimensional graph comprises reducing visibility of the plurality of points in the second n-dimensional graph by a percentage; and the percentage is based at least in part on the distance between the first network node and the second network node; and combining the first n-dimensional graph with the second n-dimensional graph to generate a third n-dimensional graph comprising points from each of the first n-dimensional graph and the second n-dimensional graph, the points of the third n-dimensional graph that are from the second n-dimensional graph being dimmed based at least in part on the distance between the first network node and the second network node.