Security Analytics with Mixed Event Sources and Ensembles