Managed soc security and architecture

hello everyone
if i'm a company offering managed soc services for a client do we install (reverse proxies + kafka ... + logstash + elasticsearch) in his infrastructure and the kibana instances in the soc managing company? or is there any better and more common and SECURE approaches ??