3 ms·
We log >>100TB/day in splunk and get all the discounts. It’s still ridiculously expensive. Many of the issues presented in the article ring very true. Splunk
by jcims 5y ago
We log >>100TB/day in splunk and get all the discounts. It’s still ridiculously expensive.
Many of the issues presented in the article ring very true. Splunk is pretty amazing for adhoc analysis/threat hunting. However, once you know what you’re looking for the value proposition drops precipitously.
- romantomjak 5y agoCan you give a ballpark figure? I can’t even begin to imagine how much that costs.
- jcims 5y agoAll in (software/hardware/people) ~$1-2k per terabyte of data indexed.
- halilduygulu 5y agowhat kind of use case can log 100tb? Do you actually query this data later?