They all sound like good recommendations, but there's not much in the way of a total drop in replacement for Splunk. You can build an ELK stack or something th

They all sound like good recommendations, but there's not much in the way of a total drop in replacement for Splunk. You can build an ELK stack or something that resembles it, but you have to hire someone to directly maintain it and build out functionality. If you're a megacorp, that might make sense financially. I used to work at Splunk when they were still a fairly trendy start up, it was fun and I helped build out Cloudworks, Splunk's v2 cloud offering that was a significant upgrade in capabilities for customers vs the previous gen, Rainmaker. By the time I left though, it had a much more corporate feel to it as the C level execs pursued growth at all costs and went on a massive hiring spree, and a lot of the old timers that were incredibly talented and intelligent people were starting to leave for greener pastures.