Without steps 2) - 7), the shops still have massive logging problems. Doing those steps has the shops closer to defining the problem and showing insights and po

Without steps 2) - 7), the shops still have massive logging problems. Doing those steps has the shops closer to defining the problem and showing insights and possibilities. Step 5) quantifies costs for a solution that works. > 6) Start rapidly paring down the amount of data going to Splunk to get under budget. Step 6a) is often “build it ourselves” or “find a less-expensive alternative” — did any of your shops do that with success?