Operations | Monitoring | ITSM | DevOps | Cloud

Can You Use the ELK Stack as a SIEM? A Fresh Take

A SIEM system (Security Information and Event Management) is often used by security operations centers (SOCs) for real-time detection of suspicious activity and security events. While some teams choose to adopt a purpose-built SIEM, others rely on the same DevOps tools they are already using for tasks like troubleshooting and operational log data analysis.

Elasticsearch to OpenSearch Migration Facilitated by Sematext Cloud

OK, so you’ve decided to move from Elasticsearch to OpenSearch. Maybe our comparison helped you decide and maybe you’ve checked our guide on how to perform the migration. But how do you know if your new OpenSearch performs as well and functions as correctly as the existing Elasticsearch? Even when comparing old with new versions, upgrades don’t always translate into better performance.

Is a $1 million Datadog bill worth it?

In a recent reddit thread, I got into a conversation about justifying the cost of observability. It got to a really basic question about running a tech company: how do you know that any cost is justified? While a small number of expenses have clear and direct business values, a bunch of other costs, I would even say most costs, just aren’t that clear cut.

Exploring the 2023 Enhancements in SharePoint Online

In the realm of collaborative platforms, SharePoint Online stands as a robust solution that continually evolves to meet the dynamic needs of modern enterprises. The 2023 updates have notably elevated the platform’s capabilities, particularly in terms of file and document management and integration with other Microsoft 365 offerings.

Staying Ahead of Threats with Continuous Security Monitoring Tools for DevOps

According to the latest Crowdstrike report, in 2022 cloud-based exploitation increased by 95%, and there was an average eCrime breakout time of 84 minutes. Just as significantly, in 2021, the Biden administration passed an executive order to improve the nation’s cybersecurity standards. There are also upcoming laws like DORA in the European Union. So, increased cyber attacks and legislative pressures mean you need to (a) actively protect against threats and (b) prove that you are doing so.

What Is Continuous Security Monitoring Software?

Many DevOps teams work proactively to meet security and compliance standards. They consider security best practices when developing software with open source components, scanning code for vulnerabilities, deploying changes, and maintaining applications and infrastructure. Security is a key feature of many of the tools they’re using, and the policies and industry standards they’re following.

Introducing Item Snooze

We are introducing a new Snooze option for items. When Snoozing an item, the user will define how long an item will stop sending notifications for - once that time period expires then the item will return to normal and begin sending notifications again. Currently, setting an Item to have a status of Muted prevents notifications from being sent until somebody changes the status back to Active.

Migrating 1 billion log lines from OpenSearch to Elasticsearch

What are the current options to migrate from OpenSearch to Elasticsearch®? OpenSearch is a fork of Elasticsearch 7.10 that has diverged quite a bit from itself lately, resulting in a different set of features and also different performance, as this benchmark shows (hint: it’s currently much slower than Elasticsearch).

Why Cloud Unit Economics Matter

In our first blog post, we introduced the concept of cloud unit economics—a system to measure cost and usage metrics. It helps maximize cloud value for better outcomes per dollar spent. We reviewed what cloud unit economics is, why it’s crucial to FinOps success, and how it enables organizations to unlock the full business value potential of cloud computing.