Companies now expect to acquire security tools on a pay-as-you go, OpEx basis, and vendors who didn’t start out as managed service providers are now trying to adapt their pricing models to more flexible ones for Hybrid IT environments. Maintaining premium pricing is difficult in today’s competitive vendor market, and customers inevitably want to realize the cost savings promise of a multi-tenant cloud service for security.
Even with more flexible vendor licensing options, many enterprises are not only failing to save money, they are starting to watch cloud storage fees balloon exponentially once a newer service-based SIEM starts operating and threat hunters get to work.
In most of our careers in IT, we usually bargain for cost-cutting measures to result in reduced performance levels and inferior quality of service. However, in the area of reduced search and data storage costs, we may be able to turn that maxim on its head.
As it turns out, if search performance levels remain good, and SIEM cost-of-entry and cloud storage prices are much lower, the incentives are aligned to make SOC analysis and threat hunting practices far more frequent and productive at the same time.
Read the whole story on the Securonix blog here: https://www.securonix.com/threat-hunting-do-lower-search-costs-produce-better-results/.
© 2020, Intellyx, LLC. Intellyx retains editorial control over the content of this article. At the time of publishing, Securonix is an Intellyx customer. Image credit: Zach Copley, Opera Glasses, flickr open source.