Which ones do you recommend? Every one I have tried hasn't really given me the same flexibility as Splunk, most seem to miss the core part of what makes Splunk cool. Though I'd definitely like to see Splunk improve their design.
https://panther.com - Built on top of Snowflake, so it scales well and they are building a more Splunk like interface.
https://runreveal.com - Still seed but shows a lot of promise
https://matando.dev - Still seed and don't have a hosted product yet but smart founders that have the right idea
https://hunters.ai - More threat hunting than SIEM but maybe that what certain folks need
https://gem.security - Still fairly early but if you are focused on cloud use cases this could be more of an option. (Disclaimer: I'm an Investor)
So was it you then with that one day call options trade? /s
Makes it attractive for enterprises already on their platform and they throw in discounts for E5 license tier customers as well (gotta keep pushing the “give us everything or pay way more for single feature licenses”).
I am nervous about how clickhouse is going to monetize, whenever they decide to turn on the revenue spigot.
And since clickhouse is open source, we hope that people will stop giving their security data to vendors who then charge you rent for it. I think the future is writing this data to clickhouse, but also our customer's clickhouses
We are still in early access but you can browse through our docs or swing by our Discord.