Most companies capture and analyze less than 10% of their IT operational data. By increasing that to 100%, the resulting visibility and transparency enables companies to achieve a strong ROI in the form of increased efficiencies, reduced risk, and improved customer experience. Still, cost concerns prevent many companies from moving forward. What they may not realize is that the TCO to monitor 100% of their event data can be far less than what they’d expect.
Take, for example, the case of a large retail sector customer of Rocana’s that, as part of an IT-led business transformation initiative, decided they needed to capture machine generated log and event data from more than 90,000 machines, totalling over 100 TB/day – an ingest rate that was more than 30 times the volume they were capturing on a daily basis at the time. Complicating matters further, the company decided they needed to increase their data retention rate to 18 months from 6 months.
Upon deciding that their existing legacy log management solution couldn’t handle the expanded scope due to cost and scalability limitations, the company began investigating other options, including building their own enterprise IT monitoring solution from scratch leveraging open architecture components like Hadoop.
After a thorough evaluation, the retailer chose Rocana Ops because the business case showed a compelling TCO when compared to other options like going Do-It-Yourself (DIY) or expanding their legacy toolset, as well as the orders of magnitude greater time-to-value:
- DIY Too Costly and Too Risky – The customer estimated 10 man years (read: millions of dollars) of effort by highly-skilled software engineers to build a data lake that would provide basic machine data collection and search functionality. More advanced capabilities – such as anomaly detection that Rocana provides out-of-the-box – would have increased the project scope and cost substantially. Buying a pre-configured, pre-optimized, fully supported off-the-shelf solution was determined to entail far less cost and risk.
- Cost-Savings Versus Legacy Expansion – The customer estimated that Rocana Ops would save them more than $1M within the first year versus what they would have spent had they tried to scale using their legacy monitoring solutions.
- Time-to-Value – Rocana Ops was deployed to production in a matter of days. Data collection was grown by about 1TB/day per week and the customer is now collecting about 3 times as much data as they were before Rocana Ops. Administrators and other IT staff required minimal training.
A key objective while rolling out Rocana Ops was to avoid any end user impact or business disruption. As such, the decision was made to initially leverage Rocana Ops as a data warehouse that supplies data on demand to the company’s many legacy monitoring tools and services including Splunk, ServiceNow, IBM QRadar, Cisco, and Dell SecureWorks. That way, end users, including Help Desk, Business Analysts, and IT Security Auditors, experience no interruptions to their daily workflows. Meanwhile, the company can start reducing spend on legacy monitoring tools because the licenses and infrastructure required to maintain separate backend data stores for each tool is no longer required.
Ultimately, the company’s long term business transformation strategy involves replacing their many siloed event data monitoring tools, which made it difficult to correlate events across systems and teams, with much more intelligent monitoring and reporting tools that leverage the power of a single source of event data stored in Rocana Ops.
To learn how Rocana Ops can accelerate your IT-led business transformation while simultaneously delivering a strong ROI at a TCO that is much lower than you might expect, explore the following resources...