We accumulate more systems, and they become more ephemeral. Consequently, this leads to an exponential increase in observability data. Therefore, it's crucial to continuously explore, employ, and refine techniques for efficiency in storage, querying, etc. These optimizations directly impact costs for both the vendor and the customer, particularly considering the exponential scale. Thus, cost management becomes paramount, with price per unit as a main factor. It's essential to strive for the lowest possible price per unit while maintaining the capabilities for innovative functionalities. One suggested improvement for Sumo Logic is implementing a more streamlined enrichment process, conceptualizing the observability data collection as an ETL pipeline. This would involve enhancing processing rules and FDR for a smoother experience, particularly when integrating with the SIEM product and performing further enrichments. Such enhancements would benefit security personnel and various other users, making enrichment a primary feature accessible to all.
