From 10 Days to Unlimited Retention: How o9 Runs SecOps on Elastic Security
Somesh Agarwal, Senior Director of Security Operations at o9 Solutions, explains how the AI planning platform behind many of the world's largest supply chains consolidated security operations and observability on Elastic Security to gain unlimited threat-hunting retention, accelerate detection engineering, and simplify multicloud security operations.
For o9 Solutions, protecting customer data isn't optional. Fortune 500 and Fortune 10 organizations trust the platform with critical business information, making visibility, retention, and rapid threat detection essential. Before Elastic, retention windows were limited to just 10–20 days due to storage costs, making it difficult to identify behavioral patterns and threats that emerge over weeks or months.
By adopting Elastic Security, o9 Solutions can ingest and analyze 2–3 TB of telemetry daily across Google Cloud, Microsoft Azure, and AWS from a single platform. Searchable snapshots and the frozen tier provide virtually unlimited retention without the cost of keeping all data in hot storage, while Elastic AI Assistant helps analysts create detections and investigations using natural language.
Topics covered in this video:
- Why retention limitations create a security "data tax"
- Threat hunting across unlimited historical data
- Multicloud visibility across Google Cloud, Azure, and AWS
- Using searchable snapshots and the frozen tier for cost-efficient retention
- Accelerating detection engineering with Elastic AI Assistant
- Consolidating SIEM, threat hunting, incident management, and observability
- Scaling security operations alongside business growth
Chapters:
0:00 - Meet Somesh – Director, SecOps at o9 Solutions
0:20 - Why data protection is o9 Solutions most critical job
0:44 - The importance of Elastic as a cloud-agnostic platform
0:59 - Elastic as o9 Solutions’ SIEM, incident management and AIOps provider
1:19 - All about Elastic’s Attack Discovery feature
1:58 - Using Elastic’s searchable snapshots for total flexibility
2:45 - Frozen nodes powering superior retrieval capabilities
3:11- The importance of great customer support for o9 Solutions
3:29 - End credits
Additional Resources:
Learn more about Elastic Security: https://www.elastic.co/security
#ElasticObservability #ElasticSecurity #customertestimonial