Coralogix TCO not only reduces your logging costs by up to two-thirds but also improves your ability to query, monitor, and manage your data, by allowing you to define the data pipeline your logs will go through, based on the importance of data to your business.
This enables you to get all of the benefits of an ML-powered logging solution at only a third of the cost and with more real-time analysis and alerting capabilities than before.
The TCO Optimizer allows you to assign different logging pipelines for each application/subsystem pair and log severity, giving you maximum control over your data.
TCO Data Pipelines
Compliance Data (Low)
Log data that needs to be kept for compliance/post-processing reasons will go straight to your archive.
Logs that are used for monitoring or statistics will be fully available for those use cases by allowing you to define alerts, build dashboards, view statistics, query the live data stream, and receive proactive anomalies.
These logs need to be individually queried and analyzed. Typically high severity, or business-critical data will be stored on highly available SSDs replicated, and ready to be queried within seconds.
Log’s distribution that shows the % of logs for each TCO pipeline, ‘Frequent search’, ‘Monitoring’, and ‘Compliance’ (compliance includes low and blocked logs).
Policy criteria includes current policies and allows for the creation of new ones. Policies will be applied on combinations of applications/subsystems/severities as the logs are ingested and will assign them the appropriate TCO pipeline based on the policy content. The default policy for all logs is high. Policies simplify assigning TCO pipelines and will capture any applicable future logs on ingestion. Each policy creates new default values for the logs the policy is applicable for. If Policies conflict, the first policy will have precedence (in the order they appear on the screen).
To create a new policy click the “ADD NEW POLICY” button, choose the relevant filters for applications/subsystems/severities combinations and set the desired TCO pipeline. These will become the default TCO pipelines assignments for all matching logs that will be ingested into Coralogix.
‘Application and policy overrides’ section displays the usage of all applications and subsystems, sorted by the top consumers. You may use the top filters to easily locate a specific component. Clicking on any row will allow you to see a detailed view of the application-subsystem pair usage broken by level of severity and its default TCO pipelines assignments as created initially.
In this view, you are able to change the priority for an entire application-subsystem pair (1) or to change the priority for specific severities within any application-subsystem pair (2). The priority will determine the data pipeline the logs of this subsystem will go through. In case there are different TCO pipelines for different severities the main priority will be Multiple.
Note: If you would like to start overriding from the beginning, you can remove all overrides by clicking on the “Reset All Overrides” button.
Oh no!We didn’t find anything for “”,
