Core concept
Pricing based on ingest volume + org size. Not per-log-line like Splunk.
Advertisement
How it works
Learning curve. Coming from Splunk requires retraining.
Advertisement
Trade-offs + gotchas
Large enterprises. SIEM at scale. Advanced threat hunting.