Hydrolix released Hydrolix Search for Splunk, an application that allows the Splunk users to query Hydrolix clusters directly using the Splunk Query Language.

Users continue to work in the Splunk UI for visualizing as well as alerting on and analyzing data stored in Hydrolix clusters while reducing data storage costs by up to 10x and extending hot data retention periods by twelve months or more

Designed for ingesting, querying and storing log data at petabyte scale, the Hydrolix streaming data lake uses a stateless, decoupled architecture to complement Splunk for observability of large volumes of log data. Enterprises dealing with log data at scale (from at least one terabyte per day up to hundreds of terabytes per day) are faced with the decision of paying high storage costs, discarding older and potentially useful data, or moving data into tiered, cold storage where it's difficult to access and analyze. Now they can add Hydrolix through the Splunk marketplace and reduce the total cost of ownership of their observability stack by 10x or more.

"Hydrolix Search for Splunk makes Hydrolix the landing place for federated log data for Splunk," said Hasan Alayli, co-founder and CTO of Hydrolix and former Splunk engineer. "It expands the utility and ease of use that Splunk users can benefit from when using Hydrolix to dramatically lower storage costs while making mountains of log data queryable for powerful applications like real-time threat detection, real user monitoring and multi-CDN observability."

In June Hydrolix launched its first integration with Splunk, the Splunk DB Connect for Hydrolix driver. It lets users send their most valuable log data to Hydrolix where storage costs are reduced by 10x or more while allowing users to execute SQL queries against external databases from the Splunk UI via a driver supplied by Hydrolix. The announcement expands Hydrolix integration options, especially for enterprises ingesting terabytes of log data daily in use cases that include:

- Content delivery networks (CDNs) and multi-CDN monitoring

- Firewall logs

- Real-time threat security hunting

Hydrolix Splunk connectors enable enterprises to maximize the value of observability data for the most data intensive use cases while allowing developers to continue to use their familiar Splunk UI.

Hydrolix Search for Splunk Capabilities:

- Set up in minutes with minimal configuration

- Query Splunk using SPL (the proprietary Splunk query language) via a new hdxsearch command that translates SPL into SQL

- Automatically find the primary timestamp for the specified table

- Apply time range filtering from the Splunk UI

- Limit query results to protect the Splunk UI