Splunk bills are climbing. Retention windows are shrinking. And leadership wants answers.

Join us for an intimate happy hour with fellow observability and platform engineering leaders to compare notes on how teams are solving this — without ripping out existing workflows.

Over craft cocktails and light bites, we’ll explore how teams are:

  • Cutting SIEM costs by 40–60% while keeping full search and query capabilities
  • Extending data retention with a decoupled, cost-effective storage layer
  • Accelerating search performance with federated access across hot and cold data
  • Modernizing their observability stack without disrupting existing Cribl pipelines

If spend, data retention, or observability architecture is on your agenda for 2026, this seat is for you.

This event is designed for:

  • Splunk Administrators managing cost and scale
  • IT Directors and VP-level Engineering leaders
  • SecOps and Platform Engineering managers
  • Architects evaluating observability modernization

Only 30 seats available — this event is intentionally small

This is a past event.


View Upcoming Events

Ready to decouple your observability stack?
No workflow changes. No migrations. More data, less spend.

Request a Demo