How Zurich Insurance Group built a log management solution on AWS

This article discusses how Zurich Insurance Group built a scalable, cost-optimized, and flexible log management solution on AWS to address challenges like balancing storage costs against log retention requirements, bandwidth issues, and resource scaling and performance for analyzing large log volumes.

Specifically, the article covers:

• The solution architecture involving Cribl Stream for log routing, Amazon OpenSearch Service for priority 2 logs, Amazon S3 for long-term log storage, and services like Amazon Athena and AWS Glue for querying historical data.
• How the solution provides scalability through services like Amazon S3 and OpenSearch Service.
• Cost optimization techniques like using S3 Intelligent-Tiering, reducing SIEM licensing costs by offloading logs, and right-sizing OpenSearch Service.
• Flexibility to integrate with existing systems, incorporate new technologies like machine learning, and expand to manage AWS logging sources.