Operations | Monitoring | ITSM | DevOps | Cloud

We cut log-query scanning from ~100% of data blocks to < 1% by reorganizing how logs are stored in ClickHouse. Instead of relying on bloom-filter skip indexes, they generate a deterministic “resource fingerprint” (hash of cluster + namespace + pod, etc.) for every log source and sort the table by this fingerprint in the primary-key ORDER BY clause. This packs logs from the same pod/service contiguously, letting ClickHouse’s sparse primary-key index skip irrelevant blocks.

As global cyber threats continue to evolve at unprecedented speed, the United States public sector faces growing pressure to enhance operational readiness. Agencies must now contend with adversaries who are not only well-funded but also increasingly sophisticated in their ability to exploit visibility gaps. In the face of this dynamic threat landscape, the Zero Trust Architecture (ZTA) model has become an essential security framework.

ElasticSearch is one of the IT and software industry’s most established platforms for storing and analyzing log data. As its name suggests it also has a powerful search and analytics engine based on the ElasticSearch Query language. ElasticSearch itself is essentially a backend store, so if you want to explore and analyze your data, you will need a visualization layer such as SquaredUp and our ElasticSearch PlugIn.

Microsoft Teams is a ubiquitous presence in workplaces all over the world. Prior to 2020, its usage was relatively moderate, with around 20 million users. However, global restrictions during the pandemic led to a 3,500% growth. Teams is now so central to business operations that Microsoft retired Skype in its favor. But this massive scale created a new problem – businesses needed better ways to monitor and report on their Teams usage.

"Is our API down?" "Why can't I access the dashboard?" "Are you having server problems?" When incidents happen, support teams face a familiar nightmare: tickets flood in faster than you can respond. Your team scrambles to check system status and respond to dozens of identical questions while engineering focuses on fixing the actual problem.

Observability has an investigation problem, and dashboards and alerts aren’t enough for solving problems in today’s complex systems. AI-driven capabilities, powerful analytics, and the ability to scale are essential to drive real-time investigations while keeping costs low. We think this is why Elastic has been named a Leader in the 2025 Gartner Magic Quadrant for Observability Platforms for the second time.