[xwolfi]

Can you give your name ? I'm fighting against our Splunk decommission project because the big boys tell us we can just use ELK, to which we reply that it means months of devs to reproduce Splunk abilities, to which they reply human cost is invisible but license cost is a sore point for the board...

I love Splunk, it works so well after data is ingested so... who are you if you're better?

[floren]

It's Gravwell (gravwell.io). Depending on exactly what you're doing in Splunk, it could be a pretty easy transition, and we've even started writing tools to migrate data out of Splunk and into Gravwell. We've got a free 14GB/day community license if you'd like to play with it on your own, or you can email sales for a POC.