[ivandorian]

Datadog’s antics are a headache, but I'm stuck with Splunk due to corporate compliance and security demands. We keep the costs in check by funneling our logs through Cribl. In my experience, most companies end up juggling Splunk, Wazuh, and some custom SecOps setups—no silver bullet, just a series of compromises that keep the auditors happy.