Go jump in a lake: Measuring the data lake effect on your SIEM

This article discusses how SIEM costs escalate with growing telemetry and illustrates, using an OpenSearch example, that compute drives most expense while storage is comparatively cheap; it proposes shifting to a data lake model that decouples storage (object storage) from compute (serverless) to reduce costs, scale on demand, and maintain visibility, setting up a follow-up on implementation details.