Security data done right: A conversation on MDR, SIEM, and data storage

**Executive summary:** This webinar recap from Expel and Sumo Logic outlines how indiscriminate log collection drives storage costs and analyst fatigue, and recommends prioritizing security-relevant data (retain in SIEM), offloading low-value or compliance-only logs to lower-cost storage (data lakes), and partnering with flexible vendors and MDRs; practical advice includes inventorying your environment, assessing vendor longevity and flexibility, and being intentional about what data you store and alert on to reduce costs and improve signal-to-noise.