Scalable EDR Advanced Agent Analytics with ClickHouse
ID: 174364c6-16c4-53e2-b85f-3323f6857c48
STIX ID: report--174364c6-16c4-53e2-b85f-3323f6857c48
Feed Name: Huntress Blog
Huntress outlines investments to improve the availability and stability of its EDR agent by building an internal observability pipeline using ClickHouse (AggregatingMergeTree, materialized views, and Map tagging) and Grafana dashboards to analyze large-scale endpoint telemetry; the post highlights data aggregation strategies, compression benefits, and plans to surface operational insights to customers while prioritizing issues like low disk space and networking that affect agent availability.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.