Building an OSS Splunk alternative

Hi there,

I'm a maintainer of [Quickwit](https://github.com/quickwit-oss/quickwit/), a very cost-efficient OSS search engine. As of today, it's closer to Elasticsearch than Splunk. It works particularly well on large datasets (TB to PB), and I'm trying to understand security use cases better to improve our engine.

I recently met several users of Quickwit working in SOCs or, more generally, in companies protecting organizations from cyberattacks.

And I have seen two use cases:

- Increase data retention in SOCs. As Splunk is …

building cases companies cyberattacks cybersecurity data data retention everything organizations oss protecting retention socs splunk store under use cases working