Hydrolix, the streaming data lake company, has announced the release of Hydrolix Search for Splunk, an application that enables Splunk users to query Hydrolix clusters directly using the Splunk Query Language. This integration allows users to seamlessly work in the Splunk UI for data visualization, alerting, and analysis, while benefiting from significant cost reductions—cutting data storage expenses by up to 10x—and extending hot data retention by 12 months or more.

Designed for ingesting, querying and storing log data at petabyte scale, the Hydrolix streaming data lake uses a stateless, decoupled architecture to complement Splunk for observability of large volumes of log data. Enterprises dealing with log data at scale (from at least one terabyte per day up to hundreds of terabytes per day) are faced with the decision of paying high storage costs, discarding older and potentially useful data, or moving data into tiered, cold storage where it’s difficult to access and analyze. Now they can add Hydrolix through the Splunk marketplace and reduce the total cost of ownership of their observability stack by 10x or more.

In June, Hydrolix launched its first integration with Splunk, the Splunk DB Connect for Hydrolix driver. It lets users send their most valuable log data to Hydrolix where storage costs are reduced by 10x or more while allowing users to execute SQL queries against external databases from the Splunk UI via a driver supplied by Hydrolix. The announcement expands Hydrolix integration options, especially for enterprises ingesting terabytes of log data daily in use cases that include:

• Content delivery networks (CDNs) and multi-CDN monitoring
• Firewall logs
• Real-time threat security hunting

Hydrolix Splunk connectors enable enterprises to maximize the value of observability data for the most data intensive use cases while allowing developers to continue to use their familiar Splunk UI.

*Hydrolix Search for Splunk Capabilities*

• Set up in minutes with minimal configuration
• Query Splunk using SPL (the proprietary Splunk query language) via a new hdxsearch command that translates SPL into SQL
• Automatically find the primary timestamp for the specified table
• Apply time range filtering from the Splunk UI
• Limit query results to protect the Splunk UI

Splunk users can contact Hydrolix regarding a trial or demo.