example app

Diagram

WAF

Vendored WAF
Not much insight
Limited API

Web

Mix of NGINX and Apache

Tier 1

95% Java apps
All T1s cannot read/write from data tier
Many will write event to queue, or comm with SaaS
- "A user is attempting to log in"

Tier 2

95% Java apps
One of 2 tiers that can access data we store
Critical

DB

Vendored DB
Insight is costly, so limit use

Queue

Vendored Queue
Insight possible, just never taken advantage of

Queue Consumer

95% Java apps
Primary tier related to writing new data/events
Critical

SaaS

Vendored SaaS (honestly, could be some other internal team with an API)
Insight not possible, or very limited

Questions

ENRICHMENT

how do we enrich services we own ??
- e.g. java app
how do we enrich services we do NOT own, but have access to underlying APIs ??
- e.g. RDS
how do we enrich services we do NOT own AND have a limited API ??
- e.g. imperva WAF

SERVER MONITORING

is this a tool that would be a replacement for traditional server monitoring ??
- e.g. nagios // USE stats
IF so, how would that be done ??

ALERTING

is there alerting ??
how is alerting managed ??
what delivery options are there ??
- e.g. email, slack, SMS

REPORTING

personal dashboards ??
shareable, community dashboards ??
shareable, team only dashboards ??
CRON report generation and delivery options
- e.g. send PDF, via email, once a week to XYZ ??

RBAC

is there SSO capabilities ??
what controls does one have over access to the various components ??
how are keys created/issued/expired ??

INFO

300+ mil events ingested everyday
230+ mil PROD events ingested everyday