Crosstech DataGrain ESO (Events Stream Optimization)

Main articles:

• Data management
• Security Information and Event Management (SIEM)

DataGrain ESO (Events Stream Optimization) is a solution developed by CrossTech Solutions Group. The product allows you to collect, filter and profile incoming IB events, centrally store data in compressed format, and transfer only the necessary data to third-party solutions.

2022: Objectives and main functions

According to information for March, 2022 DataGrain ESO suggests to solve the following problems:

• Integration with target data sources via different protocols and interfaces;
• Implementation of the most efficient structure for long-term data storage;
• Setting up mechanisms for profiling incoming data flow and smart filtering;
• Configure the transmission of filtered data to the SIEM platform in a supported format;

Basic functions

DataGrain ESO can be used to solve the following queries:

• Reduce financial costs of SIEM licensing;
• Centralized storage of all source data in compressed format;
• Profiling of incoming IB event flow in SIEM;
• Multi-stage filtering of IB events;
• Smart filtering;
• Flexible ability to find information in the collected data;
• Support for all major SIEM vendors;
• Support a wide range of target data sources.

What are the results of the ESO DataGrain:

• Optimize the volume of the input event flow to the SIEM system;
• Implementation of long-term storage of retrospective data in compressed format;
• Reduce the financial cost of licensing a SIEM system;
• Increase the efficiency and speed of the SIEM system;
• Reduce SIEM operating costs;
• Minimize analyst errors in manual data processing.

According to developers, DataGrain ESO replaces the following products:

• ArsSight;
• Splunk;
• LogRhythm.