Customers consumption monitoring
The platform includes a dedicated Events Per Second (EPS) Monitoring capability, specifically designed for multi-tenant SOC environments.
This monitor provides real-time visibility into log ingestion volumes across all integrated sources, customers and the full whole SOC, enabling accurate operational and cost analysis.
Data sources Auto-Discovery
The EPS monitor performs an automatic discovery of all sources reporting logs to the platform, regardless of how they are connected.
This includes:
Sources directly integrated into the platform
Sources reporting through intermediary systems such as:
Integrated SIEM platforms
Network devices (e.g. firewalls, proxies, gateways)
Both direct and indirect sources are identified and tracked independently, ensuring complete visibility across the entire ingestion chain.
EPS Accounting and Tenant Aggregation
For each discovered source, the platform continuously measures and accounts for the Events Per Second (EPS) it generates.
EPS metrics are:
Calculated per data source
Aggregated per customer (tenant)
Aggregated globally across the SOC
This allows the SOC to understand, in real time:
How many EPS are generated by each individual source (direct or indirect)
How many EPS are consumed by each customer
The total EPS volume managed by the SOC across all tenants
These KPIs are also stored historically to allow analysts investigate customers and data sources behaviour over time.
Cost Visibility and Operational Impact
By correlating EPS metrics with customers and sources, the platform provides full transparency into operational costs.
This makes it possible to:
Identify the most expensive log sources per customer
Understand the real-time cost impact of each tenant
Detect abnormal ingestion spikes that may impact capacity or billing
This visibility is critical for both operational planning and cost optimization in managed security services.
Filtering, Timelines, and Analytics
The EPS monitoring interface allows users to:
Filter metrics by customer
Filter metrics by source
Visualize EPS activity over time for each customer or source
Analyze historical ingestion patterns through time-based views
In addition, the collected EPS data can be used as input for business analytics and reporting, enabling:
Consumption-based billing models
Capacity planning and forecasting
Commercial decision support and customer cost control
By providing real-time, granular, and tenant-aware EPS visibility, the platform enables SOC teams to maintain full control over ingestion volumes, operational costs, and commercial performance.
Last updated