← All case studiesRetail & E-commerce · Elastic consulting

Case study

A Retailer Skips a 52 TB Log Transfer and Saves Weeks on Its Move to Elastic Cloud

SquareShift migrated only system data, modernized ingestion and security, and fixed issues as they surfaced.

Book a session →
5System data types migrated instead of raw logs
52 TBRaw log transfer avoided, saving weeks
9Migration issues found and resolved

Client

A retailer that ran a large on-premises Elasticsearch environment that had grown complex over time.

Industry

Retail & E-commerce

Services

CMCloud Modernization

Stack

Elasticsearch · Kibana · Logstash · Elastic Cloud · Fleet · Agents · SAML

How SquareShift delivered it.

01

Project context

The client wanted to move to Elastic Cloud, simplify operations and minimize downtime. SquareShift migrated only system data, modernized ingestion and security, and fixed issues as they surfaced.

02

Project objectives

Migrate to Elastic Cloud with minimal transfer.

Modernize ingestion, add SAML sign-on, set up monitoring and fix alerting.

03

Challenges

High operational overhead, storage limits, inconsistent templates and legacy configurations.

No central monitoring and no clear path for 50+ TB of data.

04

Solution delivery

SquareShift migrated only Kibana, alerting, security, templates and lifecycle policies, instead of moving 52 TB of raw logs.

Saved weeks of transfer time, making the environment operational quickly.

Rebuilt missing Logstash pipelines and fixed Fleet server and policy configuration.

Fixed SAML dashboard access, reporting exports and cloud repository errors.

Repaired Watcher rollover, monitoring lifecycle policies and field mismatches.

05

The outcome

The move skipped a 52 TB raw log transfer. That saved weeks of transfer time and made the environment operational quickly.

“
Move the system data that makes the environment work, and the weeks of transfer time go away.

Senior Consultant, SquareShift

Related work