Case study
Security Log Pipelines Automated for a US Cloud Security Firm
How SquareShift automated multi-node Elasticsearch cluster deployment with Ansible and unified ZIA and Okta logs into one schema for a US cybersecurity firm.
Book a session →
Client
A US-based cybersecurity firm that helps enterprises manage cloud security, secure access, and threat and log data at scale.
Industry
Technology
Services
Stack
Elasticsearch · Zscaler Internet Access (ZIA) · Okta · Amazon S3 · Ansible · Elastic Common Schema (ECS) · Elastic Fleet
How SquareShift delivered it.
The challenge
Manual, multi-step cluster deployment was slowing every rollout for the client's log-ingestion platform. Mapping ZIA and Okta security feeds to a common schema added further overhead, and backups and authentication were managed by hand.
What we delivered
SquareShift automated multi-node Elasticsearch cluster deployment end to end using Ansible, removing the manual steps that had slowed rollouts. The team built pipelines that map ZIA and Okta logs into one common schema, and connected Amazon S3 for secure storage.
The outcome
Cluster deployment is now fully automated instead of manual and multi-step. ZIA and Okta logs flow into one common schema, and every cluster ships with CA-signed Fleet configurations and automatic backups. For log pipelines and security monitoring on Elastic, see our Elastic search and observability services.
A security platform that still deploys by hand is carrying its own operational risk — automating the deployment is as much a security control as the schema it ships with.
Security & Compliance Practice Lead, SquareShift
