Case study
100 Gigabytes of Logs a Day Unified for a German Luxury Carmaker
How SquareShift built a 16-node Elasticsearch cluster with bi-directional cross-cluster replication, replacing multiple disconnected log tools at a German luxury automotive manufacturer.
Book a session →
Client
A German luxury automotive manufacturer that runs connected services and digital platforms beyond vehicle production.
Industry
Automotive
Services
Stack
Elasticsearch · Kibana · Cross-Cluster Replication (CCR) · Index Lifecycle Management (ILM) · Role-Based Access Control (RBAC)
How SquareShift delivered it.
The challenge
The client runs connected services and digital platforms beyond vehicle production, and its logging had grown into several independent solutions. As data volumes kept climbing, that patchwork left the company with poor availability and scalability, and no single reliable view across production and non-production systems.
What we delivered
SquareShift built a 16-node Elasticsearch cluster with bi-directional cross-cluster replication, so production and non-production environments each keep an independent, always-current copy of the data. The cluster ingests 100GB of log data a day and retains 18TB across hot, warm, and cold storage tiers.
Kibana dashboards, which had no role-based security before, were rebuilt with role-based access control, so every team sees only what it is governed to see. For centralized logging on Elastic, see our Elastic search and observability services.
The outcome
The manufacturer now runs one high-availability logging platform instead of multiple disconnected tools. Compliance gets two independent, always-current copies of the data through bi-directional replication, and Kibana access is now secure and role-based across every team.
Log platforms sprawl one exception at a time. The fix isn't a bigger single cluster — it's replication that keeps two independent copies current, so growth never becomes a single point of failure.
Platform & Software Engineering Practice Lead, SquareShift
