An Analysis of Log Management Practices to reduce IT Operational Costs Using Big Data Analytics

The security operations center (SOC) is a team that is related to many people, processes, and all the technologies. They must monitor the situation through detection, quarantine, and remediation of IT threats. They must consider the potential events in IT operations, whether it is a malicious threat or how it may otherwise affect the business. They need to have adequate staff to ensure that all relevant screens are monitored and tracked. Consequently, IT operational costs have increased according to the number of people employed, as well as the technology tools invested in building SOC teams. This paper proposes a log management architecture using Big Data Analytics to make a new generation of SOC. We have integrated all necessary notification tools from `many' to `one screen.' All monitoring modules have been combined for increasing automation, including replacing new hires in routine operational tasks. Furthermore, based on the results of this analysis, it is found that this form of work is a useful solution that can cover all the necessary tasks better than the original work model. Moreover, the cost analysis in operational reporting has shown that IT expenses decreased by 60% while the return on investment (ROI) shows that the solution can be cost-effective within six months. Consequently, a satisfaction survey shows this solution has a good satisfaction score (4.5 / 5) because employees have more work flexibility and therefore feel less stressed and overburdened.