Trellix: Using Amazon OpenSearch Service to improve security analytics ingestion and enable genAI
Trellix migrated its self-managed Elasticsearch workloads on Amazon EC2 to Amazon OpenSearch Service to reduce operational cost and improve the reliability and scalability of its security analytics platform.The company ingests and stores billions of daily customer logs and makes them searchable through a web interface for auditing, filtering, malware detection, and other security uses.Trellix collaborated with AWS and used OpenSearch Ingestion pipelines, Amazon S3, Amazon SNS, Amazon SQS, Amazon CloudWatch, and Amazon Managed Grafana to support varied data types, monitoring, and visualization.The migration completed with no downtime and minimal customer impact, and Trellix also positioned the platform to support generative AI use cases such as Trellix Wise using Amazon Bedrock and Amazon Nova Foundation Models.