Case Study: BTG Pactual cuts security investigation costs and boosts data retention with Imply Lumi

BTG Pactual cuts Splunk costs by 60% with Imply

BTG Pactual, a leading global investment bank, faced a challenge with its security analytics platform as it generated approximately 25 terabytes of security telemetry daily. This volume was far more than it could efficiently retain and query within Splunk, leading to high costs. To manage this, the team had to reduce indexed data and push more into cold storage, which limited access to historical data during investigations and delayed response times. This cost pressure also prompted finance leaders to consider a disruptive SIEM migration.

The vendor Imply addressed this by deploying its product, Imply Lumi, as a data layer underneath Splunk. This solution allowed all existing dashboards, alerts, and workflows to remain unchanged. By separating how data is stored from how it is queried, Imply enabled BTG Pactual to reduce Splunk-related observability costs by more than 60%. The impact included a 4x increase in data retention, from 90 days to 365 days, and the ability to bring over 10 terabytes per day of additional security data back into scope for faster, more responsive investigations.

BTG Pactual