Case Study: Elastic saves 750 days of analyst time with Tines

Elastic IT and security analysts unlock 750 days of lost time

Elastic, a leading platform for search-powered solutions, needed a better way to handle the high volume of security alerts and log data flooding its InfoSec team. Before Tines, most automation was manual and built with Python, making it hard to scale alert enrichment, formatting, and distribution across more than 1,000 alerts and up to 100 TB of logs each day.

Using Tines as its central automation platform, Elastic built 49 workflows in 12 months, including alert investigation and triage, MFA update rollouts, and unmanaged IP detection. The result was 750 days of analyst time saved annually, with the first workflow alone saving 93 days of work in a week and helping the team operate with the equivalent of at least three FTEs.

Elastic

Aaron Jewitt

Principal Security Analyst