SentinelOne DataSet

SentinelOne DataSet (formerly Scalyr) is a high-performance, cloud-native log management, observability, and data lake platform engineered to ingest, search, and analyze massive volumes of live streaming machine telemetry at petabyte scale. Operating with an optimized columnar database architecture that eliminates the storage overhead and latency of traditional index-heavy log platforms, DataSet provides security operations centers (SOCs) and DevOps teams with sub-second search speeds across billions of log events.

The platform ingests structured and unstructured data from any source—including operating system logs, cloud infrastructure telemetry, network firewalls, microservices, and applications—without requiring upfront schema definition or index maintenance. Key capabilities include sub-second query performance on terabytes of raw logs, live streaming log tailing, automated parsing and extraction, customizable real-time dashboards, alerting, and cost-effective petabyte-scale data retention. DataSet serves as the hyper-scalable data repository powering the SentinelOne Singularity Data Lake, enabling real-time cross-telemetry correlation across all enterprise security tools.

DataSet integrates smoothly with standard data ingestion pipelines including Kubernetes, Docker, Fluentd, Logstash, AWS CloudWatch, Google Cloud, and Apache Kafka. Common enterprise use cases include centralizing enterprise security and application logs, executing lightning-fast threat hunts across massive datasets, meeting multi-year compliance audit log retention mandates (such as PCI-DSS and HIPAA), and providing unified observability across microservices architectures. SentinelOne DataSet delivers exceptional search velocity, seamless horizontal scaling, and significant total cost of ownership reductions.