The Challenges of Legacy SIEM Models | Ali Ghodsi at RSAC 2026

Databricks CEO Ali Ghodsi outlines why traditional SIEM architectures are struggling to keep pace with modern cybersecurity needs. Key takeaways: - Cost & Ingestion: Volume-based pricing and proprietary formats make comprehensive data ingestion slow and expensive. - Retention Issues: High costs lead to short retention cycles, preventing longitudinal analysis of long-term threats. - Data Gaps: Legacy systems often exclude multimodal data, such as audio, video, and LLM transcripts. - Manual Operations: Detection and investigation remain highly manual, leaving SOC teams inundated. Watch the full keynote: https://www.databricks.com/resources/webinar/its-time-leave-legacy-siem-behind?utm_source=youtube&utm_medium=organic-social