Blogs
September 30, 2026 / October 1, 2026 by Jeremy Fisher | Leave a Comment
Splunk, Vega, and Query take three different approaches to federated search. Here is how each one works, what it commits you to, and who pays. I get a version of the same question every week. How is Query’s federated search different from Splunk’s? And lately: how is it different from what Vega is doing? The […]
Read more »
August 6, 2024 / January 20, 2025 by Jeremy Fisher | Leave a Comment
Now that OCSF 1.3 is out, I’m overdue to highlight some of the cool new features we’ve seen released in OCSF. Version 1.2 dropped in early May and version 1.3 was just released. As usual, some of the innovation deepens existing capabilities and some adds new capabilities. Here’s my take on what’s new and noteworthy: […]
June 5, 2024 / December 13, 2024 by Jeremy Fisher | Leave a Comment
Query 💖 OCSF: how it began Query set out to build a new federated search platform in late 2022. We had conviction that the market needed: But providing all of this is a challenge when there are so many ways data is represented. We needed a unified data model. Should we use CIM? ECS? UDM?!? […]
