Navan and Tarsal: Revolutionizing SIEM on a Modern Data Warehouse with Rapid Data Ingestion

Introduction

Navan, a leading company in the travel and expense management sector, prioritizes the security and integrity of its data and systems. With a commitment to leveraging cutting-edge technology to safeguard its operations, Navan runs their Security Information and Event Management (SIEM) system on a modern data warehouse. This system is crucial for analyzing security data to preemptively identify and mitigate potential threats.

However, the agility of Navan’s security operations was hampered by the timeconsuming process of ingesting and normalizing data into their warehouse. This is where Tarsal’s innovative data pipeline solution comes into play, transforming the efficiency of Navan’s security analytics.

Challenge

Before integrating Tarsal, Navan faced significant hurdles in maintaining an efficient and responsive security posture on their data warehouse:

• Delay in Pipeline Development: The security team was dependent on various teams to develop and maintain data pipelines, a process that could take between 4 to 6 weeks for each pipeline. This lag significantly delayed the availability of crucial security data.
• Inefficiency in Responding to Threats: The extended timeline for pipeline development and maintenance hindered the security team’s ability to analyze data in real-time, impacting their response to threats.
• Scalability Concerns: As Navan’s data sources and volume grew, the existing process for building and patching pipelines became increasingly unsustainable.
• Lack of Observability: Security team was often in the dark about whether their data was syncing correctly.

Solution

Tarsal offered a revolutionary solution that directly addressed Navan’s challenges:

• Rapid Pipeline Creation: With Tarsal, Navan’s security team can now create new data pipelines into their data warehouse within minutes, bypassing the previously lengthy development process.
• Autonomy for Security Teams: By eliminating the dependency on other teams for pipeline development, Tarsal has empowered Navan’s security team with the autonomy to manage their data pipelines efficiently.
• Scalable and Flexible Integration: Tarsal’s scalable solution ensures that as Navan’s data sources and volumes grow, their SIEM system backed by a modern data warehouse can easily adapt without compromising on performance or security.
• Rich Monitoring: Tarsal provides rich metrics on log health and throughput, along with alerts if any data fails to make it to its destination.

Results

The integration of Tarsal’s data pipeline solution has led to transformative outcomes for Navan:

• Enhanced Threat Detection and Response: The ability to quickly integrate new data sources has significantly improved Navan’s capacity for real-time security analytics, leading to faster detection and response to threats.
• Increased Operational Efficiency: The reduction in time and resources required to build and patch data pipelines has markedly increased the efficiency of Navan’s security operations.
• Future-Proofed Security Operations: With a scalable and flexible data pipeline solution, Navan is well-positioned to adapt to future security challenges and data requirements.

Conclusion

For Navan, Tarsal’s data pipeline solution has been pivotal in enhancing the efficiency and effectiveness of their SIEM system running on a modern data warehouse. By dramatically reducing the time required to integrate and manage data pipelines, Tarsal has enabled Navan’s security team to focus on what they do best: protecting the company’s data and infrastructure from emerging threats. With Tarsal, Navan is setting a new standard in security operations, ensuring they remain at the forefront of technological advancements in the security data lake world.

About Tarsal

Established in late 2022, Tarsal is the security data movement company that provides teams with a powerful platform to run security analytics on top of the modern data stack. Our solution seamlessly connects, normalizes, and routes data to multiple destinations, empowering organizations with total data access and cost-efficient, smart data movement. Tarsal’s technology breaks down silos, reduces vendor lock-in, and allows security teams to run cheaper and faster analytics on best-in-class data infrastructure.