[wwilim]

I briefly worked for a place which used Splunk for what you'd normally use ELK for. I found it way more forgiving and in many ways easier to deal with than ELK, if only for the 100% certainty that you can run any query on anything, even if it sometimes takes ages. It was an old version, too.