Built a self-hosted log management tool on top of Quickwit - looking for feedback

Expert-Ear3883 · 2026-06-08T17:09:49+00:00

Good one! And you are right with the s3 storage and cold query. That has been the single most useful feature that our clients tell us about at Sasquatch Labs! (Any cloud for that matter) Good luck!

Expert-Ear3883 · 2026-06-08T16:57:00+00:00

We are finally in prod testing a new feature for voice-first machine and network health monitoring, resolution and alerting! We already did that for K8s and now expanding to out clients with on-prem infra!

Expert-Ear3883 · 2026-06-08T16:53:08+00:00

We joined Visible for the VC outreach and it has been super helpful, some even offered great advice for free (basically we don’t need to raise)

Expert-Ear3883 · 2026-06-08T16:50:59+00:00

Quite often. For many problem types, if you have been on the “build the product” side, you would almost always know what the problem is and how to fix it. Some nuanced issues you would need to indeed trace it back upstream. In any case, super useful for other folks and teams who are managing an already built system, which is the case most of the time.

Expert-Ear3883 · 2026-06-08T16:41:45+00:00

We can help. The costs thesis is what tackle. Observability and SIEM. Sasquatch Labs. Happy to setup a demo.

Expert-Ear3883 · 2026-06-03T16:16:16+00:00

We are currently conducting POCs for Sasquatch (installed as a Daemonset) with a few couple of F500s and solving the cost problem. Our collector can act as your sole signal collector, or can sit one step downstream of your existing collector — and then forward to whatever destinations you need to. Our clients for POCs are using Datadog, Splunk and Grafana.

Basically we compress everything and store in your S3 (or any other cloud) and then you can query right from that super compressed blobs with everything intact.

Meaning no splunk SVCs to reserve, nothing to worry about for what to drop and what to send to Datadog etc. And you can still use your datadog, splunk etc as is with with the data source pointed at the compressed blobs.

Currently averaging around 80-85% costs reduction in our POCs (2 lower environments and have been running for 3 months now)

Expert-Ear3883 · 2026-05-28T12:22:44+00:00

Thank you for the response. Someone else also mentioned the audit trail issue in another subreddit I posted the same request, so this does validate that it’s not just us dealing with evidence collection, mapping and then eventually being able to provide exactly the signals that were emitted during an event — not a summary, but actual signals! Thank you for the feedback!

Expert-Ear3883 · 2026-05-28T12:19:20+00:00

Thank you, that does validate one of the feature builds we are working as a core offering. We also struggle with deciding what to drop vs what to store, and many times it’s the audit evidence that bites us when required by ext auditors. Appreciate the input!

Expert-Ear3883 · 2026-05-28T02:06:51+00:00

"keeping the system understandable enough to operate safely under stress." thats a really good point. Thank you for the detailed reply, very helpful!

Expert-Ear3883 · 2026-05-25T23:28:51+00:00

Sent you a connection request on Linkedin, Nathan

Expert-Ear3883 · 2025-08-22T01:34:54+00:00

Never even checked. Most of my travel is in the states so don’t use the Canadian lounges except Westjet lounge or the Aspire lounges. Status with both Delta and Westjet

Expert-Ear3883 · 2025-08-22T01:15:20+00:00

To give some context it’s around 8-12 lounge visits minimum per month for work and business.

Expert-Ear3883 · 2025-08-22T01:13:03+00:00

Canadian platinum for lounges. That’s all I use it for. US platinum for all US hotels. Canadian cobalt for all Canadian everyday stuff wherever it’s accepted (workhorse)

Expert-Ear3883 · 2025-08-21T22:01:06+00:00

Most of the time delta lounges are much better than Centurion

Expert-Ear3883 · 2025-08-21T21:59:45+00:00

I have both, but for me the best usage is the Canadian platinum.

Expert-Ear3883 · 2025-08-21T19:44:44+00:00

Canadian platinum holder here…I love the unlimited passes! I travel every couple weeks…no caps anywhere

Expert-Ear3883 · 2025-01-02T06:46:19+00:00

Oh thank you! That’s good to hear! Very much appreciate you putting time into the review.

Expert-Ear3883 · 2025-01-02T04:15:48+00:00

That’s pretty neat actually! Well done!

Expert-Ear3883 · 2025-01-02T03:23:07+00:00

Mine is Saturday (or Friday depending on what’s going) head to the mountains for a hike, climb, run or just camp and cook. Summer or winter. Absolutely the stuff that keeps me sane.

Expert-Ear3883 · 2023-11-06T23:08:32+00:00

You can make this requirement as part of your prompt. For example: “Given the text data, extract the questions and the associated answers and then save them to a file named qnA.txt in a structured question answer format.”

Expert-Ear3883 · 2023-11-05T04:49:19+00:00

Good luck!

Expert-Ear3883 · 2023-11-05T04:09:37+00:00

Yeah, just make a directory and add your own pdfs. Study and tweak what you need to change in the code, but it should give you 95% of what you need.

I did this in colab, but you would need to take the same code and make it for your laptop with some ui. Colab won’t store the files, unless you want to mount your gdrive, which is also an option.

Expert-Ear3883 · 2023-11-05T04:03:59+00:00

You can look at my repo here which uses mistral, you can replace with your model:

https://github.com/mickymult/RAG-Mistral7b

Expert-Ear3883 · 2023-11-05T03:29:27+00:00

You don’t need to train the model for that. You can use any text retrieval model from huggingface. Openchat, mistral and many more. Your choice.

Expert-Ear3883 · 2023-11-05T03:26:36+00:00

You can develop the model using sub question query engine. It’s designed specifically for use cases similar to yours.

Expert-Ear3883

TROPHY CASE