Cloud-based data leader chooses Fleet for orchestration

Challenge

A leader in cloud-based data platforms, needed to modernize device management for tens of thousands of endpoints while maintaining performance and cost efficiency. Legacy device management tools caused bottlenecks by delivering data updates only every 24 hours, limiting their ability to monitor and optimize device performance. Additionally, a lack of seamless cross-platform compatibility and dependency on proprietary systems increased operational complexity and hindered their IT and operations teams.

Solution

They transitioned to Fleet for centralized, high-frequency data collection without reliance on traditional MDMs. By leveraging Fleet’s seamless integration with its existing infrastructure, including AWS Kinesis Firehose, they gained the ability to process osquery logs and device telemetry at scale. The IT team also implemented Fleet’s flexible JSON-based data reporting, empowering teams to access data faster and enabling smarter decision-making across the organization.

Results

By switching to Fleet, it transformed its device management strategy, improving performance, reducing costs, and enabling cross-platform orchestration.

Their Story

This cloud-based data company automatically manages all parts of the data storage process, including organization, structure, metadata, file size, compression, and statistics. It sought a modern solution to manage tens of thousands of devices by providing thorough endpoint telemetry, faster incident response, threat-hunting capabilities, enhanced software patching workflows, and easy data sharing across internal teams.

With Fleet, they achieved this with:

• Definitive data
• Unified reporting language
• Instant audits
• Portability

Definitive data

Fleet’s configurable data update cycle revolutionized their endpoint management. This allowed them to choose a 15-minute frequency, enabling precise device performance tracking without triggering their internal rate limits. Unlike other legacy systems, Fleet gives you complete control over how frequent and labor-intensive the scanning is with performance impact being automatically reported.

Unified reporting language

Fleet integrated directly, using AWS Kinesis Firehose to stream osquery logs at high speeds. This ensured its teams could ingest and model large datasets effortlessly with standard formats without requiring the standard programming languages or variations across macOS, Windows, and Linux.

Instant audits

Fleet enables teams to run live queries and gain insights in near real-time, enabling faster incident responses, threat hunting, and compliance reporting. Scheduling these queries to run in the background, meant that compliance policies would always check against certain states of security settings to stay ahead of audits.

Portability

Portability with Fleet extends beyond data—it enhances the flexibility of your entire tool stack. Fleet and osquery function as standalone solutions, free from reliance on traditional MDM systems, and enable you to ship data to any platform like Splunk, Snowflake, or any streaming infrastructure like AWS Kinesis and Apache Kafka. This independence means that if an organization chooses to switch MDM providers, the Fleet + osquery stack can easily integrate with the new solution avoiding disruptions to data collection.

Conclusion

The cloud data platform's adoption of Fleet Device Management exemplifies how modern IT organizations can achieve operational excellence with the right tools. By delivering timely, actionable data and integrating seamlessly with their existing ecosystem, Fleet enabled them to reduce costs, improve performance, and foster innovation across teams.