Reverse cloud migration: Why companies move away from the cloud and How SIEM/ Log Management Solutions will be affected from this migration

For the past few years, there has been a global trend of moving from cloud to on-premises infrastructure. There are many reasons for this shift [1,2,3,4,5,6,7,8,9,10,11,12].

I want to consider this return to on-premises systems from a different perspective, specifically regarding SIEM and log management. You should evalate the other side of the coin like:

• If you send your logs out of your company, they no longer belong to you.
• Once the service ends, it is uncertain whether you can retrieve your logs, and if you can, the format in which you will receive them is unclear.
• If you can only retrieve them in CSV or text format, they may be useless to you.
• If you receive logs in the format of the SIEM service you used, you must license this SIEM to continue using the old logs for searching, scanning, and reporting, which would negate your cost advantages.

Will the company providing the SIEM service in the cloud continue to store these logs for you at no or low cost for another two years? If not, will they deliver the logs to you? How? Assuming you received this service for 10000 EPS, a two-year archive would generate terabytes of logs. How would this be transferred? Suppose it was transferred. Could you use these transferred logs without the SIEM software in the cloud? Let’s say you received these logs in a zipped text format. Is there a system that can open terabytes of text files and search within them? [13,14]

References

1. https://www.i3d.net/reverse-cloud-migration-why-companies-move-away-from-cloud/
2. https://www.sangfor.com/blog/cloud-and-infrastructure/what-cloud-repatriation
3. https://dignitas.digital/blog/reverse-cloud-migration/
4. https://www.republicworld.com/business/industry/why-companies-are-reversing-cloud-migration/?amp=1
5. https://www.appdynamics.com/blog/cloud/cloud-repatriation-whats-behind-the-return-to-on-premises/
6. https://securityboulevard.com/2023/08/cloud-repatriation-the-unforeseen-reversal-in-cloud-computing-trends/
7. https://www.splunk.com/en_us/blog/learn/cloud-repatriation.html
8. https://www.forbes.com/sites/peterbendorsamuel/2021/08/10/why-is-cloud-migration-reversing-from-public-to-on-premises-private-clouds
9. https://www.swissvault.global/2023/06/21/the-looming-backlash-against-the-data-storage-industry
10. https://www.datacenterdynamics.com/en/opinions/bringing-the-cloud-back-on-premise-improving-security-and-reducing-costs/
11. https://www.infoworld.com/article/3712861/why-companies-are-leaving-the-cloud.html
12. https://itbrief.com.au/story/why-companies-are-bringing-workloads-back-on-premise
13. https://drertugrulakbas.medium.com/soc-bulutta-siem-veya-y%C3%B6netilen-siem-hizmetlerinde-madalyonun-%C3%B6teki-y%C3%BCz%C3%BC-98dae87154fd
14. https://drertugrulakbas.medium.com/bulut-ve-loglar-b267a8bbf814