In an IT-integrator, I'm currently trying to evangelize the use of log file monitoring of hardware installations. The idea is to use a Elasticsearch/Logstash/Kibana stack (most flexibility, open source).
However to convince management I'm looking for some proven use cases.
Whom of you have implemented such tracks and what where the results?
The main metric to report efficiency improvements is the reduction in Mean Time to Resolution. I have seen marketing-quotes such as 70% reduction in MT(T)R (Splunk), 90% reduction (Sumo). I'm 100% convinced of its major impact, but I'm looking for some more realistic expectations (obviously, I acknowledge that it depends on the level of depth one puts into the monitoring, anomaly detection, etc).
I'm curious about your answers! ;-)