We wanted to make UW–Madison employees aware of upcoming changes to the Office of Cybersecurity’s log management system, powered by Elastic. The Division of Information Technology completed the purchase of Elastic Cloud licensing, along with a six-month extension of the current on-premises environment. 

Over the next six months, the team will:

• Transition log sources from on-premises to Elastic Cloud
• Engage with current Elastic users across the university to support the transition
• Identify opportunities to improve scalability, resilience, and long-term sustainability

This work supports improved visibility across systems and lays the groundwork for more consistent and automated responses over time.

Key milestones

Completed

• Plan and design

In Progress

• Log source migration, tentative completion Sept. 7
• Log normalization
• User security setup, starting with the CSOC, then reaching out to users who have logged into Elastic in the last 60 days

Upcoming

• CSOC User Acceptance Testing (UAT), expected start Sept. 7 with tentative completion Oct. 5
• Campus Partner UAT, beginning sometime in September

Project completion

• October 25, 2026

Questions?

We will continue to provide updates on this work. Check back here to find the most up-to-date insights and information. In the meantime, if you have questions or concerns, please reach out to the Cybersecurity team.