Lacework supports two export mechanisms—data share via Snowflake and data export via Amazon S3. Both tools are used to export Lacework-processed data to either report/visualize alone or combine with other data to gain insights and make meaningful business decisions. These tools offer long-term data retention and encompass all of Lacework’s data—including alerts, DNS lookups, IP connections, process attributions, etc. The table below compares the two mechanisms to help you determine which best suits your needs.
|Category||S3 Data Export||Snowflake Data Share|
|Purpose/use case||If you’re an existing Snowflake customer, you have the option to use the data share to house all of your data in one central place. This additional data can be used to provide insights into what’s happening in your environment in relation to other activities.|
|Update frequency||Every hour automatically||Every hour automatically|
We display multiple views that can be shared via Snowflake data share or S3 data export. Each view reflects a table of data in particular areas of the product. In some cases, you may need to merge these views to answer your specific data question.