Barracuda Logs Go Conversational

Barracuda is making its Managed XDR security logs conversational, leveraging Databricks' Genie to transform how security analysts interact with data. Instead of wrestling with complex SQL queries across disparate vendor formats, analysts can now ask questions in plain English directly within the XDR dashboard.

This AI-powered log search aims to democratize data access, enabling any team member, regardless of their SQL expertise, to quickly find critical information. Investigations that once took hours can now be completed in minutes, significantly accelerating threat detection and response times.

From SQL Complexity to Conversational Clarity

Historically, sifting through security logs from various sources like firewalls, endpoints, and cloud platforms meant understanding individual schemas and writing tailored SQL queries. This bottleneck often resulted in a queue of requests handled by a few senior analysts.

With Barracuda Managed XDR Genie, users can simply type queries like "show me failed login attempts from external IPs in the last 24 hours." Genie translates these requests into SQL, executes them against the customer's specific data, and returns results in a familiar table format. The generated SQL is also displayed, offering a learning opportunity for analysts.

The system supports multi-turn conversations, allowing for iterative refinement of queries. This context-aware approach mirrors how analysts naturally work, building upon previous questions to drill down into specific details.

Securing Thousands with Tenant Isolation

A critical component of this new functionality is ensuring strict tenant isolation across Barracuda's thousands of customers. A query crossing customer boundaries would be a major security breach.

Barracuda achieves this by integrating row-level security within Databricks Unity Catalog. Genie queries secure views that automatically filter data based on the authenticated user's organization, preventing any data leakage at the data layer. This ensures that even with a conversational interface, security and compliance remain paramount.

Operational Efficiency Gains

The impact on operational efficiency is substantial. Barracuda estimates that recurring log-search requests, which previously consumed 25-30 minutes per ticket for SOC analysts, can now be handled via self-service. This is projected to free up 83 to 100 SOC analyst hours per month.

Looking ahead, Barracuda plans to add features like saved searches, scheduling, and AI-driven summarization and visualization directly within the platform.