# 03\_DataStreamer

**AI-Powered Data Ingestion and Routing**

BluSapphire DataStreamer™ is an intelligent data pipeline that gives you control over your security data. It ingests data from any source, uses AI to automatically parse, normalize, and enrich it, and then routes it to any destination—including BluSapphire OnePlatform, third-party SIEMs, or data lakes. DataStreamer breaks vendor lock-in and dramatically reduces the cost and complexity of managing security data.

<figure><img src="/files/S8Z6X813JNbjM4MOoKHN" alt=""><figcaption></figcaption></figure>

## Key Features

* **AI-Powered Parsing:** Automatically parses and normalizes data from over 200 sources without the need for manual Grok or Regex rules.
* **Ingest Once, Route Anywhere:** Ingest data once and route it to multiple destinations simultaneously, including BluSapphire, Splunk, Sentinel, S3, Kafka, and more.
* **Data Enrichment:** Enriches data with threat intelligence, geolocation, and other contextual information in real-time.
* **Logarithmic Scaling:** A highly scalable architecture that can handle millions of events per second (EPS) with a small footprint.
* **Zero Vendor Lock-In:** An open, standards-compliant architecture gives you full control over your data.
* **Massive Cost Reduction:** Reduce your data pipeline costs by up to 60% by eliminating the need for expensive data ingestion and storage solutions.

## How It Works

DataStreamer's AI-powered pipeline automates the entire data preparation process:

{% stepper %}
{% step %}

### Ingest

Collects data from a wide variety of sources, including firewalls, cloud, servers, endpoints, and databases.
{% endstep %}

{% step %}

### Parse & Normalize

The AI engine automatically identifies the data source and applies the correct parsing and normalization rules.
{% endstep %}

{% step %}

### Enrich

Adds valuable context to the data, such as threat intelligence feeds and user information.
{% endstep %}

{% step %}

### Route

Sends the prepared data to your desired destinations based on flexible, user-defined rules.
{% endstep %}
{% endstepper %}

## Benefits

* **Eliminate Manual Parsing:** Free up your engineering team from the tedious and error-prone task of writing and maintaining parsing rules.
* **Gain Control of Your Data:** Break free from vendor lock-in and send your data where you need it, when you need it.
* **Reduce Costs:** Dramatically lower your data ingestion, storage, and management costs.
* **Accelerate Security Projects:** Onboard new data sources in minutes, not weeks, and get value from your data faster.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.blusapphire.io/release-6.0/03_datastreamer.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.