---
title: "OCSF"
description: "1 posts about OCSF, summarised, each linking to the original."
---

# OCSF
> 1 posts about OCSF, summarised, each linking to the original.

## Articles

### [Reducing the noise: How Atlassian built an OCSF security lakehouse on Databricks](https://yomu.fyi/post/reducing-the-noise-how-atlassian-built-an-ocsf-security-lakehouse-on-d.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Taylor Kain, Zachary Schmerber (Atlassian), Niels Heijmans (Atlassian)
- Published: Oct 16, 2026
- Type: Problem & solution

Atlassian faced a security data pipeline ingesting 44 billion events daily from 20 years of growth and acquisitions, each with proprietary logging formats. To unify this fragmented telemetry, the team standardized on the Open Cybersecurity Schema Framework (OCSF) and built a security lakehouse on Databricks. They embedded the entire OCSF schema into Go structs (TypeGo), guaranteeing compile-time correctness and reducing AI hallucinations during automated transformation. Table optimization with partitioning and Z-ORDER cut query times by 95%, and Graviton clusters with Photon reduced cost and runtime by two-thirds. The result was a self-service platform where SOC analysts can onboard new data sources in days, and detection teams moved from one-to-one alerts to signal-based clustering using standardized OCSF values.