Case study
AIOps and Monitoring for Government Healthcare
How SquareShift built a unified AIOps observability platform for a national public-sector healthcare network, correlating SNMP and syslog data across a mixed device fleet.
A public-sector healthcare authority managing a nationwide network of hospitals and primary care clinics.
Its digital infrastructure runs mission-critical systems for patient management, staff coordination, and health-data security.
Events processed per minute across the monitored network. Dashboards delivered across teams and device protocols. Network and security devices unified under one observability platform.
Key servicesHow SquareShift delivered it.
The challenge
The client ran a nationwide network of hospitals and clinics on a mixed fleet of legacy and modern devices, spanning on-prem and cloud infrastructure. Monitoring data arrived through inconsistent protocols and formats, with no shared layer to correlate it across teams.
Log and metric volume was heavy — about 8TB a day across roughly 10 million events per minute — and the client needed AIOps-grade observability with role-based access control, but had no dashboarding or correlation capability to make sense of the flow.
What we delivered
SquareShift built custom SNMP and syslog adapters to normalize data from the client’s mixed device fleet, then routed it through Elastic ingest pipelines with lifecycle policies to keep long-term storage costs down.
The team developed 35 dashboards spanning different teams and device protocols, paired with role-based access controls so each group sees only the data relevant to its own operations.
The payoff
Observability now spans 14 network and security devices under one platform, ingesting roughly 10 million events per minute through a single correlated pipeline instead of disconnected tools.
Tiered indexing keeps the healthcare network’s monitoring data affordable to retain at scale, while the 35 dashboards give operations and security staff a shared, role-appropriate view of system health.
Legacy SNMP and syslog feeds don't need replacing to unlock AIOps value — they need a common schema and tiered storage so dozens of device types behave like one system.
Platform & Software Engineering Practice Lead, SquareShift
Where this work sits