When AdventHealth set out to consolidate legacy monitoring, SIEM, and logging platforms across one of the largest not-for-profit health systems in the United States, the stakes involved fifty five hospitals and over one hundred thousand endpoints in a deeply regulated environment where patient care could not be interrupted. The timeline added significant pressure: a four week deadline to migrate their security solution and full observability consolidation in under six months.

This session explores how the team navigated those early weeks, making critical decisions on how to sequence the migration, where to automate, and what to leave behind to ensure a controlled consolidation rather than an operational crisis. Hector Castaneda (Sr. Manager, Technology Infrastructure at AdventHealth) and Dan Roy (Sr. Cloud Engineering Manager at RapDev) will break down the framework behind their results, including a fifty percent reduction in major incidents and cutting mean time to resolution from seven hours to three—with zero impact on patient care.

Ultimately, this is a story about executing under pressure. You will learn how to sequence migrations to preserve audit posture and how to use automation to scale rapidly with a lean team. The presentation provides a framework for modernizing legacy detection logic, ensuring that consolidation improves security rather than simply porting over existing technical debt.