Grail™, Dynatrace's causational data lakehouse, provides immediate access to vast amounts of historical data, eliminating the need for data rehydration even during lengthy analyses. It helps enhance data investigations using the Dynatrace Pattern Language (DPL) Architect, which allows users to structure data efficiently by extracting typed fields from unstructured text like logs. This process is executed during query reads, offering flexibility without predefined data structures. DPL enables precise querying, particularly in complex security use cases, by allowing the extraction of specific data patterns, thus minimizing errors associated with simple string filtering. The DPL Architect tool assists users in creating and managing these patterns, providing feedback and facilitating faster analytics by allowing integration of preset patterns for popular technologies or the creation of custom ones. This precision is crucial in security investigations or threat-hunting activities, ensuring reliable results by offering detailed access to data without false positives, especially when dealing with complex log records like AWS CloudTrail logs.