Abstract: Embodiments described herein are directed to facilitating efficient management of analytics. In one embodiment, data representing an event associated with a tenant is obtained. Based on the tenant, an analytics pipeline corresponding to the tenant is accessed. The analytics pipeline may include a sequence of analytic indicators referencing a set of cybersecurity analytics, from among cybersecurity analytics in an analytics pool, desired for use in analyzing the data representing the event. The set of cybersecurity analytics, referenced by the analytic indicators in the analytics pipeline, is applied to the data to produce an analytic result. In embodiments, each cybersecurity analytic in the analytics pool is configured to detect a cybersecurity-related anomaly or threat. In accordance with detecting an analytic result, the analytic result, or data associated therewith, is provided to an external user computer system.