Cybersecurity is moving fast, and if your security data management strategy can’t keep up with your growth, you’re already behind. Security operations centers (SOCs) today face mountains of data spread across countless tools and platforms. Combine that with evolving cyber threats, and you have an environment that demands a smarter approach to SIEM data management.

Recently, I have seen a trend of enterprises moving toward OpenTelemetry (OTel) for application tracing. Tail sampling, in particular, has emerged as a preferred approach to gain actionable insights while balancing data volume and cost. OpenTelemetry offers developers and practitioners the ability to instrument their code with open-source tools, moving away from vendor-provided tools for application instrumentation.

We’ve been steadily building strong momentum with Microsoft over the past year, and the latest step forward is a significant one: Cribl solutions are now available on the Microsoft Azure Marketplace. But why this focus on Microsoft Azure? The answer lies in what customers are prioritizing and discussing with us.

In previous discussions about Managed Security Service Providers (MSSPs), I’ve looked into the architectural benefits and product-level advantages of integrating Cribl. Today, let’s explore why Cribl isn’t just technically sound—it’s also a smart business decision that can help MSSPs like you manage and lower egress costs, creating a significant impact on the financial efficiency of your operations.

Sending events into a data lake can make it challenging to find and organize them. Using tagging with Cribl Lake in conjunction with Cribl Search across a primary data source will increase speed of analysis and reduce costs, as well as help keep your data organized. This scenario involves us performing an investigation for an incident that occurred where our systems indicated unusual activity from an IP address of aaa.bbb.ccc.ddd.

At Cribl, we’ve been deeply investing in the Microsft Azure security space. Last year, we introduced a native integration with Microsoft Sentinel, enabling us to write data seamlessly to native and custom tables. As highlighted earlier, working with Microsoft Sentinel and Log Analytics involves interacting with tables with predefined column names and data types.

Exciting News! The Pack Dispensary just got an upgrade with the release of permalinks for Packs. This may sound simple, but it significantly alleviates a major pain point Cribl Dispensary users faced when sharing Pack references with colleagues.

Cribl employees are renowned for their insatiable curiosity, especially when it comes to their passions. Having been a technical writer for most of my adult life, this goat is deeply passionate about two things: writing engaging content and understanding the mindset of our users. As one of our founders always says, “Software is a people business.” To make my users successful, I need to know how they think. But what if the “user” is a machine? This goat is intrigued.