Operations | Monitoring | ITSM | DevOps | Cloud

In this first episode (or at least the first REAL episode, yesterday’s “episode 0” doesn’t count) of Cribl on your coffee break, Leon does what we all do when we unwrap a shiny new data, telemetry, observability, or monitoring tool: He takes the shortest path to jamming some data into that thing and seeing what it looks like. Is it sophisticated? Nuanced? Well-thought-out? Hell no! But it scratches an itch. There will be time to do more real-world stuff tomorrow.

In this Black Hat talk, Nicole Beckwith introduces APEX (Adversarial Pattern Extraction and Correlation), a detection framework—not a Cribl product—that clusters TTP-based signals around entities to support behavioral detection. It is intended for security practitioners, SOC and detection teams, and threat hunters who want to learn how to use raw telemetry or OCSF data, TTP chaining, time windows, criticality, and cross-correlation to detect behavior beyond static indicators and rule-count coverage.

In this episode, Leon explores some of the new features, functions, updates, and improvements in release 4.19.1, which includes private links, setting a region per workspace, choosing a release channel per workspace, and a look at Output Routers, an incredibly useful (but unfortunately under-loved) feature that’s been around for a hot minute.

See how Cribl's AI Observability App gives teams one place to search, investigate, and report on AI telemetry across models, tools, and environments. In this 5-minute demo, we tackle cost, quality, security, and governance blind spots. Start treating AI observability as a telemetry problem. Collect once, use everywhere, no lock-in.

In this episode, Leon explores some of the new features, functions, updates, and improvements in release 4.19, which includes a raft of AI-enabled features including the Cribl Apps, integrated MCP server, and the fact that AI features are now turned on by default. For more information, check out these links.

Hear directly from Cribl partners—including AWS—about what it’s really like to work together. This short is for technology and cloud partners, consulting firms, and customers who want a quick, human view of Cribl’s partner ecosystem and the value it delivers. In under two minutes, partners highlight Cribl’s partner program, the people they work with, and the outcomes they’re delivering for joint customers. You’ll hear about the FedRAMP opportunity, why “it’s all about the data” for AWS, and how Cribl helps get data where it needs to be for shared customers.

This is the "Cribl: The Good Bits" version of a webinar we gave recently, which combined the fermented educational joy of a beer tasting led by Gabe Callahan; and the only-slightly-less-intoxicating demos of the Cribl platform, led by Principal Technical Marketing Engineer Leon Adato.

In this episode, Leon explores some of the new features, functions, updates, and improvements in release 4.18 (from last month) and 4.18.2. For more information, check out these links.

Learn what it’s like to work as an engineer at Cribl, a remote-first company building the AI platform for IT and security data. In this recruiting video, Cribl’s engineering and support leaders share how fully distributed teams collaborate, solve hard data problems, and grow their careers while working from around the world. You’ll hear from managers and leaders in site reliability engineering, security incubation, and technical support about.

This video introduces the new REST Collector Diagnostics feature in Cribl, which helps you troubleshoot API collection issues faster. It’s designed for observability and data engineers who use REST Collector to pull data from external APIs and need deeper visibility into HTTP requests, responses, and errors.