Cribl Stream is a real-time security and observability data processing pipeline that can be used to collect, transform, enrich, reduce, redact, and route data from a variety of sources to a variety of destinations. One of the popular destinations for Cribl users is Elastic SIEM. This blog post will walk you through the steps on how to set up Cribl Stream to normalize and forward data to use with Elastic Security for SIEM.

There is more data available to us than ever. Storing this data is important — but deciding on the right type of data storage solution is not so clear. This article explores two primary types of big data storage: data lakes and data warehouses. We’ll examine the benefits of each, then discuss the key differences between a data lake and a data warehouse, so you can decide on the best approach for your business.

In this blog series, we’ll explore how Cribl Stream can leverage your existing cross-domain solution (CDS) to easily collect and send your log and metric data between disparate security domains or across air-gapped networks. The goal is to retain as much fidelity of the data as possible, deduplicating processes and simplifying management efforts.