Cribl

San Francisco, CA, USA
2017
  |  By Michelle Zhang
Cybersecurity is moving fast, and if your security data management strategy can’t keep up with your growth, you’re already behind. Security operations centers (SOCs) today face mountains of data spread across countless tools and platforms. Combine that with evolving cyber threats, and you have an environment that demands a smarter approach to SIEM data management.
  |  By Patrick Wade
Recently, I have seen a trend of enterprises moving toward OpenTelemetry (OTel) for application tracing. Tail sampling, in particular, has emerged as a preferred approach to gain actionable insights while balancing data volume and cost. OpenTelemetry offers developers and practitioners the ability to instrument their code with open-source tools, moving away from vendor-provided tools for application instrumentation.
  |  By Holly Anderson
We’ve been steadily building strong momentum with Microsoft over the past year, and the latest step forward is a significant one: Cribl solutions are now available on the Microsoft Azure Marketplace. But why this focus on Microsoft Azure? The answer lies in what customers are prioritizing and discussing with us.
  |  By Brad Quandt
In previous discussions about Managed Security Service Providers (MSSPs), I’ve looked into the architectural benefits and product-level advantages of integrating Cribl. Today, let’s explore why Cribl isn’t just technically sound—it’s also a smart business decision that can help MSSPs like you manage and lower egress costs, creating a significant impact on the financial efficiency of your operations.
  |  By David Cavuto
Sending events into a data lake can make it challenging to find and organize them. Using tagging with Cribl Lake in conjunction with Cribl Search across a primary data source will increase speed of analysis and reduce costs, as well as help keep your data organized. This scenario involves us performing an investigation for an incident that occurred where our systems indicated unusual activity from an IP address of aaa.bbb.ccc.ddd.
  |  By Cam Borgal
At Cribl, we’ve been deeply investing in the Microsft Azure security space. Last year, we introduced a native integration with Microsoft Sentinel, enabling us to write data seamlessly to native and custom tables. As highlighted earlier, working with Microsoft Sentinel and Log Analytics involves interacting with tables with predefined column names and data types.
  |  By Giovanni Mola
Exciting News! The Pack Dispensary just got an upgrade with the release of permalinks for Packs. This may sound simple, but it significantly alleviates a major pain point Cribl Dispensary users faced when sharing Pack references with colleagues.
  |  By Jennifer Marandola
Cribl employees are renowned for their insatiable curiosity, especially when it comes to their passions. Having been a technical writer for most of my adult life, this goat is deeply passionate about two things: writing engaging content and understanding the mindset of our users. As one of our founders always says, “Software is a people business.” To make my users successful, I need to know how they think. But what if the “user” is a machine? This goat is intrigued.
  |  By Judith Silverberg-Rajna
Today’s IT and security environments have gone from “big” to “massive” in just a decade or two—endpoints have practically exploded (think hundreds of thousands of servers, not just a hundred). Add in a dizzying array of data types and vendors, and what do you get? A whole lot of chaos. So why, oh why, does agent management still feel like it’s stuck in the early 2000s?
  |  By Robert Lackey
Imagine you’re the protector of a castle. Your walls are tall, the gates are strong, and the guards are well-trained. But what if an intruder was still able to slip past your defenses? Even with the best security tools, not every threat will be caught. Threat hunting is the proactive approach to finding attackers that might have bypassed your defenses.
  |  By Cribl
Cribl’s Dan Schmitz, Senior Staff Solutions Engineer, walks through the Cribl platform to show how Cribl Lake can cut operational costs, optimize data tiers with routing, be used as an alternative to archive and more. If you feel the pressure to cut storage costs, give Cribl Lake a try today!
  |  By Cribl

## Follow Cribl

  |  By Cribl
What does it take to build software for the most security-demanding customers worldwide? At Cribl, building secure products is integral to our engineering identity. We have established a secure software development lifecycle that is both culturally and policy-driven, integrating product security tooling and processes into every architecture review, pull request, and release, whether major or minor.
  |  By Cribl
"AI is really hot right now" In this episode of Pipeline Talk (Hot Ones Edition), Joel Vincent (he went to MIT) discusses how Cribl Copilot acts as your trusted, AI-augmented wingman for deploying, configuring & troubleshooting your Cribl portfolio.
  |  By Cribl
Cribl Copilot accelerates your productivity, activates the afterburners of your team’s efficiency, eliminates pilot error by closing the skills gap, and gives you a smooth landing of value with your Cribl Stream, Edge, Search, and Lake investment. It’s the fastest and easiest way to make the value of your Cribl data engine soar. Cribl’s Observability Professor is back with another Cribl Copilot demo! Instead of manually building a GDPR-compliant data pipeline, let Cribl Copilot act as your AI wingman and do the heavy lifting!​
  |  By Cribl
AI-powered Cribl Copilot accelerates your productivity, activates the afterburners of your team’s efficiency, eliminates pilot error by closing the skills gap, and gives you a smooth landing of value with your Cribl Stream, Edge, Search, and Lake investment. It’s the fastest and easiest way to make the value of your Cribl data engine soar. In this video, the Observability Professor shows how easy it is to find VPC Flow logs across all of your datasets using Cribl Search and our search-in-place technology.
  |  By Cribl
Take off on Day 1 of your deployment with Cribl Copilot – your AI wingman – integrating Cribl’s portfolio with your data. AI-powered Cribl Copilot accelerates your productivity, activates the afterburners of your team’s efficiency, eliminates pilot error by closing the skills gap, and gives you a smooth landing of value with your Cribl Stream, Edge, Search, and Lake investment. It’s the fastest and easiest way to make the value of your Cribl data engine soar.
  |  By Cribl
In the quest to turn our outdated and disorderly SIEM into a modern, streamlined and manageable solution, we turned to Cribl. Together we develop a centrally managed environment that empowered our teams to manage multiple data sources and destinations with improved time-to-value, reducing data flow steps, and increasing sustainability. Join this session to learn how we used Cribl to modernize and streamline our SIEM operations into a single point of management solution.
  |  By Cribl
This video showcases how Cribl products work together to power the Data Engine for IT and Security. Watch to see how IT and security teams can transform data management with Cribl. And the best part? No vendor lock-in, ever.
  |  By Cribl
How do you get the data out of your infrastructure and applications in order to properly observe, monitor, and secure their running states while minimizing overlap, wasted resources, and cost? Many business folks need a broad category of tools in all their environments to solve challenges such as up and down monitoring, metrics, a time series database (TSDB), log analytics, event streaming, security information and event management (SIEM), user behavior analytics (UBA), and data lakes. The answer to the proposed question to solve these hurdles is using an observability pipeline.
  |  By Cribl
Observability allows you to understand the behavior of applications and infrastructure from the data they produce.
  |  By Cribl
Using Splunk for long-term storage can drive up costs and slow down searches, especially as data volumes increase and teams expand their use cases.
  |  By Cribl
The observability market is changing quickly. Rushing into a monolithic observability product limits your future options by locking you in to a single vendor.
  |  By Cribl
Traditional security tools struggle to adapt to the new world of cyber threats. To keep up with the growing number of daily threats, understaffed security teams need new cloud-delivered solutions and tactics focused on generating attack resolutions, consistently and repeatedly. Enter Exabeam. Exabeam powers security teams with analytics-driven insights to uncover, investigate, and resolve threats legacy tools may miss.

Route observability data where it has the most value. Slash costs, improve performance, and get the right data to the right destinations, in the right formats, at the right time.

Cribl is a company built to solve customer challenges and enable customer choice. Its solutions deliver innovative and customizable controls to route security and machine data where it has the most value. We call this an observability pipeline, and it helps slash costs, improve performance, and get the right data, to the right destinations, in the right formats, at the right time.

LogStream Gives You The Simplicity, Flexibility, and Control...

  • To Route Your Data: Send data to the most effective destinations including low-cost storage locations like S3 for long-term retention. Route data to the best tool for the job – or all the tools for the job – by translating and formatting data into any tooling schema you require. Let different departments choose different analytics environments without having to deploy new agents or forwarders.
  • To Reduce Your Data: Reduce as much as 50% of ingested log volume to control costs and improve system performance. Eliminate duplicate fields, null values, and any elements that provide little analytical value. Filter and screen events for dynamic sampling, or aggregate log data into metrics for massive volume reduction. Do all of this without worry: You can keep a full-fidelity copy in a low-cost destination and replay it back if needed.
  • To Collect More Data: LogStream is the best way to get multiple data formats into your analytics tools. Use the LogStream universal receiver to collect from any observability data source – and even to schedule batch collection from multiple APIs. In addition, recall data from low-cost storage to replay logs to analytics tools for later investigations with ad-hoc data collection.
  • To Shape Your Data: Shape all of the data you need to drive decisions about your environment. Translate and transform data from all of your sources to the tools you choose. Get a more complete picture of your data by enriching logs with third-party data. LogStream collects data from all of your sources and shapes it into actionable logs and metrics for analysis.

Cribl’s mission is to unlock the value of all your observability data, regardless of source or destination.

Download LogStream for free to get started!