Operations | Monitoring | ITSM | DevOps | Cloud

This video show how to access Mobot using Sumo Logic UI and demonstrates how Mobot helps you write log search queries in natural language.

We’re back with a new Grafana OpenTelemetry Community Call episode, and this time we’re diving into logging with OpenTelemetry and Grafana Loki! Even better, we’re joined by two fantastic guests: Jack Berg, OTel logging expert, and Ed Welch, Loki guru. Getting both of them in one conversation makes for an amazing deep-dive into all things logging. Logs come in every shape and size, from simple CLI output to massive distributed systems generating petabytes of structured data. In this episode, we’ll talk about.

Security teams are flooded with thousands, or even millions, of signals every day. Sumo Logic’s entity-based SIEM and Dojo AI agents automate the manual work of detection, triage, and remediation so you can act faster on the alerts that matter. Discover how Sumo Logic simplifies security operations, helping you cut through the noise and protect your digital world.

Want to make your logs easier to work with? Excluding unneeded logs from indexing reduces noise and may reduce log management costs. In this video, you’ll learn how to: See for yourself how to improve log utilization with Datadog Log Patterns and log exclusion filters. Then set up an alert to track ingestion spikes.

Are you looking to explore the power of OpenTelemetry and Splunk Observability Cloud in a Kubernetes environment? This video provides a comprehensive, step-by-step walkthrough on how to deploy the OpenTelemetry Demo application in Kubernetes and seamlessly integrate it with Splunk Observability Cloud for metrics, traces, and logs! In this tutorial, you'll learn.

In this Tech Talk, we’ll show you how Splunk’s agentic, AI observability delivers end-to-end visibility of the entire AI stack, from agents and large language models (LLMs) to the underlying infrastructure. You’ll see how AI Infrastructure Monitoring provides teams with data-dense dashboards and detectors for surfacing trends, patterns, and outliers to correlate application health with underlying AI infrastructure performance.

As digital and AI applications become more prevalent, the need for fast, efficient, and consistent management of IT operations is critical. This session will show you how to automate responses to Splunk Observability Platform alerts using Red Hat Ansible Automation Platform's Event-Driven Ansible.

In this session, you will learn how to.

With AI at your side, you can multiply your defense impact. GenAI acts as your smart assistant, helping you: ⦁ Distill and summarize alerts⦁ Create and convert detection logic⦁ Build threat hunting queries⦁ Expedite investigations⦁ Support incident response⦁ And more!

Have a sneak peek at Graylog V7.0. Graylog V7.0 introduces a major step forward in speed, usability, and visibility across your entire security and operations workflow. In this demo, we walk through the newest capabilities designed to help teams detect, investigate, and respond faster than ever. You’ll see how the updated interface streamlines daily tasks, how the enhanced search and pipeline tools simplify complex data handling, and how powerful additions like built-in correlation and modernized dashboards give you clearer insight with less effort.

Join us to chat about the latest Cribl Packs release, how AI comes into play, and a demo to see it all in action.

Google Cloud Security Operations is deprecating the legacy SecOps Forwarder, and OpenTelemetry with Bindplane is the official telemetry ingestion method. In this workshop, you’ll learn how to migrate from the SecOps Forwarder to Bindplane and OpenTelemetry Collectors, the officially supported ingestion model for Google SecOps going forward. We walk through the why, the what, and the how — with practical guidance you can apply immediately.

Clint Sharp explains why traditional schema-on-read systems cannot handle the query loads of the future. Agentic telemetry requires a 360-degree view, but structuring data only when you read it is too slow for AI-driven workloads. The solution is using LLMs to drive the cost of building parsers to near zero. Tools like Copilot Editor allow teams to map data to OCSF instantly, effectively building factories of parsers to handle the scale of agentic AI.

Clint Sharp demonstrates how Cribl Search leverages AI to streamline incident investigation. Starting from a Slack channel, the AI builds an interactive notebook, analyzes order processing logs, and identifies suspicious traffic spikes. It connects high CPU usage to a recent Jenkins deployment, hypothesizing a supply chain attack, and ultimately recommends a rollback. This isn't a far off concept. It is the future of operations arriving right now.

Clint Sharp explains why a common model like OCSF is critical for the future of AI. Agents need standardized data to analyze information effectively on your behalf. He contrasts the traditional manual workflow of checking Slack, tickets, and wikis while asking colleagues with a future where AI fuses this human context with machine data. Instead of just search results, AI agents will hand you examined hypotheses so you know exactly where to take your investigation.

Join us live on Wednesday, December 10th at 11am EDT for the December Community Call. We’ll cover: Hands-on demos of the new Bindplane features you’ve been asking for Recaps of KubeCon+CloudNativeCon NA in Atlanta New Bindplane feature guides and blog posts As always, we’ll wrap with an interactive Q&A, so bring your questions!

Join us as Diego teaches how to build, optimize, and refine high-performing queries, including using key operators and the new Query Agent for natural-language searches.

Cribl Notebooks aims to streamline the investigation process by bringing everything into a single interactive interface. It functions as a virtual war room where teams can collaborate in real time. You can view AI queries and code alongside charts without switching between scattered tabs or workstations. This persistence makes it easier to document the root cause and share the story behind the data.

Learn how to quickly track down performance bottlenecks using Sentry Logs and Tracing. In this video, we walk through identifying a slow screen, jumping into the connected trace, and pinpointing slow backend steps, database calls, and AI/LLM operations. See how logs, issues, and traces work together to show the full picture of what happened in a single session.

See how Sentry Logs can surface hidden state bugs that stack traces alone can’t explain. In this walkthrough, we debug a React Native app with an Express.js backend where a missing diet value causes a crash. We inspect the issue, pull in the connected logs, and confirm whether the problem comes from an initial render or from real backend data. By combining issues, traces, and logs from the same session, you get the full story—and a faster path to the fix.

Learn how to use Sentry Logs to measure how often a bug occurs and which users it impacts. In this example, a React Native app with an Express.js backend crashes when the diet value becomes undefined. After identifying the root cause, we use Explore Logs to count how many times users switch their diet to “none,” filter the related log messages, and group results by user type to understand the impact.

Real-time alerts for your telemetry pipelines are here. In this quick overview, you’ll learn about the new Notifications panel in Bindplane. This update gives you real-time visibility into key changes across your configurations, fleets, and agents so nothing slips through the cracks. You’ll see how Notifications helps you stay ahead of: This new feature centralizes alerts you’d otherwise miss — making Bindplane easier to operate at scale. Email, Slack, and webhook notifications are also on the way.

Bindplane is introducing Fleets — a brand-new way to organize, manage, and operate large groups of OpenTelemetry Collectors at scale. In this video, Ryan walks through how Fleets simplify the way you group agents, roll out configuration changes, monitor health, and keep your entire collector fleet up to date.

Bindplane is a unified telemetry pipeline that helps teams cut observability spend by 50% or more. In this overview, you will learn how to route telemetry from any source to any destination, manage large fleets of OpenTelemetry Collectors, and gain real visibility into collector health, state, throughput, and routing behavior. 

In this episode of Masters of Data, we're breaking down AWS re:Invent 2025 through David's eyes (and probably a few cups of conference coffee). We dive into the massive crowds, killer customer conversations, and product demos that actually worked—because we're all about building real tech, not smoke-and-mirrors clickbait. David geeks out over Mobot, our AI tool that's making workflows smoother (not just another chatbot in disguise), and how attendees couldn't get enough of the live demos. We also throw some shade at the AI-washing epidemic and dig into why practical AI applications in security and observability actually matter.

Get visibility into your AWS WAF logs — without shipping data to a SIEM or building dashboards from scratch. In this video, we walk through the Cribl Search Pack for AWS WAF, letting you search and visualize WAF logs directly in Amazon S3 using search-in-place.

Chris Ebley from Blackwood explains why FedRAMP In Process is a major milestone. It gives federal teams confidence that the product can handle sensitive data, meets strict security controls, and comes from a company committed to operating at the maturity level the government expects. This opens new go to market opportunities and makes it easier for agencies to move forward with Cribl.

CMO Abby Strong explains how Cribl Lake is built for the real demands of modern AI. You get fast storage for high performance workloads and efficient architecture that scales without blowing up your budget. A smarter foundation for the AI era.

In this 10-minute step-by-step walkthrough, Chelsea from the Bindplane Customer Success team shows you how to install your first Bindplane OpenTelemetry Collector and start sending Windows Event telemetry from a Windows VM directly into Google SecOps.

Learn how to configure Bindplane to collect and route Windows Event Logs from a Windows VM into Google SecOps. In this 200 second onboarding walkthrough, Chelsea shows how to build and configure a full SecOps-ready pipeline in just a few minutes. You’ll see how to: Create a Configuration Add the Windows Event Log source Configure the Google SecOps destination Roll out the configuration to an agent running on a Windows VM Start receiving security telemetry inside SecOps.

Bindplane Growth Feature Guide: Filter by Condition — How to Reduce Noise & Control Your Telemetry Pipeline In this walkthrough, Chelsea from the Bindplane Customer Success team shows how to use Filter by Condition, part of Bindplane’s Growth-tier features, to reduce noisy telemetry, improve signal quality, and cut observability costs.

Clint Sharp breaks down the shift from traditional observability to AI ready telemetry. Agents need well formed fields, consistent schemas, and predictable data models. If your environment is full of unstructured logs, agents will give inconsistent answers. The work starts now so your AI future can actually deliver value later.

Clint Sharp explains why data is growing at a 30% CAGR while budgets stay flat. Teams are already running infrastructure at 80 to 90% capacity, and AI agents multiply query volume by ten or fifty. What got you to 2025 will not get you to 2035. You need a new approach to handle AI scale without blowing up cost.

In this video, we'll go over 4 of the most common scenarios you might encounter when trying to setup your Splunk MCP server and provide you with troubleshooting tips to help you get you up and running.

In this video, I introduce Database Monitoring in Splunk Observability Cloud. I'll demonstrate how to spot and resolve slow queries by leveraging rich metrics and correlating database performance directly with traces in Splunk Observability Cloud APM. TOC.

Glenn Block explains how the new Cloudflare source and R2 destination in Cribl Stream lets you ingest WAF, DNS, and Zero Trust logs for full visibility and real time intelligence. Better security, better performance, and lower cost for modern IT and security teams.

Not heading to re:Invent this week? Don't worry—we've got you covered. In this episode, we welcome Architect Solutions Engineer, Jake Lee, to preview the exciting new Sumo Logic tools we are showcasing in Vegas. Our new SOC analyst agent acts as an AI partner that instantly assesses incident severity and recommends next steps—no more drowning in alerts. The MCP server breaks down barriers by letting you query Sumo Logic from Slack or integrate security insights directly into your IDE.

Telemetry growth is about to hit a new level in 2026. Nick Heudecker from Cribl walks through our new predictions report and explains why observability costs are set to surge again, with more than a third of enterprises spending at least 15 % of their IT budgets on telemetry alone. He also shares how agentic AI adds new risk to the data pipeline, why most AI workloads will struggle to scale, and how platform shifts and market forces will reshape the data landscape.

Cribl Guard uses an always running AI agent to spot sensitive data as it moves through your environment and recommend the right protections in real time. In this demo, you will see how the agent samples live events, identifies patterns like credentials and credit cards, and turns them into one click fixes that keep your destinations safe. Faster detection, smarter rule recommendations, and instant mitigation. This is what modern data protection looks like.