Operations | Monitoring | ITSM | DevOps | Cloud

Search

Optimizing APM Costs and Visibility with Cribl Stream and Search

OpenTelemetry is starting to gain critical mass due to its vendor neutrality and having worked in the APM space for the last five years. I can see the appeal. Using OpenTelemetry libraries to instrument your code frees you from putting vendor libraries in your codebase. The other challenge most customers face is balancing cost versus visibility. While effective, most APM solutions are costly.

Getting Started with Elasticsearch and Python

In the ever-evolving landscape of data management and analytics, the integration of Python with Elasticsearch stands out as a game-changer. Elasticsearch, renowned for its robust distributed search and analytics capabilities, finds a powerful ally in Python through the Python Elasticsearch client. Elasticsearch is an open-source, distributed search and analytics engine known for its scalability and real-time capabilities.

Elastic Search 8.12: Making Lucene fast and developers faster

Elastic Search 8.12 contains new innovations for developers to intuitively utilize artificial intelligence and machine learning models to elevate search experiences with lightning fast performance and enhanced relevance. This version of Elastic® is built on Apache Lucene 9.9, the fastest Lucene release ever, and updates some of our most popular integrations such as Amazon S3, MongoDB, MySQL, and more.

Cribl Stream's Replay vs Cribl Search's Send: Understanding the Differences

In today’s contemporary landscape, organizations produce more data than ever, which needs to be collected, stored, analyzed, and retained, but not necessarily in that order. Historically, most vendors’ analysis tools were also the retention point for that data. Still, while this may first appear to be the best option for performance, we have quickly seen it creates significant problems.

Performing Geolocation Lookups on IP Addresses to Use in Cribl Search

Are you tired of sifting through data without context? Cribl Search adds valuable depth to your data, making it much easier to understand and analyze. No more squinting at cryptic logs or puzzling over unknown IP addresses! ️ Some common examples of how Cribl Search can enrich your data are adding service names or matching to threat intelligence. Another popular data enrichment is adding geographical location to events based on IP addresses.

Generating and Comparing Statistics with Eventstats in Cribl Search

When exploring data, comparing individual data points with overall statistics for a large data set is often useful. For example, you might be interested in understanding when a performance metric rises above the historical average. Or possibly knowing when the variance of that metric increases past a certain threshold. Or maybe noting a change in the distinct number of IP addresses connecting to your public web portal.

Understanding the difference between OpenSearch and Elasticsearch

Search is a fundamental requirement for anyone working with log files. When you have terabytes and petabytes of data, you need to find answers to questions – fast. The search engine that you choose sits as the cornerstone for any technology that helps you look for the information needed to answer questions. While OpenSearch and Elasticsearch may have similar beginnings, their modern iterations have significant differences.

Enrichment: Better Data in for Better Response Times Out

In this conversation, Cribl’s Carley Rosato talks to Aflac’s Shawn Cannon about his role as a Threat Management Consultant, and how he manages their SIEM environment, brings in new data as needed, and works to improve the ingestion process. Our customers are always coming up with new and exciting ways to implement Cribl tools — importing a 34 million-row CSV file into Redis and enriching events in Splunk might be one of the most impressive we’ve seen so far.