Name: Reference Architecture Series: Scaling Syslog
Start: 2023-05-16T14:11:00Z
End: 2023-05-16T14:11:33.000Z
Location: BrightTALK
Rating: 0

Cribl events provide an opportunity to learn, share knowledge, and talk shop. Our events focus on education and best practices for collecting, processing, routing and analyzing your data.

Cribl's mission is to unlock the value of  all your observability data, regardless of source or destination. Customers like Shutterfly, Aflac, TransUnion, FINRA, Circle K, Bayer, Sally Beauty, and NASA JPL trust Cribl to help them turn big data into better data.

IT and security professionals excel at resolving complex issues and  the daily struggles of securing observability and security data, but they often face challenges in securing funding for these endeavors. 

To get the tips you need to successfully plan and create your planning and budget proposal for next year, join our IT and Security experts to help you:

- Create your budget proposal to tell a story
- Map technical requirements to business objectives
- Explain to an executive why they should fund your project
- Address basic budgeting and how to present your data

Join this webinar and get the planning and budget assets we’ll demo live to help you on your budgeting journey.

Guide to Securing Project Funding and Yearly Budget Planning

Join the O11Y Professor, Perry Correll, and Ed Bailey as they discuss Observability and why it matters to your business. In this module, the two will talk through if Observability is a tool or a concept, how it plays into network resilience / reliability and if these concepts are different for various IT teams.

The Business Value of Observability

Are you tired of your security data being siloed? Do you want to transform your isolated security data silos into a cohesive ecosystem of tools and controls?

If so, join this webinar to learn about Cybersecurity Mesh Architecture (CSMA). CSMA is a concept introduced by Gartner that aims to transform isolated security data silos into a cohesive ecosystem of tools and controls to protect the modern enterprise. The strategy focuses on integrating various security tools by consolidating data sources and using high-quality enrichment and data normalization to enable more effective collaboration and correlation.

In this webinar, we will discuss how implementing a CSMA offers several benefits, including:

- Enhanced detection capabilities through complete access to data
- Increased response efficiency through access to higher-quality data
- Consistent management of policies, postures, and playbooks
- Adaptive, granular access controls

Unleashing the Power of Cyber Security Mesh

Stream is the best way to get multiple data formats into your analytics tools. See how by using Cribl Stream as your universal receiver to collect from any observability data source – you can receive data from all your agents and push based sources, schedule batch collection from multiple endpoints and APIs, as well as recall data from low cost storage.

Join this Stream demo and we’ll show you how to:

- Route data from any source to any destination, or send the same data to multiple destinations
- Eliminate duplicate fields, null values, and reduce log volume to control costs and improve system performance
- Shape data into metrics for analysis or enrich logs with GeoIP info, threat intel, and more for actionable insights

Demo: Cribl Stream

Class is back in session! Join our Observability Professor, Perry Correll,  as he unpacks the fundamentals of Observability, Telemetry and Security Data analysis in this 10-part webinar series. Perry will delve into the challenges posed by the diverse definitions and agendas surrounding observability, and will equip you with the knowledge to critically analyze and navigate this crucial concept. 

Through a series of hyper-focused, interactive modules, we'll explore observability's core principles, its relevance in IT environments, and the transformative power it holds.

The Professor's Guide to Data Analysis: Observability, Telemetry, and Security

Join this webinar to hear Edward Jones’ Threat Vulnerability and Management leaders Matthew Found and Christopher Simpson's first-hand account and lessons learned from their multi-year journey to transform the SOC at Edward Jones.

With an aging SIEM and a new team ready to modernize the SOC, the duo set out to re-imagine what their security architecture could look like. They knew they wanted a SIEM in the cloud for flexibility, scale, and ease of management. They also knew this would be a multi-year journey, requiring a reliable, supported way to multiplex any data input to any destination, in the format required by the audience who will eventually consume the data. 

Attend this webinar and learn:
- Which technology partners the team choose for their SOC of the future
- What’s working so far and what’s coming next
- What to watch out for on your own SOC reinvigoration journey

Modernizing Our SIEM Strategy at Edward Jones

Managing a multicloud environment can be a daunting task, it requires dealing with different cloud providers each with its own set of tools and interfaces. Having to integrate and coordinate many different systems together is anything but simple.

Between high egress charges, wasteful data overrun, and silos between cloud platforms, organizations need to figure out a way to better way to embrace their multicloud landscape.

Thankfully, behind every successful multicloud strategy is a robust observability plan. Watch this webinar if you’re hoping to reduce cloud spend, better understand the health and performance of systems, optimize resources, and keep data secure in the cloud.

Multicloud: The Good, The Bad, The Observable

Migrating your workloads and data to the cloud can mean huge pay-offs for your organization - optimized performance, reduced management overhead, and significant cost savings on data centers. But the road to the cloud is not always easy. Organizations struggle with never-ending data growth. Luckily Cribl can help!

Join us to learn how a cloud-based observability pipeline can help make your data more manageable so you can easily clean up data, get it where it needs to be, work more efficiently, and ultimately gain the confidence needed to adopt the cloud, on time and under budget. Attendees will learn:

- Benefits of using an observability pipeline in the cloud
- How to get started with a new Cribl.Cloud account
- What comes with Cribl’s suite of cloud products

Getting Started with an Observability Pipeline in the Cloud

Ready to revolutionize your security data management? Corelight, known for its comprehensive security evidence, pairs seamlessly with Cribl's ability to enrich and efficiently route this data to any platform without straining your SIEM or budget. 

Join this webinar to learn how the joint solution expands visibility, bolsters detection, and accelerates investigations while maintaining data fidelity. We’ll also delve into the new Corelight Pack for Cribl, which streamlines and optimizes data processing, offering flexible capabilities for enhancing, routing, and reducing Corelight data.

Attendees will learn how to:
- Provide a single comprehensive source of network telemetry for Amazon Security Lake, CrowdStrike Falcon® LogScale, Splunk Enterprise Security, and other destinations
- Enable real-time threat detection and seamless ingestion, normalization, and enrichment of security data
- Enhance security operations with without burdening SIEM resources

Amplifying Security Insights

Join us to see how Cribl is enhancing their entire suite of products, including Search, Edge, and Stream, in the latest Summer release. These enhancements will enable additional teams and users to work together across the entire portfolio through enhanced security and access control for customers, while providing data and insights on-demand.

Level-Up Your Security & Control

Context is king–that’s why optimizing your data, enriching it in the stream, and having the ability to see it and tweak it before sending it into analytics tools or storage can be a game changer. When you are reviewing or correlating the data to troubleshoot, run investigations and respond, think how much time your team can save by having the right geolocation, asset, timestamp and even threat intel already associated with the log data?

We had a fun time making this work–and you can too. We’ll show how you can set up and use a Redis cache along with Cribl Stream to enhance your data before sending it to its destination. We’ll cover how we imported a 34 million row CSV file into Redis and use the Redis function to match fields to records to add a new field that is used for faster identification of data once it is in Splunk.

Enrichment: Better Data In, Better Response Times Out

Data engineering can be painful, time consuming and complicated. It requires working with data of all types, shapes and transport methods. The good news is, Cribl is here! On our journey we have seen it all, and learned a lot along the way, while migrating a large, diverse, set of data sources from legacy ingestion methods to Cribl. In this session, we will share the challenges encountered, lessons learned, best practices we adopted and things we just simply wish we knew from the start.

Empowering Data Engineers: A Transformational Journey

The integration of Git in Cribl is a powerful tool for managing configurations and data pipelines in modern data architectures. It enables users to manage configuration files and pipelines as code, simplifying the deployment and management of pipelines. Users can track changes, collaborate on changes and rollback to previous versions if needed.

Git and Get Going

Meet Your Business Goals Faster and More Affordably from Tool Evaluations, Migrations, Compliance Mandates, M&A and more.

As a global company who operates in over 30 countries, shipping raw data across regional locations into a centralized data hub is an expensive and slow process. “Silo'ed” data hubs create their own problems as you do not get the full picture across regional sites. Cribl Stream gives us our cake and allows us to eat it too. See how aggregating and routing regional data around the world into a centralized hub and presenting it in a single pane of glass view which helps everyone understand global health per region.

Routing Around the World with Cribl Stream

Join this webinar as our experts explain how understanding the search process is key to getting the most out of your existing systems. By attending this webinar you’ll see:

- The true benefits of keeping analysis systems separate from retention systems to gain significant cost savings.
- Advanced search tools that allow querying massive data sets while incurring ingestion costs only for relevant information.
- How to get instant access to a no-cost search tool to quickly identify all data stored in your data stores, data lakes, hosts and archives.

The Fundamentals of Searching Observability Data

M-22-09 sets forth a Federal zero trust architecture strategy requiring agencies to meet specific cybersecurity standards and objectives by the end of FY2024, including encryption of all DNS requests and HTTP traffic in their environments and unleveling practices on sensitive data monitoring, data categorization, and information sharing.

In this demo, we’ll show you how to:

- Easily route data to multiple destinations via a data pipelining engine between data sources and destinations
- Transform data into any format or protocol for secure sharing
- Encrypt DNS requests and HTTP traffic, redact or mask sensitive data, and enrich logs with relevant categorization information

Demo: Getting Started With M-22-09

Just as the Boston Tea Party rebelled against restrictive regulations, it's time to liberate your data from the tyrannical control imposed by authoritative vendors.

With data flowing in from numerous sources and in diverse formats, you need observability tools that empower us to query raw data and selectively extract only the actionable insights required. In this webinar we will showcase how Observability solutions can play a pivotal role in locating, shaping, filtering, and enriching data before routing it to various analysis systems, customized to their specific requirements. This approach ensures that ITOps, SecOps, DevOps, and other teams receive precisely what they need, without unnecessary clutter or cost.

Join this webinar as we embrace data independence and unleash the full potential of your organization's data-driven endeavors.

Data Independence Day: Taking Back Control of Your Data

Join Ed Bailey and Sidd Shah as they discuss how Cribl Stream can empower Security Operations Admins to make the most of their CrowdStrike FDR data. During the discussion, Ed and Sidd will address the challenges faced by CrowdStrike customers who generate a vast amount of valuable data each day but struggle to leverage it fully due to complexity and size. They will explain how Cribl Stream can help SecOps admins extract the right data for their SIEM, while moving the rest to their Security Data Lake, enabling them to get the maximum value from their data and be cost-effective at the same time. 

Throughout the session, Ed and Sidd will highlight the key benefits of using Cribl Stream, including how it empowers SecOps admins to have more choice and control over their data, and how it can help to unlock the full potential of CrowdStrike FDR data. If you are a SecOps admin looking to make the most of your data, this session is not to be missed.

Maximizing FDR Data Value

Join Ed Bailey and Ahmed Kira as they go into more detail about the Cribl Stream Reference Architecture, with a focus on scaling syslog. In this live stream discussion, Ed and Ahmed will explain guidelines for how to handle high volume UDP and TCP syslog traffic. They will also share different use cases and talk about the pros and cons for using different approaches to solve this common and often painful challenge.

Throughout the session, Ed and Ahmed will provide insights on how to integrate Cribl Stream into any environment, enabling faster value realization with minimal effort. We want to help SecOps and Observability data admins spend less time figuring out how to best use Cribl Stream and more time getting value. Don’t miss out on this opportunity to empower your observability administration skills.

Reference Architecture Series: Scaling Syslog

Syslog

Reference Architecture

SecOps

Observability

Observability Pipeline

Data

Administration

Scaling

ITops

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Reference Architecture Series: Scaling Syslog

Presented by

About this talk

More from this channel