Name: O11Y: Identifying the Investigators
Start: 2023-10-02T12:57:00Z
End: 2023-10-02T12:57:12.000Z
Location: BrightTALK

Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl to analyze, collect, process, and route all IT and security data, delivering the choice, control, and flexibility required to adapt to their ever-changing needs. 

Interested in seeing first-hand how Cribl can support your use case? Sign up for Cribl.Cloud and process up to 1TB/day, for free! https://cribl.io/cribl-cloud/try-cribl-cloud/


Join us as we explore the latest features and hidden gems of the Cribl Suite! In this episode, we're going to show you how to streamline agent management with Cribl Edge and Cribl Copilot!

The One Where We Streamline Agent Management

For the first of many product demos, we’re thrilled to welcome Nikhil Mungel, the visionary behind Cribl Copilot. This AI-powered assistant is designed to:

-Instantly surface answers from the documentation
-Build pipelines with just a simple request

Bring your questions, tune in live, and learn from the experts—you won’t want to miss this!

The One Where We Meet Cribl Copilot

You can’t deliver high-velocity business outcomes with a telemetry engine stuck in first gear.
Most teams are buried under data noise, blind spots, and delayed insights that inflate MTTR and threaten SLOs, putting reliability and customer experience at risk.

Watch this on-demand webinar, for actionable insights on how to transform your tech stack into a true business accelerator— by making your telemetry more reliable, cheaper to run, and faster to use. 

You'll hear from Cribl's own Site Reliability Engineering team and see how to:
-Expose the gaps that derail uptime and visibility, and hold PlatEng, SRE, DevOps, CloudOps teams back
-Deliver cleaner, faster insights to reduce MTTR
-Strengthen system reliability to maximize performance without re-architecting

Reliability isn’t luck; it’s design. Learn how to build a telemetry strategy that drives speed, confidence, and competitive advantage.

3 Ways to Optimize Uptime, Observability Costs, and Sanity

Are you struggling with telemetry data-induced anxiety? Wrestling with how to align your data management strategy to your Zero Trust initiatives or enable AI-driven security insights with clean telemetry? You’re not alone – and you’re in the right place. 

To close out Cybersecurity Awareness Month, we’re proving you a session of Telemetry Therapy  – an open mic for SecOps, SIEM, and date-pipeline pros to air out their toughest telemetry troubles. Whether it’s runaway ingestion costs, flaky detection, or the stress of making your data AI or Zero Trust ready, we’ve got you covered. Watch as we triage your pain points and turn rants into real fixes – cut noise and spend, tune routing and retention, and strengthen edge-to-lake data flows. Part catharsis, part clinic: the Data Doctor is in. 

This session might not cure all your problems, but it’ll fix your pipelines

Telemetry Therapy: Solutions and Support for SecOps

You’ve already seen how Cribl helps you control costs and bring order to exploding data volumes. But what if you could take that even further—streamlining workflows, reducing manual effort, and making your data AI-ready, all while using your existing investment?

In this exclusive session, you’ll discover how the latest product innovations unveiled at CriblCon can help you:
-Multiply productivity with AI-assisted workflows that let your team accomplish more with less—while reducing MTTR
-Build confidence in your outcomes with unified, context-rich data that fuels better detections, investigations, and AI initiatives
-Optimize costs at scale with new data tiering and lifecycle management capabilities that align spend with business value

No matter where you are on your data strategy journey, this session will show you how to accelerate productivity—and stay ahead as AI reshapes the enterprise data landscape.

Multiply Productivity and Power Your AI Strategy with Cribl

Traditional observability is hitting its limits under the scale and speed of today’s data. Exploding data volumes, fragmented tools, and pressure for teams to do more with less make it harder than ever to keep up. Enter AI: the ultimate force multiplier for modern observability.

Join our experts on to learn how AI can 10x your team’s efficiency, deliver deeper visibility across complex environments, and simplify troubleshooting workflows.

Discover how AI elevates observability from reactive monitoring to proactive insight. In this session, you’ll learn:
-Why human-in-the-loop AI is key to trustworthy automation
-Pragmatic ways to automate time-intensive telemetry management tasks
-How Cribl’s AI-driven capabilities enable faster detection and greater efficiency

Tune in and see how AI is not just the next step in observability - it’s a whole new way of seeing your systems and running your ops.

Observability, Supercharged: How AI 10x’s Insights & Efficiency

You don’t need less data to solve your IT and security challenges; you need the right data. The key is to focus on improving data quality while maintaining cost controls and governance guardrails.

In this hands-on workshop, Cox Automotive’s John Lim and Cribl’s Ed Bailey break down the steps to achieving an effective and efficient telemetry data strategy. We’ll walk you through how to build a data strategy that delivers the insights you need with the right approach.

In this session, you’ll learn how to:
-Identify your IT and security data requirements
-Architect for visibility and scale without breaking the budget
-Increase flexibility and avoid vendor lock-in
-Create a scalable telemetry architecture that’s both effective and easy to use

The future of your data strategy starts now. Watch now to learn how to create an insight-driven, cost-effective, and compliant approach to managing your IT and security data.

How to Build a High-Performance Data Strategy that Delivers Value at Scale

Cribl offers a suite of tools designed to optimize data pipelines, with different components tailored for managing and orchestrating data flows at scale across different teams and data sources. One of the biggest problems with building and running a multi-team data engine is isolation. This CriblCon 24 session covers how we at Cribl have handled the challenge of data, configuration, and access isolation for growing teams through features such as Cloud Workspaces, Worker Groups, and Stream Projects, and how they provide isolation and crafted experiences for different levels of data access and control.

Looking to connect in real life? Join us this year for CriblCon 25 in National Harbor, MD, October 13-15, 2025, for an unforgettable experience. Register today: cribl.io/criblcon

Data is a Team Sport: Managing Multi-Team Data Pipelines with Cribl - CriblCon 2024 Replay Series

Real-time threats require real-time responses. But how can your security team keep up while buried in alerts, overwhelmed by data, and short on resources?

In this session, Cribl + Crogl discuss how to cut through the noise and transform your security operations. Learn how Cribl Lake and Cribl Search help you filter, route, and enrich security data at scale – giving you greater control, while Crogl adds in an AI-driven knowledge layer to automate investigations and accelerate threat detection.

Through real-world examples, you'll see how this integrated approach enables faster detection, investigation, and mapping to the MITRE ATT&CK framework.

In this hands-on session, you’ll learn:
-How to investigate complex threats using optimized, enriched data from Cribl Lake and Cribl Search
-Techniques to create and customize threat hunts based on the MITRE ATT&CK framework
-How Crogl enhances investigations with AI-driven insights and automation

Threats move fast. Your investigations should move faster. Watch now to level up your security operations strategy.

It’s (Threat) Hunting Season: Accelerate SecOps and Detect Faster with Cribl + Crogl

In this CriblCon 24 session, we’re going to dig into how Epiq transitioned our security infrastructure from on-premise to cloud with the help of Cribl. We’ll talk about the challenges we faced in learning how to parse and shape Microsoft Sentinel data, and the victories we achieved by simplifying our infrastructure for cost savings and to streamline our data processes. We’ll share some valuable lessons we learned along the way helping others navigate similar digital transformations successfully.

Looking to connect in real life? Join us this year for CriblCon 25 in National Harbor, MD, October 13-15, 2025, for an unforgettable experience. Register today: cribl.io/criblcon

How Cribl saves us 400k per year - CriblCon 2024 Replay Series

This CriblCon 24 session explores how the Amex GBT team utilized Cribl Stream to navigate a complex SIEM landscape. We faced several challenges: evaluating new SIEMs, managing high-volume data in our current SIEM, and ultimately migrating to a new solution – all without disrupting ongoing security operations.

Looking to connect in real life? Join us this year for CriblCon 25 in National Harbor, MD, October 13-15, 2025, for an unforgettable experience. Register today: cribl.io/criblcon

Reduce Risk with Cribl and Choose the right SIEM - CriblCon 2024 Replay Series

Your SIEM holds critical data, but storing all telemetry can be costly — especially as cloud-native, microservices, and AI systems generate massive data volumes. So how do you maintain 24/7 visibility and rapid threat response without breaking the budget? 

Traditional data tiering ties "hot, warm, cold" to data age, assuming you can predict which logs will matter, often driving up costs. In reality, data’s value only spikes when a question is asked: during an investigation, audit, or incident. By tiering data based on access frequency, a measurable signal, you can cut costs while keeping critical data accessible. 

In this session, AWS and Cribl take a deep dive into modern data tiering strategies that help you to:
-Keep frequently accessed, actionable data in your SIEM for real-time detection and response.
-Seamlessly route archival data to cost-effective storage like Amazon S3, without losing access or compliance. 
-Collect, route, and transform data to the right formats such as OCSF before it reaches downstream analytics tools (i.e. SIEM, Amazon Security Lake).
-Search data in place: data lakes, object stores, API endpoints, host systems, and more for faster, more flexible investigations.

It’s time to simplify, streamline, and take control of your storage sites, query tools, and telemetry data. Watch on-demand to unlock practical strategies for smarter, faster data management.

From Cold to Gold: Unlocking the Power of Tiered Data Storage with AWS and Cribl

Telemetry data as a key asset is growing, protecting, and optimizing today's enterprise. Managing and controlling that data remains out of reach for most IT and Security professionals. But with the right data pipeline strategy, you can optimize telemetry to reduce costs, enhance visibility, and maintain full control over your data – that’s where Cribl comes in.

Cribl’s Nick Heudecker and Cory Wallace walk through how Cribl Stream and the broader Cribl product suite empower IT and security teams to take control of their observability pipelines with streamlined workflows, increased flexibility, and maximized efficiency.

In this session, you’ll learn how to:
Efficiently ingest, shape, enrich, and route telemetry data from diverse sources with Cribl Stream
Manage large volumes of telemetry without sacrificing control or budget
Optimize data by removing noise, reformatting for usability, and masking sensitive information
Route data intelligently to the right destinations, from SIEM to long-term storage
Use AI-powered features to improve data quality and insights

Whether you’re new to observability pipelines or looking to optimize, you’ll leave this session ready to turn your data challenges into opportunities with Cribl.

Take control of your telemetry data with Cribl Stream

Ever wish your data pipelines built themselves? Or that your global environment stayed consistent as you scaled? Well, Cribl just made both of those wishes a reality.

Watch now for a demo and introduction to Copilot Editor and Global Management—two powerful new features built to save time, reduce manual work, and streamline scaling.

In this session, we cover how to:
Build data pipelines effortlessly with Copilot Editor, using plain language to automate data transformations and mapping
Onboard new sources in minutes by automating schema normalization, enabling faster and more accurate threat detection
Scale your global environment seamlessly with centralized configuration management and GitOps workflows
Ensure consistency and reduce risk with standardized policies that simplify collaboration and enhance compliance

Watch to learn how to simplify your operations with a sprinkle of Cribl magic – so you can focus on what matters most.

Effortless telemetry is not magic. It’s Cribl: Automate pipelines and scale

This CriblCon 24 session investigates the correlation between traces in OpenTelemetry (Otel) and logs in Splunk, two widely used tools in the field of observability and log management. The objective of this research is to explore how the integration of trace data from Otel and log data from Splunk can provide a comprehensive understanding of application performance and behavior. By analyzing the relationship between these two data sources, we aim to identify patterns, uncover hidden dependencies, and gain insights into system bottlenecks and potential issues. Through this correlation, we hope to enhance troubleshooting capabilities, optimize system performance, and improve overall observability of distributed applications. The findings of this study will contribute to the development of effective monitoring and analysis techniques, enabling organizations to proactively address performance challenges and deliver more reliable and efficient software systems.


Looking to connect in real life? Join us this year for CriblCon 25 in National Harbor, MD, October 13-15, 2025, for an unforgettable experience. Register today: cribl.io/criblcon

Correlating Traces with Logs for Enhanced Observability - CriblCon 2024 Replay Series

In this CriblCon 24 session, learn how Cribl uses its own purpose-built data engine for IT and Security capable of discovering and collecting data from any source, processing billions of events per second, automatically routing data to optimized storage, and analyzing any data, at any time, in any location to drive the Cribl.Cloud team’s observability practice, make quick decisions, and continuously improve Cribl Stream, Edge, and Search from the inside.

Looking to connect in real life? Join us this year for CriblCon 25 in National Harbor, MD, October 13-15, 2025, for an unforgettable experience. Register today: cribl.io/criblcon

Delivering Observability for Highly Available Services with Cribl - CriblCon 2024 Replay Series

Join Perry Correll, The Observability Professor, and Ed Bailey for a comprehensive guide on observability architecture. They’ll walk through components, stakeholders, and tools for building a healthy observability practice.

Want to learn more? Download a copy of "Searching Observability Data for Dummies" here: https://cribl.io/resources/searching-observability-data-for-dummies/

Observability Architecture

Perry Correll, Principal Technical Content Manager is joined by Felicia Dorng, Senior Product Marketing Manager, as they discuss how observability can help optimize performance, costs, and security in your multicloud environment.

Want to learn more? Download a copy of "Searching Observability Data for Dummies" here: https://cribl.io/resources/searching-observability-data-for-dummies/

Observability and the Cloud(s)

Join this module to hear Professor Correll explore the world of Application Performance Management (APM). In this session he covers gaining insights into your applications and understanding how your infrastructure and various teams work together to ensure a seamless service. When issues emerge, solutions are vital. Discover how the use of APM tools from different vendors can empower you with the knowledge needed to preempt major problems.

Want to learn more? Download a copy of "Searching Observability Data for Dummies" here: https://cribl.io/resources/searching-observability-data-for-dummies/

Efficiency Through Observability: Elevating Application Management

In this module, our experts address the critical convergence of observability and security. Perry and Jackie answer whether there's a distinction, dive into security teams' challenges and data needs, and explain why an observability pipeline can boost your security measures.

You’ll leave this session knowing:
- Observability vs. Security: Are they distinct?
- Security Team Challenges: What keeps them up at night?
- Cyber Resilience: What is it?
- The Power of Observability: How it enhances security.

Want to learn more? Download a copy of "Searching Observability Data for Dummies" here: https://cribl.io/resources/searching-observability-data-for-dummies/

Observability and Security in Focus: Strengthening Your Digital Defenses

When you create, collect, and store data, there comes a time when you need to find specific information. Think about it – when you're at your computer and need to locate a particular file, a tool like Grep is handy. So, why invest time and resources in collecting, centralizing, and indexing data just for a simple search?

But here's the twist – sometimes, collecting and indexing data is precisely what you need. While many effective data search tools exist, the fact that there are many tools doesn't mean there's no room for improvement.

Think of your toolbox at home – you probably have some excellent tools, but how often do you add a new one that offers something different? It typically doesn't replace anything; it just adds an extra capability. In this module, we'll explore your options for searching your data, helping you make the most of your data management toolbox.

Want to learn more? Download a copy of "Searching Observability Data for Dummies" here: https://cribl.io/resources/searching-observability-data-for-dummies/

A Deep Dive into Observability Search Tool Options

Tune into this session and gain insights from our Observability Professor, Perry Correll, as he dives into the concept of Observability Pipelines. Imagine the possibilities of consolidating data collection and processing for various event types, including metrics, logs, and traces. By unifying data collection, you can minimize the need for redundant agents, duplicate instrumentation, and multiple collection systems.

Want to learn more? Download a copy of "Searching Observability Data for Dummies" here: https://cribl.io/resources/searching-observability-data-for-dummies/

Mastering Observability Pipelines: Streamlining Data Collection and Analysis

In this module, Professor Correll discusses Observability Components and Tools. This segment touches on agents and sources, with the general principle being that each source typically associates with one or more dedicated agents. Additionally, the module will explore the significance of logging and monitoring as crucial elements for sustaining peak application performance. The module also addresses topics such as analytics, infrastructure, and concluding with a focus on pipelines and integration.

Want to learn more? Download a copy of "Searching Observability Data for Dummies" here: https://cribl.io/resources/searching-observability-data-for-dummies/

Exploring the Essentials: A Guide to Observability Components and Tools

Data is the foundation of our Observability journey. Often when talking about O11Y, you may think of the 3 pillars – metrics, traces, and logs. Within this module, Professor Correll will discuss these and the various categories of data that are both generated and gathered. Additionally, the module will examine how a single dataset can hold distinct levels of significance across various departments.

Want to learn more? Download a copy of "Searching Observability Data for Dummies" here: https://cribl.io/resources/searching-observability-data-for-dummies/

Unblocking Insights: Navigating the Depths of Observability Data

Join the O11Y Professor, Perry Correll, and Ed Bailey as they discuss Observability and why it matters to your business. In this module, the two will talk through if Observability is a tool or a concept, how it plays into network resilience / reliability and if these concepts are different for various IT teams.

Want to learn more? Download a copy of "Searching Observability Data for Dummies" here: https://cribl.io/resources/searching-observability-data-for-dummies/

The Business Value of Observability

Class is back in session! Join our Observability Professor, Perry Correll,  as he unpacks the fundamentals of Observability, Telemetry and Security Data analysis in this 10-part webinar series. Perry will delve into the challenges posed by the diverse definitions and agendas surrounding observability, and will equip you with the knowledge to critically analyze and navigate this crucial concept. 

Through a series of hyper-focused, interactive modules, we'll explore observability's core principles, its relevance in IT environments, and the transformative power it holds.

Want to learn more? Download a copy of "Searching Observability Data for Dummies" here: https://cribl.io/resources/searching-observability-data-for-dummies/

The Professor's Guide to Data Analysis: Observability, Telemetry, and Security

Observability Professor Series

In this next module of our Observability Professor series, Perry dives into the realm of observability and focuses on the investigators – those who seek specific insights. Before digging into data collection, pipelines, and search mechanisms, we need to pinpoint exactly what we're searching for. This session will explore the "who" and the "why" behind these inquiries because, in most organizations, the data collected may be similar, but the emphasis placed on different aspects and the tools required can vary significantly. It's all about tailoring observability to your unique needs.

Want to learn more? Download a copy of "Searching Observability Data for Dummies" here: https://cribl.io/resources/searching-observability-data-for-dummies/

O11Y: Identifying the Investigators

Observability

Observability Pipeline

DevOps

SecOps

ITOps

AIOps

Data Collected

Security Operations

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

Get powerful marketing data and analytics insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on the analytics that quantify your investments.

Data and Analytics

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

O11Y: Identifying the Investigators

Presented by

About this talk

Cribl