Turning logs into metrics isn’t a new concept. A version of this functionality is implemented in most agents, visualization tools, and backends. It’s everywhere because converting logs to metrics has many practical applications and is one of the fundamental mechanisms for controlling log volume in a telemetry pipeline. In this post, I’ll briefly overview log-based metrics, explain why they matter, and provide examples of how to build them using OpenTelemetry and BindPlane OP.

Manage and correlate signals and alerts in Elastic Observability As organizations embrace increasingly complex and interconnected IT systems, the sheer volume of alerts generated by diverse monitoring tools has given rise to a critical challenge — how do we efficiently sift through the noise to identify and respond to the most crucial issues? Event management and correlation are two indispensable pillars in the realm of IT service management.

The strategic implementation of a security log retention policy is critical for safeguarding digital assets and key company data. This practice is foundational for detecting and analyzing security threats in real-time and conducting thorough post-event investigations. Integrating the nuances of log analytics system costs, which escalate with data volume due to the infrastructure needed for storage and processing, highlights a critical aspect of security log retention.

We are consistently releasing helpful updates and fun features in Grafana Cloud, our fully managed observability platform powered by the open source Grafana LGTM Stack (Loki for logs, Grafana for visualization, Tempo for traces, and Mimir for metrics). In case you missed it, here’s a roundup of the latest and greatest upgrades for Grafana Cloud this month. If you’re not a Grafana Cloud user, what are we waiting for?

The more data you have, the harder it becomes to read through it, let alone identify trends or crucial patterns. Couple that with a shortage of time, and the ability not only to visualize but also to communicate with your data becomes paramount.

IT and security teams have several products they use and in turn, have many admins. Some have wide privileges, while others have focused responsibilities for the various tools and touch points in an IT and security data path. Not all admins are members of all tools. But they are all typically part of a larger group bound by an email alias (aka a distribution list).

The emergence of cloud computing. Arguably the biggest change in technology in decades, cloud computing changed how technology would now develop and how businesses and organizations would operate. Indeed, the enormous popularity of cloud services is due precisely to that: you can get different models depending on your operational needs. To properly utilize these cloud service models, you should understand the differences in their functional capabilities and the ideal use cases for each model.

An analyst’s process often involves searching through a given set of data many times, refining the question and analytics performed each time. Cribl Search was originally designed to be stateless – executing each search from the original dataset provider(s) with every execution. However, a new feature has been introduced to allow searching into previous cached results, accelerating the analyst process for certain types of iterative search development.

As environments have become more complex and digital user expectations are at an all-time high, organizations are under more pressure than ever to keep their digital systems secure and reliable. At Splunk, we’ve been hard at work building features that help ITOps and engineering teams thrive amid digital disruptions and build resilient systems.