Recently, I have seen a trend of enterprises moving toward OpenTelemetry (OTel) for application tracing. Tail sampling, in particular, has emerged as a preferred approach to gain actionable insights while balancing data volume and cost. OpenTelemetry offers developers and practitioners the ability to instrument their code with open-source tools, moving away from vendor-provided tools for application instrumentation.

We’ve been steadily building strong momentum with Microsoft over the past year, and the latest step forward is a significant one: Cribl solutions are now available on the Microsoft Azure Marketplace. But why this focus on Microsoft Azure? The answer lies in what customers are prioritizing and discussing with us.

In previous discussions about Managed Security Service Providers (MSSPs), I’ve looked into the architectural benefits and product-level advantages of integrating Cribl. Today, let’s explore why Cribl isn’t just technically sound—it’s also a smart business decision that can help MSSPs like you manage and lower egress costs, creating a significant impact on the financial efficiency of your operations.

Sending events into a data lake can make it challenging to find and organize them. Using tagging with Cribl Lake in conjunction with Cribl Search across a primary data source will increase speed of analysis and reduce costs, as well as help keep your data organized. This scenario involves us performing an investigation for an incident that occurred where our systems indicated unusual activity from an IP address of aaa.bbb.ccc.ddd.

At Cribl, we’ve been deeply investing in the Microsft Azure security space. Last year, we introduced a native integration with Microsoft Sentinel, enabling us to write data seamlessly to native and custom tables. As highlighted earlier, working with Microsoft Sentinel and Log Analytics involves interacting with tables with predefined column names and data types.

Exciting News! The Pack Dispensary just got an upgrade with the release of permalinks for Packs. This may sound simple, but it significantly alleviates a major pain point Cribl Dispensary users faced when sharing Pack references with colleagues.

Cribl employees are renowned for their insatiable curiosity, especially when it comes to their passions. Having been a technical writer for most of my adult life, this goat is deeply passionate about two things: writing engaging content and understanding the mindset of our users. As one of our founders always says, “Software is a people business.” To make my users successful, I need to know how they think. But what if the “user” is a machine? This goat is intrigued.

Today’s IT and security environments have gone from “big” to “massive” in just a decade or two—endpoints have practically exploded (think hundreds of thousands of servers, not just a hundred). Add in a dizzying array of data types and vendors, and what do you get? A whole lot of chaos. So why, oh why, does agent management still feel like it’s stuck in the early 2000s?

Imagine you’re the protector of a castle. Your walls are tall, the gates are strong, and the guards are well-trained. But what if an intruder was still able to slip past your defenses? Even with the best security tools, not every threat will be caught. Threat hunting is the proactive approach to finding attackers that might have bypassed your defenses.