x

Cribl Search Unlocks The Value of ALL Data

July 13, 2022

We announced Cribl Search in May, and customer reaction has been incredibly positive. We’ve heard for some time that organizations have data everywhere. They have data in their observability lakes, analytics tools, object stores, and at the edge. The big challenge facing enterprises is that existing search models require you to take all of this data that you don’t know is valuable or not, move it into one place, and then make decisions about whether this is valuable? What else do I do with it? What do I do with it next? Do I keep it? This model is fundamentally flawed and doesn’t scale to meet modern challenges. Recently, Ed Bailey and I talked more in-depth about Cribl Search on one of our live streams, and we’ve embedded it below.

Cribl Search Unlocks The Value of ALL Data

Search is obviously not a new concept. When it gained popularity 15+ years ago, some might argue it was a true innovation – a new technology that solved a real problem. It was simple but powerful. Ship the data to the system of record within the data center, which would, in turn, normalize the data and help make disparate pieces of information searchable and valuable. The problem in some respects hasn’t changed – you still need to be able to search disparate pieces of information and have intelligent systems connect the dots. The problem is that the world changed around one critical assumption of the model from the early 2000s – the assumption that shipping the data to the system of record was easy. At the time that Search revolutionized operations, systems were relatively centralized.

The world has raced to the cloud. Application architectures are becoming more and more distributed, making operations more complicated and security threats easier to disguise. Three little words from the advent of Search have suddenly become the most complex part of legacy search systems – “ship the data”. Not a small feat anymore with modern application architectures.

With search-in-place, Cribl Search lets you use the data without shipping it. Instead, you can query it and leave out the most complex and expensive parts. Then, you can ship useful parts to another system for further analysis or long-term storage. With volumes of data increasing and distributed architectures proliferating, it becomes critical to search in place to find ALL useful data.

That doesn’t mean abandoning the current centralized system but deciding on the data before shipping it – it’ll save you time, money, and headaches while making the tools you leverage even better! For example, let’s say you’re working with debug logs. They’re USELESS, except if you’re actually debugging an app right then. If you are debugging it, you can search it immediately without moving it first. Otherwise, leave it where it’s at.

Cribl Search enables administrators to deploy a single, system-agnostic search capability to search anywhere, for any data type, and hosted in object storage or system of analysis without having to collect the data first.

To sum it up: Cribl Search unlocks a SCALE of data usable for administrators that didn’t previously exist.

Cribl Search is coming in late 2022, and we will have a lot more to share as we get closer to release. Tap the button below to join our email list.

Stay Up to Date on Cribl Search

.
Blog
Feature Image

How to Cut Through the Chaos of Custom App Log Management

Read More
.
Blog
Feature Image

Cribl’s Blueprint for Secure Software Development

Read More
.
Blog
Feature Image

Calling All MSSP’s and MDR’s! Cribl.Cloud is Here for You!

Read More
pattern

Try Your Own Cribl Sandbox

Experience a full version of Cribl Stream and Cribl Edge in the cloud with pre-made sources and destinations.

box

So you're rockin' Internet Explorer!

Classic choice. Sadly, our website is designed for all modern supported browsers like Edge, Chrome, Firefox, and Safari

Got one of those handy?