LIVESTREAM SERIES
Telemetry architecture in real life: costs, lock‑in, and what good looks like
Tuesday, May 12th at 1 p.m. ET / 10 a.m. PT
Your SIEM and observability tools are expensive, and you're probably using them for things a data lake could handle for a fraction of the cost. Let's fix that.
Tuesday, May 12th at 1 p.m. ET / 10 a.m. PT
Your SIEM and observability tools are expensive, and you're probably using them for things a data lake could handle for a fraction of the cost. Let's fix that.
Fork your data with Cribl Stream – Keep sending data to your SIEM or observability tool, but also send a copy to a data lake at the same time. Nothing breaks, and your existing workflows keep working
Plan your data lake before you build it – A data lake without a plan is just a swamp. We'll walk through the decisions you need to make upfront (like schema, partitions, and access) so you actually get value out of it
Move the right workloads off your expensive tools – Not everything needs to live in your SIEM. We'll look at which queries, dashboards, and processes can pull from the lake instead, and what that saves you
Start thinking about AI the right way – A well-organized data lake does more than store logs. We’ll talk about how it sets you up for future AI projects without turning this into a science experiment
Tuesday, May 19th at 1 p.m. ET / 10 a.m. PT
Your SIEM only holds a slice of your telemetry. Your data lake holds the rest. We'll show you how to use that to your advantage for investigations, threat hunting, and reporting.
Why your data lake beats your SIEM for investigations – Your SIEM keeps a short window of expensive, filtered data. Your data lake keeps everything. When something goes wrong, that difference matters more than you think
Threat hunting without the handcuffs – Hunting across months of data in a SIEM is painful and costly. We'll show you how a well-planned lake makes broad, deep searches practical and affordable
Reporting that doesn't require begging for data – With more data in one place and longer retention, building meaningful reports stops being a fight against tool limitations and starts being about asking the right questions
Planning makes or breaks all of this – None of it works if the data lake is a mess. We'll cover what good structure actually looks like and how it connects directly to these use cases
Wednesday, May 27th at 2 p.m. ET / 11 a.m. PT
We’ll sit down with a real Cribl customer who made the bet on multi-destination routing and a data lake, and let them tell you in their own words what changed, what it cost, and what it's worth now.
The real story, not a slide deck – Our guest walks us through where they started, the problems they were actually trying to solve, and why the multi-destination and data lake pattern was the answer they landed on
How the data changed the way the business works – Beyond cost savings and tool efficiency, we dig into how having more data available has changed the way the business thinks about and uses its telemetry
What they wish they'd known going in – Lessons learned, things they'd do differently, and practical advice for anyone just getting started
Friday, June 5th at 1 p.m. ET / 10 a.m. PT
We sit down with a partner who’s helped teams across multiple industries rethink how they manage, route, and use their data. We’ll talk about what good looks like, common failure modes, and how to actually land this in your org.
Data is a business asset, not just an IT problem – Across every industry our guest works in, the organizations winning with data are the ones where leadership understands its value. We talk about what that shift looks like and why it changes everything
Choice is the point – Being locked into one tool, one vendor, or one way of seeing your data is a strategic risk. We dig into what real flexibility looks like in practice and why it matters beyond just cutting costs
Control compounds over time – The organizations that invested in owning and structuring their data early are now doing things others can't. We close out the series with a look at where this is all heading and what it means to be positioned well for what comes next
