Enriching via lookups is very powerful, but as your enrichment data set grows, CSV files become inadequate. In Cribl Stream 2.4, we introduced a Redis function, which provides a more scalable way to do lookups.
Billy, our goat agent
A new way to SIEM Decouple analysis from storage, so cost decisions don't create blind spots. It's a SIEM, but not as you know it. Learn more >