Name: Using Observability Pipelines to Optimize Cloud-Native SIEM
Start: 2023-10-23T14:33:00Z
End: 2023-10-23T14:33:28.000Z
Location: BrightTALK
Rating: 5

Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl to analyze, collect, process, and route all IT and security data, delivering the choice, control, and flexibility required to adapt to their ever-changing needs. 

Interested in seeing first-hand how Cribl can support your use case? Sign up for Cribl.Cloud and process up to 1TB/day, for free! https://cribl.io/cribl-cloud/try-cribl-cloud/


Looking to bridge the gap between legacy systems and modern demands? Trying to handle more data with straining budgets? Data modernization is necessary to get the job done. By modernizing your approach to data integration, enrichment, and routing, you can streamline processes, cut costs, and enable better security outcomes across the enterprise.

This webinar walks through how to gauge your current data maturity level, where to start for big impact, and what to keep in mind when making the business case for funding.

In this session, we’ll cover:

- Models to assess and progress your data maturity. Pinpoint your posture in data integration, transformation, and routing, so your team can go from basic collection to sophisticated, value-driven insights.
- Strategies to identify and prioritize modernization areas. Learn how to target high-impact starting points, like data ingestion and redundancy reduction, so you can modernize with maximum efficiency.
- Techniques to secure support and funding for your modernization efforts. Discover ways to connect modernization initiatives to measurable outcomes, from cost savings to risk reduction, to make a strong case for ongoing investment.

Design Your Roadmap for Data Modernization: Integration, Enrichment, and Routing

Managing hundreds to thousands of agents in today’s massive and diverse environments can be time-intensive, complex, and just outright frustrating. But it doesn’t have to be. 

Join us for a quick, informative webinar on how Cribl Edge brings agent management into the modern era. Discover how it enables rapid deployment, seamless upgrades, easy mass configuration, and efficient troubleshooting for agents across your entire environment —all from a single place. 

Ready to streamline data collection at scale? See how Cribl Edge can save you time and effort, no matter the size of your environment!

How to Simplify Your Agent Management

Security operations teams are just trying to keep their heads above water. High costs, limited scalability, and to make life harder, your security data is in all different formats. Meanwhile, the amount of data keeps growing, making it increasingly difficult to manage and extract actual value. Sound familiar?

In this webinar, hear from Pedro Borges, Senior Security Engineer, and Scott Schwartz, Software Engineering Senior Manager at Siemens, as they share their experience in modernizing their security operations with Amazon Security Lake and Cribl. They’ll discuss how they are routing data from Security Lake to their SIEM for threat detection, investigation, and response. Plus, we’ll explore how organizations like Siemens can seamlessly transform third-party data into Open Cybersecurity Schema Framework (OSCF) format and ingest it into Security Lake, then search data at rest, increasing the scope of analysis and ensuring only the important data gets sent to analytics tools.

Join us to discover how Siemens:
- Gained visibility and uncovered insights into high-volume data sources, such as VPC Flow Logs.
- Reduced operational costs while improving their security posture through aggregation.
- Simplified their security monitoring environment and the data they sent to their SIEM.

How Siemens Simplifies Their Security Operations with Cribl and AWS

Watch this panel discussion featuring IT and Security leaders from Discovered Intelligence and ServiceNow, covering the practical realities of deploying Cribl.Cloud in a hybrid environment. Hear from experienced users who have successfully leveraged Cribl.Cloud's capabilities (Including Cribl Lake and Cribl Search) alongside their on-premises infrastructure.

Battle of the Beards: How to Get the Most out of Cribl.Cloud in a Hybrid Environment

With the relentless evolution of cyber threats and the complexity of managing dispersed data across multiple platforms, Cribl and CrowdStrike have joined forces to simplify the way organizations protect themselves. By harnessing the power of Cribl— the Data Engine for IT and Security— and CrowdStrike Falcon® Next-Gen SIEM, we’re turning the chaos of diverse and dispersed data into clarity. This partnership ensures your security team spends less time wrestling with data and more time focusing on defending against threats.

In this session, join Ed Bailey, Principal Technical Evangelist at Cribl, and Shivan Jairaj, Regional Director for NG-SIEM & Falcon Complete, APJ at CrowdStrike, to hear key insights and practical tips for architecting an effective data engine to fuel the next-gen SIEM.

Accelerating the AI-native SOC with CrowdStrike Next-Gen SIEM and Cribl

Join our expert speakers as they dive into the integration of AI and machine learning within business systems. The session will emphasize the crucial collaboration between data science and security teams. Our speakers will identify the challenges and potential threats such as prompt injection, context poisoning attacks, and the emerging threat of model extraction.

Key discussion points will include:

- The importance of training for data scientists and security teams
- The necessity of secure data handling practices
- The significance of effective communication and collaboration within project teams

You'll leave this session with valuable insights into the intersection of AI, machine learning, and cybersecurity.

Collaboration Between Security & Data Science for Secure AI Development

Thinking about building your own data pipeline? You're going to need more than band-aids and bubblegum to hold it together, but don’t just take our word for it. Join us as Matt Snyder and Nate Piquette from Omnissa’s Security team share their hard-earned lessons while constructing and scaling a home-grown data pipeline. Spoiler alert: it wasn’t always smooth sailing, especially when growing SIEM ingestion to multiple terabytes per day.

This session will cover:

- Exploring the trade-offs between developing your own solution and purchasing one, and why the decisions you make today can ripple into long-term consequences.
- The ups and downs of growing a data pipeline from small to massive, and how to keep your sanity intact as you scale from a few logs to terabytes per day.
- Practical strategies for managing unruly data, ensuring reliability, and building a scalable pipeline.

Whether you're a seasoned engineer or new to pipeline construction, this talk will give you practical insights to help you navigate your own data pipeline journey.

Hold My Beer: Lessons from One Team's Data Pipeline Journey

Efficiency, flexibility, and control are a must for IT and Security pros looking to manage data effectively. Our latest release introduces new features across the Cribl portfolio to help IT and Security teams tackle large-scale data challenges with ease.

Cribl 4.8 Release: Tackling Large-Scale Data

Hear first-hand how one leading regional energy utility provider transformed their outage response capabilities to meet DOE C2M2 requirements by implementing Cribl Stream. This session will delve into the utility's journey of redesigning its monitoring architecture to improve reliability and visibility, ultimately leading to faster outage restoration times for nearly one million customers.

Transforming Utility Operations: Enhancing Monitoring and Security Efficiency

Data modernization is quickly becoming a buzzworthy topic for experts focused on bridging the gap between modern needs and legacy systems, while also trying to wrangle exponentially more data with only a fraction more budget… but what does modernization actually mean to you, your team, and your organization? Is it something you should be exploring, and how do you determine where you’re at or should be, in your journey to modernization?

From collection, routing, and parsing, to integration, storage, and retrieval, modernization will require you to assess where you're at in the journey, determine the value of your data, and build a model for your organization. You'll also need to tie your initiatives to broader business goals so you can fund your modernization project.

In our session, we’ll show you:
- Models to measure the maturity of your architecture and engineering at each step in the data journey
- Strategies to determine which areas to address first 
- Tools and techniques to de-risk the upgrade process

Design your roadmap for data modernization

Join us for an in-depth exploration of Cribl's inaugural report, Navigating the Data Current, which highlights a transformative period for IT and Security teams as they modernize their data management practices.

- Expansion of data sources within enterprises
- Impact of cloud technology on IT and security decision-making
- Diversification trends within the SIEM (Security Information and Event Management) space
- Evolution of popular data destinations

Don't miss this opportunity to transform your IT and security operations. Register now to get access to the full Navigating the Data Current report for detailed insights and data.

Navigating the Data Current: Transforming IT & Security Operations in 2024

Data is growing exponentially but, put simply, budgets in the health and public sector are not. Our expert panel discusses how we can contain the costs of storing and using essential data, avoid vendor and platform lock-in and set ourselves free to become masters of our own data destiny. 

Panelist: Richard Woolham, Lead Product Owner (Performance Monitoring & Data Analytics), DWP Digital, Berwyn Jones, Head of UK Public Sector, Cribl, Stuart Bowell, Global Head of Observability, NETbuilder and Helen Olsen Bedford, Publisher, UKAuthority

UKAuthority Live: Set your data free

Learn how one of the largest U.S. financial institutions handles a diverse and high-volume logging ecosystem while supporting a multi-cloud integration across on-prem, SaaS, and public cloud. Serving approximately 70 million customers, this financial institution follows an Infrastructure-as-code approach to manage their logging platform and deliver dashboards, alerts, and queries across multiple lines of businesses. You’ll see how to care for sensitive data with the utmost care, minimizing risk and maximizing peace of mind with Cribl, the data engine for IT and Security. From logs to business insights in a matter of clicks, you are sure to rethink the power of logs!

Next Gen Logging: Deep Dive with a Large Financial Institution

Join Ed Bailey and Perry Correll as they demystify the AI marketing hype and explore the true value of AI in complementing existing processes. Discover how Cribl’s Co-Pilot tool enhances user productivity and optimizes workflows while serving as a powerful learning resource. They'll also cover the exciting upcoming features of Co-Pilot, the importance of Cribl’s free training programs, and how the tool can simplify processes and boost efficiency. Don't miss this insightful discussion on leveraging AI to achieve tangible benefits.

From Natural Language to Pipelines: Boosting Efficiency and Scalability

Join Ed and Jackie as they explore the challenges of securing funding for engineering and architectural projects. This webinar will emphasize the importance of connecting technical challenges to business needs and leveraging effective storytelling techniques. 

Key topics include:
• Differentiating between cost savings and cost avoidance
• Justifying data growth estimates with historical data
• The significance of clear communication and crafting a compelling narrative
• Focusing on the business problem and the technical solution

Don't miss this opportunity to gain valuable insights and strategies for successfully securing project funding.

How to get your observability project funded

Need an easier way to collect, process, and route data, at all times, and move it into any tool?  Watch this demo of Cribl Stream, where we’ll show you how to:

- Route data easily from any source to any destination, in any format
- Optimize data volumes to increase performance
- Shape data into actionable logs and metrics for analysis
- Boost signal to noise ratio via enrichment with third-party data
- Gain the flexibility to test, migrate, or add any tool without adding new agents or infrastructure

Take back control of your data.

Unlocking Data Insights: A Cribl Stream Demo

In this session, Synopsys will explore the transition from traditional syslog and Logstash setups to the dynamic capabilities of Cribl. Chanda Pulliam will share firsthand experiences, from scalability issues to performance challenges, how her team navigated these obstacles, to effectively transition to Cribl and Elastic.

Additionally, this session will cover how the team identified the size of events in Elasticsearch and the pivotal role it played in measuring total storage usage and savings post-Cribl implementation. Lastly, we'll hear about the intricacies of this methodology, showcasing how it enabled us to gain granular insights into our log data, optimize storage utilization, and realize significant cost savings.

Navigating Transition: From Syslog and Logstash to Cribl

What does it take to build software for the most security demanding customers in the world? Building secure products is part of Cribl's engineering identity. We have built a secure software development lifecycle that is both culturally and policy-driven, with product security tooling and processes integrated into every architecture review, every pull request, and every major and minor release.

Ed Bailey will chat with Cribl’s CISO Myke Lyons and Product Security Manager Rory McEntee about our software development lifecycle security program in this live discussion. Cribl has invested in a world-class Product Security Team with over 80 years of combined software security development experience to ensure our programs are robustly maintained, effective, and highly auditable.

LiveStream: Secure SDLC

In this webinar, we present a compelling argument: It’s not about collecting ALL the data; it’s about collecting the RIGHT data. 

Legacy on-prem SIEM solutions and data lakes can hinder data collection for combating modern threats like ransomware. Join us as we discuss the game-changing power of combining Cribl observability pipelines with cloud-native SIEM, empowering you to route, filter, and mask log data strategically. Unleash the potential of improved insights, focusing solely on what truly matters. 

Our security experts from Cribl and Exabeam will delve into how to:

- Accelerate migration: Bid farewell to legacy SIEM and data lakes, embracing the future of cloud-native SIEM
- Optimize storage: Liberate valuable headroom, accommodating vast amounts of telemetry data
- Improve threat detection: Seamlessly integrate behavioral analytics, enriching your telemetry data for proactive threat detection

Speakers:
Michael Moreno, Sr. Product Marketing Manager, Exabeam
Desi-Gavis Hughson, Mgr., Solutions Marketing, Cribl
Jim Apger, Sr. Alliances Technology Engineer, Cribl

Using Observability Pipelines to Optimize Cloud-Native SIEM

Observability

Observability Pipeline

SIEM

Log Data

Data Lake

Storage

Threat Detection

DevOps

SecOps

ITOps

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

Get powerful marketing data and analytics insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on the analytics that quantify your investments.

Data and Analytics

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Using Observability Pipelines to Optimize Cloud-Native SIEM

Presented by

About this talk

More from this channel