OBSERVABILITY 01732 759725 40 uncommon for customers to see savings of 30% on ingesting data and even more for certain data types. “With Windows XML event logs, which produce huge data volumes with not a lot of value, we sometimes see reductions of 80% in data volume. In the case of event per second sources – some SIEM products are run on a per second model – many start events are useless; they tell you that something has started, but all the interesting data is in the end event. If you’re still collecting that start event, you’re paying for it. We can drop that or send it off to object storage for later retrieval, giving a 50% reduction in event per second. So 30% is the fairly conservative figure we quote, but it’s not uncommon to see much higher savings, depending on the data type.” Faster searches In addition to savings on infrastructure costs, Heudecker says reduced data volumes and better data quality can increase the speed of search and reduce man hours. “One of our recent customers processed over a million events through Cribl Stream and because they had optimised that data on the way in, the searches on that data were 227 times faster. The underlying platform performs much better, and if you are in a workloadbased pricing model your workloads decrease substantially as well, because you’re working on better data. Getting data in (GDI) is another factor. Today, it can take a security team or an operations team months to pull that data in, refine it and then land it in the platform. We can do that in hours or days. “Cribl Stream really acts as a force multiplier for security and operations teams. There’s less floor sweeping activity going on so they can focus on their actual jobs. Security people don’t want to be in IT; they want to be in security and do higher level work. We free them up to do that.” Kilpatrick adds that for these reasons, Cribl solutions are highly valued by security teams. “They are the ones that are actively pursuing us. That’s who we sell to: it’s no secret that our top partners are primarily security-focused sellers,” he said. Observability skills In addition to its ongoing product development, Cribl is aiming to elevate the whole observability category through the establishment of a free technical certification program that will set the industry standard for observability skills, from planning and design to operating and optimising, while giving observability engineers a way to validate their expertise. The Cribl Certified Observability Engineer (CCOE) programme, accessible through the Cribl University, is launching with two foundational courses: CCOE Stream User, which explains how to use Cribl Stream to create a multi-vendor observability architecture that gives organisations control over all observability and telemetry data; and CCOE Stream Administrator, which provides a deeper technical dive into reducing, enriching, routing and replaying telemetry data. www.cribl.io Significant growth Search is due to be launched in the fourth quarter of this year and, according to Heudecker, it is already generating a great deal of excitement amongst Cribl’s customer base. “The customers we’ve interviewed – very large companies in the entertainment space, banking and financial services, pharmaceuticals and so on – are excited about it because they have data everywhere and they want to do nuanced searches. For example, they might want to look for an IP address across lots of different locations. But doing that has a very high cost. The companies we’ve spoken with are very excited about what this could mean from a security perspective and an operational perspective.” Zac Kilpatrick, Vice President, Global Channels at Cribl, believes that having a unified query language across three different environments – Edge, Search and Stream – will drive significant growth. “We think we’re going to continue to have massive growth even through any economic downturn. A big part of what we do is provide cost saving measures for our customers and being able to reduce that data flow has measurable ROI for what we provide, and also reduces the overall cost for customers. That optimisation play for us is really key to our growth, and we think it’s going to help us accelerate through the downturn.” So what sort of savings does Cribl typically deliver through its products? With the caveat that it depends on each customer case, Heudecker says it is not ...continued Narrow focus limits value of observability tools, warns Riverbed A new IDC Signature White Paper sponsored by Riverbed, The Shift to Unified Obser vability: Reasons, Requirements and Returns argues that a unified view of digital infrastructure is essential for IT teams that are short staffed and struggling to manage highly distributed digital infrastructures. In a survey of 1,400 IT workers in 10 countries, 90% of respondents said they currently use observability tools (with 54% using six or more tools for IT monitoring and measurement). However, 60% believe those tools have too narrow a focus and fail to provide a unified view across an organisation’s applications, network infrastructure, cloud, end-user services and devices. Six out of 10 respondents say the lack of unified observability restricts IT’s ability to meet business requirements and 59% believe it makes their job more difficult. Three quarters (75%) have difficulty analysing correlations and deriving actionable insights from multiple observability tools. riverbed.com Achieving ROI through observability Faced with increasingly complex hybrid IT environments, professionals are turning to observability to identify where they should prioritise their efforts to ensure projects are completed on time. According to the SolarWinds IT Trends Report, Getting IT Right: Managing Hybrid IT, 84% of IT professionals believe increased IT complexity has negatively impacted ROI. One third think it has created 4-7 months of extra work. SolarWinds President and CEO Sudhakar Ramakrishna said: “Many organisations are struggling to drive forward transformation amidst increasingly distributed and complex IT environments. Amplified by a global move towards hybrid and remote work, applications and workloads are now run across both cloud and on-premises infrastructure. This is not only hindering the ability to deliver benefits to end users in a timely fashion but also significantly impacting the bottom line. “In this challenging landscape, IT professionals are increasingly looking towards observability to manage these growing levels of complexity. By understanding where to prioritise their efforts, teams can manage hybrid IT realities more effectively and achieve the ROI targeted in their planned projects.” https://it-trends.solarwinds.com/#/
RkJQdWJsaXNoZXIy NDUxNDM=