corpus.blog
56,966 blogs · [ { "id": "01a0e744-c1d1-70e4-8cfe-e536b24f8a14", "title": "Cribl Privacy Model lost 20 heads and got 2.8x faster", "url": "https://cribl.io/blog/cribl-privacy-model-lost-20-heads-and-got-2-8x-faster", "published_at": "2026-09-27T00:00:00+00:00" }, { "id": "01a0d7c1-61d2-7360-ba10-2059d7ee70e4", "title": "Cribl Stream and Databricks: A faster path to analytics-ready telemetry", "url": "https://cribl.io/blog/cribl-stream-and-databricks-a-faster-path-to-analytics-ready-telemetry", "published_at": "2026-09-24T00:00:00+00:00" }, { "id": "01a0d7c1-61d2-7360-ba10-2059d8a0a66d", "title": "AI is compressing attack timelines. Cyber resilience needs proof.", "url": "https://cribl.io/blog/ai-is-compressing-attack-timelines-cyber-resilience-needs-proof", "published_at": "2026-09-24T00:00:00+00:00" }, { "id": "01a0d7c1-61d2-7360-ba10-2059d9070173", "title": "The people who help shape Cribl: Celebrating some of our early employees", "url": "https://cribl.io/blog/the-people-who-help-shape-cribl-celebrating-some-of-our-early-employees", "published_at": "2026-09-23T00:00:00+00:00" }, { "id": "01a0c504-c9ea-7389-a2d8-18376ef8dc16", "title": "CriblCon 26: Can’t-miss sessions if you want to be a superstar analyst", "url": "https://cribl.io/blog/criblcon-26-cant-miss-sessions-if-you-want-to-be-a-superstar-analyst", "published_at": "2026-09-18T00:00:00+00:00" }, { "id": "01a0c504-c9ea-7389-a2d8-18376fac42ae", "title": "What TypeSafe’s Jev means for telemetry", "url": "https://cribl.io/blog/what-typesafes-jev-means-for-telemetry", "published_at": "2026-09-17T17:50:00+00:00" }, { "id": "01a0b0bb-2c4f-7042-89bb-e2fa6d081ee8", "title": "Manage multiple environments with Cribl as Code", "url": "https://cribl.io/blog/manage-multiple-environments-with-cribl-as-code", "published_at": "2026-09-17T01:00:00+00:00" }, { "id": "01a0b0bb-2c4f-7042-89bb-e2fa6e06350c", "title": "Building an AI agent for smarter, less painful alert triage", "url": "https://cribl.io/blog/building-an-ai-agent-for-smarter-less-painful-alert-triage", "published_at": "2026-09-17T00:00:00+00:00" }, { "id": "01a0b0bb-2c4f-7042-89bb-e2fa6ef30e16", "title": "Backend functions arrive in Cribl Apps", "url": "https://cribl.io/blog/backend-functions-arrive-in-cribl-apps", "published_at": "2026-09-16T00:01:00+00:00" }, { "id": "01a0b0bb-2c4f-7042-89bb-e2fa6feb2884", "title": "Cribl Guard Privacy Models 3.0: Less noise, more signal", "url": "https://cribl.io/blog/cribl-guard-privacy-models-3-0-less-noise-more-signal", "published_at": "2026-09-16T00:00:00+00:00" }, { "id": "01a0b0bb-2c4f-7042-89bb-e2fa70237da0", "title": "The Impact of AI and Machine Learning on Cybersecurity: Enhancing Threat Detection and Defense", "url": "https://cribl.io/blog/the-impact-of-ai-and-machine-learning-on-cybersecurity", "published_at": "2026-09-16T00:00:00+00:00" }, { "id": "01a0b0bb-2c4f-7042-89bb-e2fa709ec167", "title": "Building a continuous security testing harness", "url": "https://cribl.io/blog/building-a-continuous-security-testing-harness", "published_at": "2026-09-15T00:00:00+00:00" }, { "id": "01a096bc-155f-7398-a9f6-c0cbc623ca2e", "title": "GPT 6 Astra vs. GLM 5.3: Why performance scores aren’t the whole story", "url": "https://cribl.io/blog/gpt-6-astra-vs-glm-5-3-why-performance-scores-arent-the-whole-story", "published_at": "2026-09-11T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a37fb6d7c91", "title": "How I think about detection in the pipeline", "url": "https://cribl.io/blog/how-i-think-about-detection-in-the-pipeline", "published_at": "2026-09-03T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a37fc21312e", "title": "Mastering Capacity Analytics: How to Grow Infrastructure Without Guesswork", "url": "https://cribl.io/blog/mastering-capacity-analytics", "published_at": "2026-09-02T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a37fcbfab1e", "title": "How Cribl's security team solved their threat intelligence problem", "url": "https://cribl.io/blog/how-cribls-security-team-solved-their-threat-intelligence-problem", "published_at": "2026-09-01T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a37fda467e8", "title": "What is Cribl Search’s Lakehouse Engine?", "url": "https://cribl.io/blog/what-is-cribl-searchs-lakehouse-engine", "published_at": "2026-08-26T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a37fe847439", "title": "Building an Effective Root Cause Analysis Practice: The 8-step Guide for Continuous Improvement in IT and Security Incidents", "url": "https://cribl.io/blog/building-an-effective-root-cause-analysis-practice", "published_at": "2026-08-25T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a37fe97c940", "title": "Your security data lake is stuck in someone else's backlog", "url": "https://cribl.io/blog/your-security-data-lake-is-stuck-in-someone-elses-backlog", "published_at": "2026-08-25T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a37ff452bc8", "title": "Introducing Cribl Marketplace: A central place to discover and deploy apps", "url": "https://cribl.io/blog/introducing-cribl-marketplace-a-central-place-to-discover-and-deploy-apps", "published_at": "2026-08-19T03:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a37fff0fa93", "title": "Introducing AWS Cloud Connections: Automated AWS log discovery for Cribl Stream", "url": "https://cribl.io/blog/introducing-aws-cloud-connections-automated-aws-log-discovery-for-cribl-stream", "published_at": "2026-08-18T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380084298c", "title": "Introducing SecIT Bench, Cribl’s AI telemetry benchmark: A new standard for evaluating AI models in IT and security workflows", "url": "https://cribl.io/blog/introducing-secit-bench-cribls-ai-telemetry-benchmark-a-new-standard-for-evaluating-ai-models-in-it-and-security-workflows", "published_at": "2026-08-17T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38015b629c", "title": "Cribl Privacy 2.1: More telemetry scanned per unit of compute", "url": "https://cribl.io/blog/cribl-privacy-2-1-more-telemetry-scanned-per-unit-of-compute", "published_at": "2026-08-14T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3802262297", "title": "Cribl Apps: Do the fun part of development", "url": "https://cribl.io/blog/cribl-apps-do-the-fun-part-of-development", "published_at": "2026-08-14T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3802f4abcb", "title": "No REST for the weary", "url": "https://cribl.io/blog/no-rest-for-the-weary", "published_at": "2026-08-13T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38039af6ef", "title": "When your metrics don’t tell the full story: How Cribl’s SRE team reshapes telemetry for incidents", "url": "https://cribl.io/blog/when-your-metrics-dont-tell-the-full-story-how-cribls-sre-team-reshapes-telemetry-for-incidents", "published_at": "2026-08-12T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3803a1a4d7", "title": "High enough to read it, low enough to see it", "url": "https://cribl.io/blog/high-enough-to-read-it-low-enough-to-see-it", "published_at": "2026-08-12T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3804957321", "title": "Cribl SecOps uncovers EtherHiding malware campaign on the blockchain", "url": "https://cribl.io/blog/cribl-secops-uncovers-etherhiding-malware-campaign-on-the-blockchain", "published_at": "2026-08-11T13:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3804b79450", "title": "Locking Down Apps at Cribl: RBAC, Elevated Permissions, and User Identity", "url": "https://cribl.io/blog/locking-down-apps-at-cribl-rbac-elevated-permissions-and-user-identity", "published_at": "2026-08-05T09:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380534e63b", "title": "From prompt to action: Why agent workflows need observability", "url": "https://cribl.io/blog/from-prompt-to-action-why-agent-workflows-need-observability", "published_at": "2026-08-04T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3805400e20", "title": "What is your AI actually doing? Introducing the Cribl App for AI Observability", "url": "https://cribl.io/blog/what-is-your-ai-actually-doing-introducing-the-cribl-app-for-ai-observability", "published_at": "2026-07-31T14:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38057c0b3a", "title": "The night before DORA: One CISO. Five timelines. Zero confidence.", "url": "https://cribl.io/blog/the-night-before-dora-one-ciso-five-timelines-zero-confidence", "published_at": "2026-07-30T08:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38066e5701", "title": "Campus experience at CriblCon 26: Learn it, break it, fix it, brag about it", "url": "https://cribl.io/blog/campus-experience-at-criblcon-26-learn-it-break-it-fix-it-brag-about-it", "published_at": "2026-07-29T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38074ad989", "title": "What is agentic telemetry?", "url": "https://cribl.io/blog/what-is-agentic-telemetry", "published_at": "2026-07-28T05:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38075bc2f0", "title": "Why full-text search matters for modern log analytics", "url": "https://cribl.io/blog/why-full-text-search-matters-for-modern-log-analytics", "published_at": "2026-07-28T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3807c0a6a8", "title": "Optimizing observability spend: Practical strategies for SREs", "url": "https://cribl.io/blog/optimizing-observability-spend-practical-strategies-for-sres", "published_at": "2026-07-28T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380876b8ae", "title": "AI-assisted vulnerability research at Cribl", "url": "https://cribl.io/blog/ai-assisted-vulnerability-research-at-cribl", "published_at": "2026-07-28T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3808aa5d4f", "title": "Using OTel to light up the Elastic Hosts view with Cribl Edge metrics", "url": "https://cribl.io/blog/using-otel-to-light-up-the-elastic-hosts-view-with-cribl-edge-metrics", "published_at": "2026-07-24T09:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38093cfff5", "title": "I built a full-featured app on the Cribl Platform and I'm not a developer", "url": "https://cribl.io/blog/i-built-a-full-featured-app-on-the-cribl-platform-and-im-not-a-developer", "published_at": "2026-07-23T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380a2ff263", "title": "Architecting for the speed of \"vibe coding\": Introducing Apps", "url": "https://cribl.io/blog/architecting-for-the-speed-of-vibe-coding-introducing-apps", "published_at": "2026-07-23T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380b11f466", "title": "What’s New! We heard you like AI.", "url": "https://cribl.io/blog/whats-new-4-19", "published_at": "2026-07-22T09:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380bd721ae", "title": "Cribl MCP Server: Interact with Cribl using the AI tools you already use", "url": "https://cribl.io/blog/cribl-mcp-server-interact-with-cribl-using-the-ai-tools-you-already-use", "published_at": "2026-07-22T00:30:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380c764d9f", "title": "Threat hunting with the Cribl MCP", "url": "https://cribl.io/blog/threat-hunting-with-the-cribl-mcp", "published_at": "2026-07-22T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380d2bc75c", "title": "AI governance requires evidence: Building trust and accountability in public sector AI", "url": "https://cribl.io/blog/ai-governance-requires-evidence-building-trust-and-accountability-in-public-sector-ai", "published_at": "2026-07-20T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380d7381c3", "title": "How Cribl helps teams get more from their telemetry pipeline", "url": "https://cribl.io/blog/how-cribl-helps-teams-get-more-from-their-telemetry-pipeline", "published_at": "2026-07-17T13:38:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380e407b05", "title": "The app was the easy part", "url": "https://cribl.io/blog/the-app-was-the-easy-part", "published_at": "2026-07-15T13:40:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380e8e82d9", "title": "What the CardinalOps acquisition means for you", "url": "https://cribl.io/blog/what-the-cardinalops-acquisition-means-for-you", "published_at": "2026-07-15T11:30:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380eaef6ca", "title": "A new way to SIEM", "url": "https://cribl.io/blog/a-new-way-to-siem", "published_at": "2026-07-14T06:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a380f28f808", "title": "Effective strategies to reduce data pipeline costs: a comprehensive guide", "url": "https://cribl.io/blog/effective-strategies-to-reduce-data-pipeline-costs", "published_at": "2026-07-13T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38100ebce1", "title": "Get your telemetry AI-ready with confidence using Cribl and Fig", "url": "https://cribl.io/blog/get-your-telemetry-ai-ready-with-confidence-using-cribl-and-fig", "published_at": "2026-07-09T13:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38110cce8f", "title": "Authoring Cribl Apps: How we built a Lookup File Manager", "url": "https://cribl.io/blog/authoring-cribl-apps-how-we-built-a-lookup-file-manager", "published_at": "2026-07-08T13:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381177f195", "title": "Building AI-ready data pipelines: a complete guide to building and analyzing your data flow", "url": "https://cribl.io/blog/building-ai-data-pipelines-a-complete-guide", "published_at": "2026-07-07T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381228b3bf", "title": "Nobody should have to babysit a dashboard: How alerting works in Cribl Insights", "url": "https://cribl.io/blog/nobody-should-have-to-babysit-a-dashboard-how-alerting-works-in-cribl-insights", "published_at": "2026-07-06T15:15:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3813232574", "title": "Designing scalable data pipeline architectures for the AI era", "url": "https://cribl.io/blog/designing-scalable-data-pipeline-architectures-for-the-ai-era", "published_at": "2026-07-06T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38137558fd", "title": "The telemetry data problem no one wants to admit", "url": "https://cribl.io/blog/the-telemetry-data-problem-no-one-wants-to-admit", "published_at": "2026-07-02T05:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3813f2c8c0", "title": "Your workflow shouldn't have to fit the software", "url": "https://cribl.io/blog/your-workflow-shouldnt-have-to-fit-the-software", "published_at": "2026-06-30T15:15:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3814cbd868", "title": "Understanding SIEM costs in 2026: key factors and pricing models for enterprises", "url": "https://cribl.io/blog/understanding-siem-costs", "published_at": "2026-06-30T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3815bb2dec", "title": "DORA without the guesswork: Turning fragmented logs into an evidence layer", "url": "https://cribl.io/blog/dora-without-the-guesswork-turning-fragmented-logs-into-an-evidence-layer", "published_at": "2026-06-29T08:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3816b1c23e", "title": "AI incidents are decision failures. Your postmortem should reflect that.", "url": "https://cribl.io/blog/ai-incidents-are-decision-failures-your-postmortem-should-reflect-that", "published_at": "2026-06-27T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38175c7d59", "title": "Keep telemetry resilient when your infrastructure can't keep up with shared PQ storage", "url": "https://cribl.io/blog/keep-telemetry-resilient-when-your-infrastructure-cant-keep-up-with-shared-pq-storage", "published_at": "2026-06-25T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38181a04ab", "title": "Build the Workflow, Not the Infrastructure", "url": "https://cribl.io/blog/build-the-workflow-not-the-infrastructure", "published_at": "2026-06-24T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3818efa2ff", "title": "Cribl: Telemetry Gatherers", "url": "https://cribl.io/blog/cribl-telemetry-gatherers", "published_at": "2026-06-23T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3819d1009a", "title": "The Christof meme is right: How vendors are directing your data strategy", "url": "https://cribl.io/blog/the-christof-meme-is-right-how-vendors-are-directing-your-data-strategy", "published_at": "2026-06-22T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381a38c429", "title": "How to build an AI telemetry architecture that serves five teams without duplicate collection", "url": "https://cribl.io/blog/how-to-build-an-ai-telemetry-architecture-that-serves-five-teams-without-duplicate-collection", "published_at": "2026-06-18T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381a91648e", "title": "Using agents to run experiments while we sleep: AutoResearch for Cribl AI", "url": "https://cribl.io/blog/using-agents-to-run-experiments-while-we-sleep-autoresearch-for-cribl-ai", "published_at": "2026-06-17T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381b7c4707", "title": "One AI stack. Five teams. Zero compromise.", "url": "https://cribl.io/blog/one-ai-stack-five-teams-zero-compromise", "published_at": "2026-06-17T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381b9903c8", "title": "Effective AI observability is a telemetry problem, not a tool problem.", "url": "https://cribl.io/blog/effective-ai-observability-is-a-telemetry-problem-not-a-tool-problem", "published_at": "2026-06-16T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381c48a435", "title": "5 security data decisions AI should assist, not own", "url": "https://cribl.io/blog/5-security-data-decisions-ai-should-assist-not-own", "published_at": "2026-06-16T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381c6e2967", "title": "Why SIEM migrations fail and how to break the cycle", "url": "https://cribl.io/blog/why-siem-migrations-fail-and-how-to-break-the-cycle", "published_at": "2026-06-11T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381cde55ff", "title": "CriblCon 26 is coming to Chicago. Register now.", "url": "https://cribl.io/blog/criblcon-26-is-coming-to-chicago-register-now", "published_at": "2026-06-10T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381d7174db", "title": "REST Collector Diagnostics — Now easier than ever!", "url": "https://cribl.io/blog/rest-collector-diagnostics-now-easier-than-ever", "published_at": "2026-06-09T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381d718394", "title": "When the technical problem is the easy part: Lessons from wrangling telemetry at Getty Images", "url": "https://cribl.io/blog/when-the-technical-problem-is-the-easy-part-lessons-from-wrangling-telemetry-at-getty-images", "published_at": "2026-06-05T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381dddf245", "title": "Cribl Guard’s latest model: Cribl-Privacy 1.5 with higher recall at the same footprint", "url": "https://cribl.io/blog/cribl-guards-latest-model-cribl-privacy-1-5-with-higher-recall-at-the-same-footprint", "published_at": "2026-06-05T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381de7b654", "title": "Cribl Search Pack for Zscaler: Your traffic went that way — now prove it", "url": "https://cribl.io/blog/cribl-search-pack-for-zscaler-your-traffic-went-that-way-now-prove-it", "published_at": "2026-06-03T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381e10c52b", "title": "Smarter data pipelines for modern healthcare", "url": "https://cribl.io/blog/smarter-data-pipelines-for-modern-healthcare", "published_at": "2026-05-29T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381ee940e1", "title": "From M-21-31 to M-26-14: A more practical path to federal logging and visibility", "url": "https://cribl.io/blog/from-m2131-to-m2614-a-more-practical-path-to-federal-logging-and-visibility", "published_at": "2026-05-28T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381f2313dc", "title": "Data Lake vs. Data Warehouse: What’s the Difference and Which One Do You Actually Need to Succeed in the Era of AI?", "url": "https://cribl.io/blog/data-lake-vs-data-warehouse-what-is-the-difference", "published_at": "2026-05-28T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a381f4b0087", "title": "The Art of Combining Logging Metrics and Monitoring: A Comprehensive Guide", "url": "https://cribl.io/blog/combining-logging-metrics-and-monitoring", "published_at": "2026-05-27T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3820012d71", "title": "Cert’s up: Using self-signed TLS to encrypt Cribl-to-Cribl data streams", "url": "https://cribl.io/blog/certs-up-using-self-signed-tls-to-encrypt-cribl-to-cribl-data-streams", "published_at": "2026-05-27T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3820495f07", "title": "The AI SOC and SRE data problem — and why Cribl is the answer", "url": "https://cribl.io/blog/the-ai-soc-and-sre-data-problem-and-why-cribl-is-the-answer", "published_at": "2026-05-26T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3820f4b5d6", "title": "Stop guessing what your AI did: Using Claude Cowork Telemetry with the Claude Compliance API", "url": "https://cribl.io/blog/stop-guessing-what-your-ai-did-using-claude-cowork-telemetry-with-the-claude-compliance-api", "published_at": "2026-05-21T13:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38212817aa", "title": "New engine under the hood: Cribl Search v2’s faster federated architecture", "url": "https://cribl.io/blog/new-engine-under-the-hood-cribl-search-v2s-faster-federated-architecture", "published_at": "2026-05-20T10:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3821786b3a", "title": "What’s New blog — Third time’s a charm", "url": "https://cribl.io/blog/whats-new-4-18", "published_at": "2026-05-20T03:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3821c804a2", "title": "Jumpstart and standardize investigations with new Notebook templates in Cribl Search", "url": "https://cribl.io/blog/jumpstart-and-standardize-investigations-with-new-notebook-templates-in-cribl-search", "published_at": "2026-05-20T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3821e3f77d", "title": "How to search your Microsoft Azure data in place. No movement. No copies. No compromise.", "url": "https://cribl.io/blog/how-to-search-your-microsoft-azure-data-in-place-no-movement-no-copies-no-compromise", "published_at": "2026-05-20T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3821ed8f65", "title": "A different architecture for agentic telemetry operations", "url": "https://cribl.io/blog/a-different-architecture-for-agentic-telemetry-operations", "published_at": "2026-05-15T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3822bcff3c", "title": "Operational technology challenges? Meet Cribl solutions", "url": "https://cribl.io/blog/operational-technology-challenges-meet-cribl-solutions", "published_at": "2026-05-15T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a382380597c", "title": "Building a Security Data Lake: Compliance, Governance, and Architecture Best Practices", "url": "https://cribl.io/blog/building-a-security-data-lake", "published_at": "2026-05-08T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3824549edf", "title": "A Comprehensive Guide to Implementing Centralized Log Management", "url": "https://cribl.io/blog/implementing-centralized-log-management", "published_at": "2026-05-07T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a382483d2ab", "title": "Telemetry is the hardest case of the AI access problem", "url": "https://cribl.io/blog/telemetry-is-the-hardest-case-of-the-ai-access-problem", "published_at": "2026-05-07T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3825783edc", "title": "Community catalyst: From customer success to community impact", "url": "https://cribl.io/blog/community-catalyst-from-customer-success-to-community-impact", "published_at": "2026-05-06T01:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38264687e4", "title": "Managing Data Lake Data: best practices for scalability and efficiency", "url": "https://cribl.io/blog/managing-data-lake-data", "published_at": "2026-05-06T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3826a080b7", "title": "The AI readiness gap: New HBR report reveals why infrastructure is the real bottleneck", "url": "https://cribl.io/blog/the-ai-readiness-gap-new-hbr-report-reveals-why-infrastructure-is-the-real-bottleneck", "published_at": "2026-05-05T09:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38270a90e9", "title": "AI doesn't fail because it's not smart enough. It fails because it can't see.", "url": "https://cribl.io/blog/ai-doesnt-fail-because-its-not-smart-enough-it-fails-because-it-cant-see", "published_at": "2026-05-04T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3827d697f3", "title": "Streamline workload migrations with Cribl and AWS", "url": "https://cribl.io/blog/streamline-workload-migrations-with-cribl-and-aws", "published_at": "2026-04-30T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a382891b5b1", "title": "Data decomposition: Stop keeping everything. Start keeping what matters.", "url": "https://cribl.io/blog/data-decomposition-stop-keeping-everything-start-keeping-what-matters", "published_at": "2026-04-28T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a38291612b3", "title": "Why hands-on exploitation makes product security stronger", "url": "https://cribl.io/blog/why-hands-on-exploitation-makes-product-security-stronger", "published_at": "2026-04-27T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a382997a4b1", "title": "OpenAI’s Privacy Filter is a strong step, but telemetry still needs a different kind of model", "url": "https://cribl.io/blog/open-ai-privacy-filter-is-a-strong-step-but-telemetry-still-needs-a-different-kind-of-model", "published_at": "2026-04-24T00:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a3829f3cfd0", "title": "The easy button — Get Cribl Edge Windows Events into Elastic", "url": "https://cribl.io/blog/the-easy-button-get-cribl-edge-windows-events-into-elastic", "published_at": "2026-04-17T01:00:00+00:00" }, { "id": "01a07df2-79de-7309-94af-7a382ae09eea", "title": "Building data pipelines for reliability: A comprehensive guide to best practices and key steps", "url": "https://cribl.io/blog/building-data-pipelines-for-reliability", "published_at": "2026-04-17T00:00:00+00:00" } ] posts Claim your blog
Back to Cribl Blog
Blog · corpus.blog/blogs/cribl.io/posts

Cribl Blog

cribl.io

2026

Cribl Privacy Model lost 20 heads and got 2.8x fasteroriginal ↗
27 Sept 2026
Cribl Stream and Databricks: A faster path to analytics-ready telemetryoriginal ↗
24 Sept 2026
AI is compressing attack timelines. Cyber resilience needs proof.original ↗
24 Sept 2026
The people who help shape Cribl: Celebrating some of our early employeesoriginal ↗
23 Sept 2026
CriblCon 26: Can’t-miss sessions if you want to be a superstar analystoriginal ↗
18 Sept 2026
What TypeSafe’s Jev means for telemetryoriginal ↗
17 Sept 2026
Manage multiple environments with Cribl as Codeoriginal ↗
17 Sept 2026
Building an AI agent for smarter, less painful alert triageoriginal ↗
17 Sept 2026
Backend functions arrive in Cribl Appsoriginal ↗
16 Sept 2026
Cribl Guard Privacy Models 3.0: Less noise, more signaloriginal ↗
16 Sept 2026
The Impact of AI and Machine Learning on Cybersecurity: Enhancing Threat Detection and Defenseoriginal ↗
16 Sept 2026
Building a continuous security testing harnessoriginal ↗
15 Sept 2026
GPT 6 Astra vs. GLM 5.3: Why performance scores aren’t the whole storyoriginal ↗
11 Sept 2026
How I think about detection in the pipelineoriginal ↗
3 Sept 2026
Mastering Capacity Analytics: How to Grow Infrastructure Without Guessworkoriginal ↗
2 Sept 2026
How Cribl's security team solved their threat intelligence problemoriginal ↗
1 Sept 2026
What is Cribl Search’s Lakehouse Engine?original ↗
26 Aug 2026
Building an Effective Root Cause Analysis Practice: The 8-step Guide for Continuous Improvement in IT and Security Incidentsoriginal ↗
25 Aug 2026
Your security data lake is stuck in someone else's backlogoriginal ↗
25 Aug 2026
Introducing Cribl Marketplace: A central place to discover and deploy appsoriginal ↗
19 Aug 2026
Introducing AWS Cloud Connections: Automated AWS log discovery for Cribl Streamoriginal ↗
18 Aug 2026
Introducing SecIT Bench, Cribl’s AI telemetry benchmark: A new standard for evaluating AI models in IT and security workflowsoriginal ↗
17 Aug 2026
Cribl Privacy 2.1: More telemetry scanned per unit of computeoriginal ↗
14 Aug 2026
Cribl Apps: Do the fun part of developmentoriginal ↗
14 Aug 2026
No REST for the wearyoriginal ↗
13 Aug 2026
When your metrics don’t tell the full story: How Cribl’s SRE team reshapes telemetry for incidentsoriginal ↗
12 Aug 2026
High enough to read it, low enough to see itoriginal ↗
12 Aug 2026
Cribl SecOps uncovers EtherHiding malware campaign on the blockchainoriginal ↗
11 Aug 2026
Locking Down Apps at Cribl: RBAC, Elevated Permissions, and User Identityoriginal ↗
5 Aug 2026
From prompt to action: Why agent workflows need observabilityoriginal ↗
4 Aug 2026
What is your AI actually doing? Introducing the Cribl App for AI Observabilityoriginal ↗
31 Jul 2026
The night before DORA: One CISO. Five timelines. Zero confidence.original ↗
30 Jul 2026
Campus experience at CriblCon 26: Learn it, break it, fix it, brag about itoriginal ↗
29 Jul 2026
What is agentic telemetry?original ↗
28 Jul 2026
Why full-text search matters for modern log analyticsoriginal ↗
28 Jul 2026
Optimizing observability spend: Practical strategies for SREsoriginal ↗
28 Jul 2026
AI-assisted vulnerability research at Cribloriginal ↗
28 Jul 2026
Using OTel to light up the Elastic Hosts view with Cribl Edge metricsoriginal ↗
24 Jul 2026
I built a full-featured app on the Cribl Platform and I'm not a developeroriginal ↗
23 Jul 2026
Architecting for the speed of "vibe coding": Introducing Appsoriginal ↗
23 Jul 2026
What’s New! We heard you like AI.original ↗
22 Jul 2026
Cribl MCP Server: Interact with Cribl using the AI tools you already useoriginal ↗
22 Jul 2026
Threat hunting with the Cribl MCPoriginal ↗
22 Jul 2026
AI governance requires evidence: Building trust and accountability in public sector AIoriginal ↗
20 Jul 2026
How Cribl helps teams get more from their telemetry pipelineoriginal ↗
17 Jul 2026
The app was the easy partoriginal ↗
15 Jul 2026
What the CardinalOps acquisition means for youoriginal ↗
15 Jul 2026
A new way to SIEMoriginal ↗
14 Jul 2026
Effective strategies to reduce data pipeline costs: a comprehensive guideoriginal ↗
13 Jul 2026
Get your telemetry AI-ready with confidence using Cribl and Figoriginal ↗
9 Jul 2026
Authoring Cribl Apps: How we built a Lookup File Manageroriginal ↗
8 Jul 2026
Building AI-ready data pipelines: a complete guide to building and analyzing your data floworiginal ↗
7 Jul 2026
Nobody should have to babysit a dashboard: How alerting works in Cribl Insightsoriginal ↗
6 Jul 2026
Designing scalable data pipeline architectures for the AI eraoriginal ↗
6 Jul 2026
The telemetry data problem no one wants to admitoriginal ↗
2 Jul 2026
Your workflow shouldn't have to fit the softwareoriginal ↗
30 Jun 2026
Understanding SIEM costs in 2026: key factors and pricing models for enterprisesoriginal ↗
30 Jun 2026
DORA without the guesswork: Turning fragmented logs into an evidence layeroriginal ↗
29 Jun 2026
AI incidents are decision failures. Your postmortem should reflect that.original ↗
27 Jun 2026
Keep telemetry resilient when your infrastructure can't keep up with shared PQ storageoriginal ↗
25 Jun 2026
Build the Workflow, Not the Infrastructureoriginal ↗
24 Jun 2026
Cribl: Telemetry Gatherersoriginal ↗
23 Jun 2026
The Christof meme is right: How vendors are directing your data strategyoriginal ↗
22 Jun 2026
How to build an AI telemetry architecture that serves five teams without duplicate collectionoriginal ↗
18 Jun 2026
Using agents to run experiments while we sleep: AutoResearch for Cribl AIoriginal ↗
17 Jun 2026
One AI stack. Five teams. Zero compromise.original ↗
17 Jun 2026
Effective AI observability is a telemetry problem, not a tool problem.original ↗
16 Jun 2026
5 security data decisions AI should assist, not ownoriginal ↗
16 Jun 2026
Why SIEM migrations fail and how to break the cycleoriginal ↗
11 Jun 2026
CriblCon 26 is coming to Chicago. Register now.original ↗
10 Jun 2026
REST Collector Diagnostics — Now easier than ever!original ↗
9 Jun 2026
When the technical problem is the easy part: Lessons from wrangling telemetry at Getty Imagesoriginal ↗
5 Jun 2026
Cribl Guard’s latest model: Cribl-Privacy 1.5 with higher recall at the same footprintoriginal ↗
5 Jun 2026
Cribl Search Pack for Zscaler: Your traffic went that way — now prove itoriginal ↗
3 Jun 2026
Smarter data pipelines for modern healthcareoriginal ↗
29 May 2026
From M-21-31 to M-26-14: A more practical path to federal logging and visibilityoriginal ↗
28 May 2026
Data Lake vs. Data Warehouse: What’s the Difference and Which One Do You Actually Need to Succeed in the Era of AI?original ↗
28 May 2026
The Art of Combining Logging Metrics and Monitoring: A Comprehensive Guideoriginal ↗
27 May 2026
Cert’s up: Using self-signed TLS to encrypt Cribl-to-Cribl data streamsoriginal ↗
27 May 2026
The AI SOC and SRE data problem — and why Cribl is the answeroriginal ↗
26 May 2026
Stop guessing what your AI did: Using Claude Cowork Telemetry with the Claude Compliance APIoriginal ↗
21 May 2026
New engine under the hood: Cribl Search v2’s faster federated architectureoriginal ↗
20 May 2026
What’s New blog — Third time’s a charmoriginal ↗
20 May 2026
Jumpstart and standardize investigations with new Notebook templates in Cribl Searchoriginal ↗
20 May 2026
How to search your Microsoft Azure data in place. No movement. No copies. No compromise.original ↗
20 May 2026
A different architecture for agentic telemetry operationsoriginal ↗
15 May 2026
Operational technology challenges? Meet Cribl solutionsoriginal ↗
15 May 2026
Building a Security Data Lake: Compliance, Governance, and Architecture Best Practicesoriginal ↗
8 May 2026
A Comprehensive Guide to Implementing Centralized Log Managementoriginal ↗
7 May 2026
Telemetry is the hardest case of the AI access problemoriginal ↗
7 May 2026
Community catalyst: From customer success to community impactoriginal ↗
6 May 2026
Managing Data Lake Data: best practices for scalability and efficiencyoriginal ↗
6 May 2026
The AI readiness gap: New HBR report reveals why infrastructure is the real bottleneckoriginal ↗
5 May 2026
AI doesn't fail because it's not smart enough. It fails because it can't see.original ↗
4 May 2026
Streamline workload migrations with Cribl and AWSoriginal ↗
30 Apr 2026
Data decomposition: Stop keeping everything. Start keeping what matters.original ↗
28 Apr 2026
Why hands-on exploitation makes product security strongeroriginal ↗
27 Apr 2026
OpenAI’s Privacy Filter is a strong step, but telemetry still needs a different kind of modeloriginal ↗
24 Apr 2026
The easy button — Get Cribl Edge Windows Events into Elasticoriginal ↗
17 Apr 2026
Building data pipelines for reliability: A comprehensive guide to best practices and key stepsoriginal ↗
17 Apr 2026
Next