Cribl SIEM?
Source Reddit Cybersecurity
Discussion
Cribl Detect is a new product positioning itself as a SIEM solution that operates differently from traditional SIEMs by performing in-stream detection and federated search across distributed telemetry data. It aims to reduce costs and improve detection coverage by analyzing data before ingestion and enabling AI-assisted investigations without forced data centralization. This is an announcement of a product entering the SIEM market rather than a security vulnerability or threat.
r/cybersecurity (opens in a new tab)u/-vicissitude-0 points0 comments
Looks like Cribl is getting into the SIEM space. Isn’t this an already crowded space? I’ve always known them to be telemetry pipeline. Are they trying to punch outside their wheelhouse? Are they offering something other SIEMS aren’t?