ServiceNow adopted Cribl Stream to gain more control over their data and reduce the cost of operating their logging platform. In this video, Scott Burger explains how Cribl helped them cut storage and licensing expenses while enabling flexible data routing across their environment.
Full Transcript
This transcript was automatically generated and lightly edited for clarity. Please excuse any transcription errors.
Auto-Generated Transcript (lightly edited for accuracy)
00:37 We can route events without affecting others. We did a quick POV and saw exactly the reductions we were hoping for.
00:44 When we rolled out to our production environment, because we’d already done the POV in our lab, we had a lot of the configuration pre-set.
00:50 Everything worked when we rolled it out to production, and we saw those reductions as soon as it went live.
00:57 Our biggest win is actually routing data to other applications. Now that we have Cribl in the company, teams are starting to hear about it.
01:04 Splunk has always been kind of a data island. It’s the top-level system that’s difficult to get data back out of.
01:10 With Cribl, that’s giving us the ability to route data at scale to other applications.
01:18 The other use cases we’re really looking at are migrating off our legacy syslog environment and consolidating a number of REST collectors.
01:27 Those collectors are built with a combination of languages, scripting technologies, and other platforms that are pulling data in today.
01:35 I’d like to consolidate all of those in Cribl. The ROI we’re seeing is essentially a reduction in both storage costs for our current environment…
01:44 …as well as licensing costs. That has essentially paid for Cribl and then gone beyond that. If you’re running a logging platform without Cribl, you’re doing it wrong.
01:51 I would call Cribl the universal translator for data. It takes data in from anywhere and allows you to reformat it—change fields, formats, and protocols…
02:01 …and then send that data to any other system.
02:07 We’ve been using the CrowdStrike Pack and have quite a bit of CrowdStrike logs, and it’s done exactly what it says on the box.
02:13 We saw immediate reductions from that, and we had great support from our sales engineers and professional services team.
02:19 We implemented it across about 55,000 servers and didn’t run into any major bugs.
02:33 We didn’t see performance issues, and we haven’t had any outages. It’s just worked.
02:40 Search is at the top of our list right now. The ability to search in place, especially across APIs, has everyone very excited.
02:47 Everyone’s very happy. It’s a young, fast-moving company that’s extremely responsive to customers.
02:54 It’s been a very positive change compared to a lot of companies that have been around for a long time.
03:06 Cribl is like Thanos—you snap your fingers, and half your data problems are gone.