Case Study: Fast Growing US City saves time and money with Cribl Stream

Fast Growing US City Keeps a Close Eye on User Experiences and Security by Routing Log Data to Different Analytics Tools

Fast Growing US City, one of the fastest-growing U.S. cities and a state capital, needed a better way to manage the 2TB of log and event data it generates each day across systems like VPNs, firewalls, CrowdStrike, Microsoft 365, and Windows. The city’s IT team was struggling with manual reconfiguration whenever departments wanted new data destinations, while Splunk license limits and an upcoming Splunk Cloud migration added urgency. To solve this, the city turned to Cribl and its observability pipeline product, Cribl Stream.

With Cribl Stream, the city can route data selectively to destinations such as Microsoft Sentinel, Amazon S3, Splunk Enterprise Security, and Splunk Cloud in just minutes, instead of days. Cribl also helped the team use tagging for data governance and access control, and it is expected to cut the Splunk Cloud migration time in half while saving about four hours of work per server admin across dozens of admins. Overall, Cribl has helped Fast Growing US City reduce costs, improve security visibility, and get data to departments faster.