Case Study: Sally Beauty achieves 41% EDR data reduction with Cribl

Sally reduces EDR data by 41% with Cribl

Sally Beauty, an international specialty retailer, faced challenges managing and optimizing its IT and security data streams. The company needed a more resilient and flexible data pipeline to efficiently process data from sources like its Endgame EDR solution and send it to Elastic Cloud. Their existing tools, including Logstash and syslog-ng, were time-consuming to manage and did not provide the control needed to reduce data redundancy or convert data into the required Elastic Common Schema format.

By implementing Cribl's cloud-based data engine, Cribl.Cloud, Sally Beauty gained full control over its data. The solution parsed the Endgame data, standardized it, and reduced the daily volume sent to Elastic by 41%, from 9.25TB to 5TB. This data reduction allowed them to retain critical information for 45 days instead of just 7. Furthermore, Cribl freed up 75% of the security architects' time previously spent managing legacy systems, allowing the team to focus on security instead of data engineering.

Sally