Case Study: Sophos achieves 48% data reduction and better data visibility with Cribl

Sophos reduces data intake by 48% with Cribl

Sophos, a global leader in cybersecurity, faced challenges managing massive volumes of diverse security log data. Their internal security team struggled with data normalization, high infrastructure costs, and a lack of visibility into their data's origins within an "accidental data lake." To address this, they turned to the vendor Cribl and implemented Cribl Stream to gain control over their data pipelines.

Using Cribl Stream, Sophos was able to filter, normalize, and route their data efficiently. The solution provided flexible ingestion for custom log formats and automated data cataloging and provenance tracking. This resulted in a measurable 48% reduction in overall data volume, significantly exceeding their cost-saving target. Cribl provided the data independence that allowed Sophos to modernize its data strategy and make its security operations more cost-effective.

Sophos