Case Study: University of Pittsburgh Migrates from Splunk to Microsoft Sentinel in 68 Days with Cribl

University of Pittsburgh migrates to Microsoft Sentinel in 68 days with Cribl

The University of Pittsburgh faced challenges with managing and extracting value from its security event data in Splunk Cloud. The IT Security team was spending considerable effort cleaning and parsing data from varied sources, but most logs still lacked the necessary structure and normalization. To optimize its security data management, the university chose to migrate to Microsoft Sentinel and implemented Cribl Stream and Cribl Edge to facilitate the transition.

Using Cribl's products, the university successfully migrated from Splunk to Microsoft Sentinel in just 68 days. Cribl enabled the team to parse, normalize, and enrich log data in real-time, readying it for the new SIEM. This resulted in significant cost savings through data reduction and filtering, streamlined operations for the small team, and a smooth rollout across over 1,000 servers.

University of Pittsburgh