Data enrichment at ingest-time, not search time, with Cribl

from blog This is important, | ↗ original
Disclaimer: I’m a Splunk employee, and I’m not a Cribl customer, but I do know the founders (including the author of the blog post). I figured I’d write this exploration up here rather than as an exceedingly-long Twitter thread. My reactions are all to the content of the blog post, not actual use of the product. If I’m reading this blog post from...