Partner Spotlight: Gigamon and Cribl Help Customers Take Control of Their Data

San Francisco-based Cribl aims to put organizations in control of their telemetry data by offering options and flexibility for data management and observability. We spoke with the company about how Gigamon^® and Cribl solutions complement each other.

Gigamon: Who is Cribl, and what is the company’s history?

Cribl: As the artificial intelligence (AI) platform for telemetry, Cribl was founded in 2018 to help organizations get more value from the growing volume and variety of information technology (IT) and security telemetry. The Cribl platform is an open, vendor-neutral solution that helps teams collect, shape, route, store, search, and analyze telemetry for people and AI agents.

Cribl brings together capabilities for every stage of the telemetry lifecycle. Cribl Edge collects and processes data near its source. Cribl Stream routes and processes data in motion. Cribl Lake stores data in open formats. Cribl Search helps teams investigate it wherever it lives. Cribl Apps extends that foundation into experiences built for specific workflows.

Together, these capabilities give customers the choice and control to decide what data to collect, how to shape and route it, where to store it, and how to use it. They can add new tools, applications, and AI workflows without rebuilding their data foundation.

Gigamon: Describe your company culture. What makes you tick?

Cribl: Cribl has evolved from a focus on moving telemetry data to a broader focus on giving customers choice, control, and flexibility. That promise shows up in the product experience. Customers can choose where telemetry is collected, how it is shaped, where it is stored, how it is analyzed, and which teams, tools, applications, or AI agents can use it.

That is also reflected in the Cribl Apps framework. Instead of forcing every team into a vendor-defined application, Cribl helps teams build around the workflows they already have. With AI-assisted development, direct access to data and application programming interfaces (APIs), and built-in governance, teams can create fit-for-purpose experiences without standing up disconnected infrastructure.

Gigamon: If you had to describe Gigamon with just one word and describe Cribl with just one word, what would it be?

Cribl: Two words actually:

Deep. Gigamon gives customers deep visibility into traffic and infrastructure across hybrid environments.

Control. Cribl gives customers choice, control, and flexibility, along with the intelligence they need.

Gigamon supplies high-fidelity network intelligence, while Cribl helps make that intelligence usable across the customer’s security, operations, and analytics tools.

Gigamon: How do you see Cribl fitting together with Gigamon to solve customers’ problems?

Cribl: Gigamon exposes rich network intelligence from the infrastructure, and Cribl provides the data foundation for what happens next. Cribl Stream routes, reduces, enriches, transforms, and multicasts Gigamon-derived telemetry to the destinations that need it. Cribl Lake retains selected or full-fidelity data in open formats. Cribl Search investigates data where it lives and selectively forwards or replays it when a downstream tool needs it.

That creates a more flexible operating model than sending every event to every tool. Relevant data can go to a security information and event management (SIEM) platform or other analytics tools. Long-retention data can remain accessible in lower-cost storage. The same governed telemetry foundation can support security, IT operations, and AI-driven workflows.

Gigamon: What are some of your market’s specifics, advantages, and challenges when it comes to network security and visibility?

Cribl: More data is not automatically more useful. Telemetry is growing in volume and variety, while AI workloads generate new streams of machine data across hybrid and multicloud environments. Teams must balance three practical challenges: how much data they have, how different it is, and how its value changes over time.

For network security and visibility teams, the goal is not to send every event to every tool. It is to keep the data they may need, move the right data to the right place, and retain it in a form they can investigate later without forcing every event through one expensive platform. An open telemetry architecture gives teams that flexibility by helping them reduce unnecessary movement and duplication while preserving access to high-value network data.

Gigamon: Which Gigamon features stand out the most and make the product outstrip its competitors?

Cribl: The Gigamon differentiator is the depth and breadth of visibility it provides across hybrid infrastructure. That matters because Cribl is most valuable when it has high-quality, diverse telemetry to organize and make actionable.

The combined message emphasizes a complementary division of labor. Gigamon provides deep observability into data in motion, while Cribl helps customers decide what happens next. Cribl gives teams the choice, control, and flexibility to route, transform, retain, search, govern, and share that telemetry across the tools and teams that need it.

Gigamon: What’s an anecdote that customers share when they talk about the joint solution?

Cribl: Customers value Cribl’s ability to help make Gigamon telemetry available to multiple teams without sending every event to every destination. Teams can prioritize security-critical data for real-time analysis while retaining broader telemetry for investigation, compliance, and future use.

Gigamon: What are the wow moments associated with Gigamon?

Cribl: The wow moment is turning deep network visibility into telemetry teams can use. Gigamon helps expose the data customers need to see. Cribl helps them decide where it goes, how it is shaped, how long to keep it, and how to find it later.

That story goes beyond sending data to a single SIEM. The same open foundation can support investigations, AI-assisted search, custom applications, data protection, and detection engineering.

Customers retain the choice and flexibility to use their telemetry across the tools, teams, and workflows that matter to them.

Gigamon: What are some of the new challenges you see in the market that your partnership with Gigamon can solve?

Cribl: The market is moving from collecting everything and sending it somewhere to making telemetry useful, governed, and available for what comes next. AI increases the pressure. Organizations need more machine-generated data, more frequent queries, and more context while managing cost, privacy, data quality, and operational complexity.

Together, Gigamon and Cribl address that challenge by pairing deep network visibility with an open, flexible foundation. Teams can reduce and enrich data before it reaches expensive tools, retain it in open formats, search it where it lives, protect sensitive fields, and make it available to analysts and AI workflows.

This approach also connects telemetry management with detection engineering, helping teams find coverage gaps and noisy or broken detections without treating data engineering and detection engineering as separate problems.

Gigamon: What are the positive business outcomes as a Gigamon partner?

Cribl: The business outcome is greater value from the telemetry customers already generate. Customers can:

• Control ingestion, storage, and processing costs by sending data where it provides the most value
• Keep broader network telemetry available for investigation, compliance, and future use instead of discarding it
• Give security, network, platform, and operations teams access to the same governed data foundation
• Improve investigation speed by searching across data without unnecessary movement or rehydration
• Keep their architecture open, so they can add, replace, or extend analytics and AI tools without rebuilding their telemetry foundation

Gigamon: What unique capabilities does this partnership bring to our joint business?

Cribl: The partnership unifies two complementary parts of the telemetry lifecycle. Gigamon provides deep observability into network traffic and infrastructure. Cribl helps customers decide what happens next: collecting, processing, routing, storing, searching, replaying, and governing that telemetry across the tools and workflows that need it.

The value is more than sending Gigamon data through Cribl. Together, the platforms make Gigamon telemetry available for multiple outcomes, including SIEM and security analytics, network and IT operations, compliance, investigations, AI workflows, and custom applications. Customers can use the same data, search, APIs, and governance across use cases instead of building a separate pipeline for each one.

Gigamon: Who is the target audience for the joint solution, and how do they benefit?

Cribl: The core audience remains Security Operations (SecOps), Network Operations (NetOps), and observability teams. Platform engineering, security architecture, cloud operations, and data management stakeholders are increasingly involved.

• SecOps and security architects can prioritize network telemetry for detection, investigation, compliance, and response while retaining broader context
• NetOps and infrastructure teams can investigate traffic and infrastructure behavior without being limited to a single analytics destination
• DevOps and site reliability engineering (SRE) teams can use the same telemetry foundation for application and service troubleshooting
• Platform and data teams can manage routing, retention, access, governance, and cost across a hybrid environment
• AI and automation teams can build workflows and applications on governed telemetry instead of creating another isolated data pipeline

This broader audience aligns with Cribl’s current emphasis on shared telemetry for IT, security, people, AI agents, and custom applications.

Gigamon: Which verticals or segments are the best target companies, or where have you seen success and why?

Cribl: Public sector is a strong fit because agencies often need data residency, governance, security visibility, and the flexibility to operate across distributed or isolated environments. The opportunity extends beyond public sector to regulated industries, managed security providers, and large hybrid-cloud organizations. Relevant segments include healthcare, financial services, manufacturing, communications and media, technology, retail, education, and state and federal government.

The strongest joint prospects share three traits:

• High-volume or high-variety network telemetry
• Multiple analytics or security tools
• Pressure to control costs while preserving access to data

These organizations benefit from Gigamon deep visibility and Cribl’s open approach to routing, retention, search, governance, and replay.

Gigamon: Thank you to Cribl for making time for us and for being such a valued partner.

CONTINUE THE DISCUSSION

People are talking about this in the Gigamon Community’s Networking group.

Share your thoughts today