BMC TrueSight and Cribl compete in the IT monitoring and data management category. TrueSight has the upper hand in event management and monitoring capabilities, while Cribl is preferred for data flexibility and cost efficiency.
Features: TrueSight offers extensive event management, a consolidated monitoring platform, and advanced correlation. Cribl is flexible, handles diverse data, and supports routing to multiple destinations.
Room for Improvement: TrueSight faces criticism for deployment complexity, application performance monitoring, and cloud monitoring. Cribl needs better documentation, improved internal logging, and enhanced pipeline efficiency.
Ease of Deployment and Customer Service: TrueSight is complex, with on-premises and some cloud options. It's resource-intensive but has a strong customer relationship. Cribl offers flexible deployment models, is easier to manage, but could improve support response times.
Pricing and ROI: TrueSight's pricing is complex, often expensive for SMEs, but offers ROI in large deployments. Cribl has transparent pricing, is more cost-effective over time, especially for high data volumes, leading to strong ROI.
What we've seen is really an overall reduction of just shy of 40% in our ingest into our SIM platform versus prior to having Cribl.
The second thing is that data aggregation, sampling, and reduction that we're able to do of the data, lowering our overall data volume, both traversing the network as well as what's being stored inside of our final solutions.
In terms of reduction, we were able to save almost ~40% of our total cost.
I would rate their technical support a nine out of ten.
They had extensive expertise with the product and were able to facilitate everything we needed.
Usually, within an hour, we get a response, and we are able to work with them back and forth until we resolve the issues.
Sometimes by hearing the problem itself, they will know what the solution is, and they will let us know how to resolve it, and we do it immediately.
The infrastructure behind Cribl Search is also scalable as it uses a CPU and just spawns horizontally more instances as it demands and requires.
Compared to other SIEM tools I use, any slight change on the operating system end impacts a lot on our SIEM tools and other things, but Cribl performs well in that regard.
Cribl performs effectively across both market segments.
Migrating from those SC4S servers to Cribl worker nodes has truly been a game-changer.
Regarding scalability, we started with zero servers and have around 285 servers now.
Cribl is designed to deal with certain kinds of loads and is not designed to handle any scenario in the market.
There are some complexities with deployment that could be improved in BMC TrueSight.
A more stringent role-based access control feature would enhance security and allow granular control over what users can see and access.
When passing query logs or DNS logs, if certain malicious query patterns need to be identified or if fast-flux attacks are happening, Cribl can report that and those would definitely be a plus for them.
I would advise others looking to implement Cribl that if they are evolving Cribl Search, it would be very interesting to see more capability, more flexibility, and more ways to share the data similar to Splunk.
BMC TrueSight licensing costs are on the more expensive side.
Over time, the licensing cost has increased.
It was cheaper than the Splunk license.
Splunk is more expensive, and Cribl appears to be more affordable.
Automated root cause analysis and predictive capabilities are powerful features that assist in resource utilization and capacity planning.
The data reduction and preprocessing capabilities make Cribl really unique.
Cribl has a feature called JSON Unroll or Unroll function that allows you to differentiate the events; each event will come ingested as a single log instead of piling it up with multiple events.
The Cribl UI is very simple and easy to use, particularly when working with data from various sources; it makes it very easy to create pipelines, add complex logic to those pipelines, and then gives you a preview of what your data looks like before applying that pipeline and what you get after.
| Product | Mindshare (%) |
|---|---|
| Cribl | 1.2% |
| BMC TrueSight | 1.0% |
| Other | 97.8% |
| Company Size | Count |
|---|---|
| Small Business | 24 |
| Midsize Enterprise | 6 |
| Large Enterprise | 24 |
| Company Size | Count |
|---|---|
| Small Business | 25 |
| Midsize Enterprise | 5 |
| Large Enterprise | 34 |
BMC TrueSight offers extensive event management and seamless integration, providing comprehensive monitoring across varied infrastructures through its centralized console and Knowledge Modules.
BMC TrueSight delivers robust event management capabilities with seamless integration and comprehensive monitoring of diverse infrastructures. Its single console simplifies management, offering automated triage for standardized alerts, enhancing efficiency. Knowledge Modules support services from hardware to cloud, while proactive monitoring and capacity optimization enhance customization. It efficiently supports mixed environments by providing detailed insights and intelligently routing alerts to reduce noise. While improvements are needed in deployment, integration, AI, automation, reporting, and complexity reduction, it still meets diverse operational needs effectively.
What are BMC TrueSight's key features?
What benefits and ROI should users seek in BMC TrueSight?
BMC TrueSight is widely used in performance and availability monitoring for infrastructure and applications, supporting the monitoring of servers, databases, networks, and IT environments. It is implemented to improve management and reduce downtime, serving needs in data centers and cloud services. Organizations leverage it for event management, comprehensive data center monitoring, and cloud services, using its capabilities for alerting, ticket creation, troubleshooting, and compliance, enhancing operational efficiency globally.
Cribl offers advanced data transformation and routing with features such as data reduction, plugin configurations, and log collection within a user-friendly framework supporting various deployments, significantly reducing data volumes and costs.
Cribl is designed to streamline data management, offering real-time data transformation and efficient log management. It supports seamless SIEM migration, enabling organizations to optimize costs associated with platforms like Splunk through data trimming. The capability to handle multiple data destinations and compression eases log control. With flexibility across on-prem, cloud, or hybrid environments, Cribl provides an adaptable interface that facilitates quick data model replication. While it significantly reduces data volumes, enhancing overall efficiency, there are areas for improvement, including compatibility with legacy systems and integration with enterprise products. Organizations can enhance their operational capabilities through certification opportunities and explore added functionalities tailored towards specific industry needs.
What are Cribl's most important features?Cribl sees extensive use in industries prioritizing efficient data management and cost optimization. Organizations leverage its capabilities to connect between different data sources, including cloud environments, improving both data handling and storage efficiency. Its customization options appeal to firms needing specific industry compliance and operational enhancements.
We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
