BMC TrueSight and Cribl compete in the IT monitoring and event management software category. Cribl seems to have the upper hand with its real-time data processing capabilities and cost-effective pricing, which are particularly impressive compared to BMC TrueSight's more traditional monitoring approach.
Features: BMC TrueSight offers extensive integration with various monitoring tools, automated root cause analysis, and a centralized operational view. Cribl offers exceptional real-time data transformation, flexibility in data routing, and robust data reduction capabilities.
Room for Improvement:BMC TrueSight needs improvements in ease of deployment, stability, and comprehensive reporting. Cribl should enhance backward compatibility, logging, debugging capabilities, and documentation.
Ease of Deployment and Customer Service: Both BMC TrueSight and Cribl provide on-premise deployment options, with Cribl also offering hybrid and public cloud solutions. Both have inconsistencies in customer service, highlighting areas for improved support quality and response times.
Pricing and ROI: BMC TrueSight's licensing is complex and cost-intensive, yet offers long-term ROI through reduced operational costs. Cribl is praised for its cost-effective pricing model, allowing substantial savings in large-scale data environments due to its efficient data handling.
What we've seen is really an overall reduction of just shy of 40% in our ingest into our SIM platform versus prior to having Cribl.
The second thing is that data aggregation, sampling, and reduction that we're able to do of the data, lowering our overall data volume, both traversing the network as well as what's being stored inside of our final solutions.
In terms of reduction, we were able to save almost ~40% of our total cost.
I would rate their technical support a nine out of ten.
They had extensive expertise with the product and were able to facilitate everything we needed.
Usually, within an hour, we get a response, and we are able to work with them back and forth until we resolve the issues.
Sometimes by hearing the problem itself, they will know what the solution is, and they will let us know how to resolve it, and we do it immediately.
The infrastructure behind Cribl Search is also scalable as it uses a CPU and just spawns horizontally more instances as it demands and requires.
Compared to other SIEM tools I use, any slight change on the operating system end impacts a lot on our SIEM tools and other things, but Cribl performs well in that regard.
It's an enterprise version, and we have a good amount of users using this solution.
Migrating from those SC4S servers to Cribl worker nodes has truly been a game-changer.
Regarding scalability, we started with zero servers and have around 285 servers now.
I would rate the stability as ten out of ten.
There are some complexities with deployment that could be improved in BMC TrueSight.
A more stringent role-based access control feature would enhance security and allow granular control over what users can see and access.
If we can have more internal logs and more debug logs to validate the error, that would be beneficial because instead of reaching out to Cribl support, we can troubleshoot and find the root cause ourselves.
In terms of large datasets—whether they originated from network inputs, virtual machines, or cloud instances—ingesting the data into the destination was relatively easy.
BMC TrueSight licensing costs are on the more expensive side.
Over time, the licensing cost has increased.
Cribl is very inexpensive, with enterprise pricing around 30 cents per GB, which is really decent.
They have a universal license that allows us to consume the portions of Cribl that we want to use or flex into other portions of Cribl.
Automated root cause analysis and predictive capabilities are powerful features that assist in resource utilization and capacity planning.
The data reduction and preprocessing capabilities make Cribl really unique.
Cribl has a feature called JSON Unroll or Unroll function that allows you to differentiate the events; each event will come ingested as a single log instead of piling it up with multiple events.
The Cribl UI is very simple and easy to use, particularly when working with data from various sources; it makes it very easy to create pipelines, add complex logic to those pipelines, and then gives you a preview of what your data looks like before applying that pipeline and what you get after.
| Product | Market Share (%) |
|---|---|
| Cribl | 1.2% |
| BMC TrueSight | 1.0% |
| Other | 97.8% |
| Company Size | Count |
|---|---|
| Small Business | 24 |
| Midsize Enterprise | 6 |
| Large Enterprise | 24 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 5 |
| Large Enterprise | 18 |
BMC TrueSight offers extensive event management and seamless integration, providing comprehensive monitoring across varied infrastructures through its centralized console and Knowledge Modules.
BMC TrueSight delivers robust event management capabilities with seamless integration and comprehensive monitoring of diverse infrastructures. Its single console simplifies management, offering automated triage for standardized alerts, enhancing efficiency. Knowledge Modules support services from hardware to cloud, while proactive monitoring and capacity optimization enhance customization. It efficiently supports mixed environments by providing detailed insights and intelligently routing alerts to reduce noise. While improvements are needed in deployment, integration, AI, automation, reporting, and complexity reduction, it still meets diverse operational needs effectively.
What are BMC TrueSight's key features?
What benefits and ROI should users seek in BMC TrueSight?
BMC TrueSight is widely used in performance and availability monitoring for infrastructure and applications, supporting the monitoring of servers, databases, networks, and IT environments. It is implemented to improve management and reduce downtime, serving needs in data centers and cloud services. Organizations leverage it for event management, comprehensive data center monitoring, and cloud services, using its capabilities for alerting, ticket creation, troubleshooting, and compliance, enhancing operational efficiency globally.
Cribl offers advanced data transformation and routing with features such as data reduction, plugin configurations, and log collection within a user-friendly framework supporting various deployments, significantly reducing data volumes and costs.
Cribl is designed to streamline data management, offering real-time data transformation and efficient log management. It supports seamless SIEM migration, enabling organizations to optimize costs associated with platforms like Splunk through data trimming. The capability to handle multiple data destinations and compression eases log control. With flexibility across on-prem, cloud, or hybrid environments, Cribl provides an adaptable interface that facilitates quick data model replication. While it significantly reduces data volumes, enhancing overall efficiency, there are areas for improvement, including compatibility with legacy systems and integration with enterprise products. Organizations can enhance their operational capabilities through certification opportunities and explore added functionalities tailored towards specific industry needs.
What are Cribl's most important features?Cribl sees extensive use in industries prioritizing efficient data management and cost optimization. Organizations leverage its capabilities to connect between different data sources, including cloud environments, improving both data handling and storage efficiency. Its customization options appeal to firms needing specific industry compliance and operational enhancements.
We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
