BMC TrueSight and Cribl operate in the data management and IT infrastructure monitoring category. BMC TrueSight has an advantage with its extensive event management and monitoring capabilities tailored for large organizations, while Cribl stands out for its data routing and processing efficiency, appealing to businesses aiming to streamline data workflows.
Features: BMC TrueSight offers event consolidation, proactive monitoring, and integrated ticketing systems vital for managing diverse IT environments. It enables quick implementation and monitoring adjustments, ensuring visibility across various business services. Cribl provides efficient data routing, intuitive UI, and supports multiple data destinations, which enhances its processing and cost management capabilities.
Room for Improvement: BMC TrueSight's deployment complexity, HA limitations, and cloud monitoring features need enhancements alongside better reporting and dashboard flexibility. Cribl could improve with more robust training resources, competitive pricing, and better Git integration. High data volume performance issues and a need for simpler user onboarding are also noted for Cribl.
Ease of Deployment and Customer Service: BMC TrueSight's on-premise focus complicates deployment and it has mixed feedback on customer service responsiveness. Cribl offers flexible hybrid and cloud deployment options, and receives praise for proactive support, though documentation improvements could enhance user experience.
Pricing and ROI: BMC TrueSight is often viewed as expensive, especially for large implementations, but it offers significant ROI by lowering IT operational costs. Cribl, generally more affordable, faces concerns over rising data ingress costs but delivers strong value by optimizing storage and reducing data expenses.
What we've seen is really an overall reduction of just shy of 40% in our ingest into our SIM platform versus prior to having Cribl.
The second thing is that data aggregation, sampling, and reduction that we're able to do of the data, lowering our overall data volume, both traversing the network as well as what's being stored inside of our final solutions.
In terms of reduction, we were able to save almost ~40% of our total cost.
I would rate their technical support a nine out of ten.
They had extensive expertise with the product and were able to facilitate everything we needed.
Usually, within an hour, we get a response, and we are able to work with them back and forth until we resolve the issues.
Sometimes by hearing the problem itself, they will know what the solution is, and they will let us know how to resolve it, and we do it immediately.
The infrastructure behind Cribl Search is also scalable as it uses a CPU and just spawns horizontally more instances as it demands and requires.
Compared to other SIEM tools I use, any slight change on the operating system end impacts a lot on our SIEM tools and other things, but Cribl performs well in that regard.
Cribl performs effectively across both market segments.
Migrating from those SC4S servers to Cribl worker nodes has truly been a game-changer.
Regarding scalability, we started with zero servers and have around 285 servers now.
Cribl is designed to deal with certain kinds of loads and is not designed to handle any scenario in the market.
There are some complexities with deployment that could be improved in BMC TrueSight.
A more stringent role-based access control feature would enhance security and allow granular control over what users can see and access.
When passing query logs or DNS logs, if certain malicious query patterns need to be identified or if fast-flux attacks are happening, Cribl can report that and those would definitely be a plus for them.
I would advise others looking to implement Cribl that if they are evolving Cribl Search, it would be very interesting to see more capability, more flexibility, and more ways to share the data similar to Splunk.
BMC TrueSight licensing costs are on the more expensive side.
Over time, the licensing cost has increased.
It was cheaper than the Splunk license.
Splunk is more expensive, and Cribl appears to be more affordable.
Automated root cause analysis and predictive capabilities are powerful features that assist in resource utilization and capacity planning.
The data reduction and preprocessing capabilities make Cribl really unique.
Cribl has a feature called JSON Unroll or Unroll function that allows you to differentiate the events; each event will come ingested as a single log instead of piling it up with multiple events.
The Cribl UI is very simple and easy to use, particularly when working with data from various sources; it makes it very easy to create pipelines, add complex logic to those pipelines, and then gives you a preview of what your data looks like before applying that pipeline and what you get after.
| Product | Mindshare (%) |
|---|---|
| Cribl | 1.1% |
| BMC TrueSight | 1.7% |
| Other | 97.2% |
| Company Size | Count |
|---|---|
| Small Business | 25 |
| Midsize Enterprise | 6 |
| Large Enterprise | 24 |
| Company Size | Count |
|---|---|
| Small Business | 52 |
| Midsize Enterprise | 8 |
| Large Enterprise | 36 |
BMC TrueSight provides comprehensive IT infrastructure monitoring with capabilities like integration, dashboard presentation, and proactive event management. It offers quick implementation and rich reporting, enhancing operational efficiency and service management across different technology environments.
BMC TrueSight offers a single-pane view, data visualization, predictive analysis, and Knowledge Modules for monitoring infrastructure, applications, and servers. It integrates with systems to manage networks, cloud services, databases, and operating systems, reducing troubleshooting and enabling automated maintenance. TrueSight's proactive monitoring and performance management across Microsoft and Linux platforms make it invaluable for asset tracking and service context monitoring.
What are the key features of BMC TrueSight?In the finance sector, BMC TrueSight is used for monitoring complex network infrastructures to ensure high availability. Healthcare organizations rely on it for maintaining critical system uptime, assisting in regulatory compliance. Retail companies utilize it to oversee diverse platforms, ensuring seamless operation across supply chain and customer service networks.
Cribl offers a data management approach with its intuitive interface, real-time filtering, and integration capabilities, effectively managing log volumes and ensuring cost-efficient data processing.
Cribl stands out for its capability to manage high volumes of logs and metrics with ease. Its users benefit from real-time data filtering and routing, which enhances data quality and processing efficiency. Cribl integrates with many vendors, enabling seamless data handling and cost reduction by, for example, routing relevant data to platforms like Splunk or Datadog and reducing unnecessary log data to save on SIEM costs. Despite being recognized for its capabilities, concerns about its pricing and the need for improvements in performance during high data volumes, Git integration, and learning resources have been noted.
What are the key features of Cribl?In specific industries, Cribl is implemented for optimizing data ingestion and managing intricate log flows. Companies leverage its capabilities for cost-effective data routing to SIEM systems, ensuring critical information reaches destinations like Splunk or Datadog. Through significant data volume reduction, organizations maintain high operational efficiency.
We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
