apto solutions limited

Cribl Software

Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Powered by a data processing engine purpose-built for IT and Security, Cribl’s product suite is a vendor-agnostic data management solution.

Features

• Cribl stream, data processing engine
• cribl edge, edge based collection system for data
• cribl edge, edge based collection system for logs and metrics
• cribl search, federated search in place queries on data, anywhere
• data pipelining strategy

Benefits

• remove vendor lock in from data products
• optimised data storage, lower storage costs
• enforce data policies, standards and formats
• increase operational efficiency and streamline monitoring

£0.27 a gigabyte a day

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at simon.eastwood@aptosolutions.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

339364275764779

Contact

Simon Eastwood
+44 (0) 7718319047
simon.eastwood@aptosolutions.co.uk

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Stream = any system that you collect and send data to; Edge = universal agent for all logs, metrics and application data; Search = federated search-in-place across all systems; Lake = reduce operational overhead of your data lake
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: No
• System requirements: Please see details here: https://docs.cribl.io/stream/deploy-planning/

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Response times cn be found here: https://cribl.io/support/
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AAA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Web chat
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.1 AAA
• Web chat accessibility testing: Webchat is accessible through supported internet browsers, with accessibility features.
• Onsite support: Yes, at extra cost
• Support levels: Please see: https://cribl.io/support/
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: "Cribl has multiple tiers of the Stream product: Free (on-prem), Free (Cloud), Standard, Enterprise or Cribl.Cloud.; ; Cribl provide all training free-of-charge, with multiple hands-on sandboxes and exploratory online course available through https://sandbox.cribl.io/"
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Cribl Stream provides a data-pipeline for routing event data from sources to destinations. Data held within Stream is purely for configuration purposes, and can be extracted at contract-end time. Event data can be archived using Stream, this data is saved to a location chosen by the customer and therefore can be extracted and retained by the customer outside of the contract.
• End-of-contract process: SeeSection 6 of our subscription services agreement: https://cribl.io/legal/archived-terms/

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: WCAG 2.1 AAA
• API: Yes
• What users can and can't do using the API: Please see: https://docs.cribl.io/stream/api-tutorials/
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Cribl Stream can reside within the buyers' own infrastructure, within the infrastructure of their chosen Cloud Provider, or hosted within Cribl's own SaaS platform. Stream ingests data from within the buyer's infrastructure. Administrators of the Cribl Stream instance(s) can customise and configure the application to consume target data-sources, filter and transform the events, enrich and enhance via knowledge lookups, and forward to one or more destinations. The pipeline is configurable with inbuilt features and functionality. Configuration can be performed through Stream's user interface, API or through the underlying configuration files. Cribl uses Git to manage and maintain the underlying configurations and customisations for Stream, which can be synchronised and pushed as required.

Scaling

• Independence of resources: Cribl Stream can reside within the buyers' own infrastructure, within the infrastructure of their chosen Cloud Provider, or hosted within Cribl's own SaaS platform. Where the buyer is hosting the solution in their on-prem or cloud infrastructure the resources are within the buyers control. We can assist with Professional Services to analyse user demands on the service and provide recommendations to ensure the platform is configured and resources to support the user demands.

Analytics

• Service usage metrics: Yes
• Metrics types: Please see: https://docs.cribl.io/stream/monitoring/
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Cribl

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Other
• Other data at rest protection approach: The buyer can chose to implement Cribl Stream on their own infrastructure, or in a cloud provider of their choosing (including Cribl's own SaaS platform). Our Professional Services can provide advice and guidance on securing data-at-rest in these scenario. Cribl's own cloud service uses logical data separation, authenticated user accounts, industry standard hardening and accredited to SOC2. Data in transit is encrypted with industry standard SSL and data at rest is encrypted, complying government standards (e.g. HIPAA).
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Cribl Stream is a data observability pipeline solution. Its core functionality is to ingest from data sources and export data to target destinations in the format and protocol accepted by the target destination/service. Users or Administrators of Cribl Stream build pipelines which connect Sources to Destinations, allow the flow of data to traverse the platform and export in the desired format.
• Data export formats: Other
• Other data export formats:
  • Splunk
  • Elastic
  • Confluent cloud
  • Kafka
  • New relic
  • Amazon kinesis, S3, cloudwatch, SQS
  • Azure Blob, Monitor Log, Event Hub,
  • Google Cloud Chronicle, Storage
  • Syslog, SNMP, Filesystem, NFS
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Syslog
  • TCP JSON
  • TCP Raw
  • Splunk TCP/HEC
  • SNMP

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: "Cribl Stream can reside within the buyers' own infrastructure, within the infrastructure of their chosen Cloud Provider, or hosted within Cribl's own SaaS platform. The Buyer would take responsibility to ensure communication between the buyer's data sources and their chosen Stream platform is secure. The buyer would also take responsibility for securing data transmitted to a destination. Cribl's inter-component communications will be secured as per Cribl best practice. Cribl provide several guides to assist buyers with securing their communications.; ; https://docs.cribl.io/stream/securing-and-monitoring; https://docs.cribl.io/stream/securing-communications; https://docs.cribl.io/stream/securing-data"
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: "Cribl Stream can reside within the buyers' own infrastructure, within the infrastructure of their chosen Cloud Provider, or hosted within Cribl's own SaaS platform. Data protection between data-sources and Stream, and Stream to the buyer's destinations is their responsibility. Cribl provide several guides and options for security incoming data, outgoing data, and inter-component communications.; ; https://docs.cribl.io/stream/securing-and-monitoring; https://docs.cribl.io/stream/securing-communications; https://docs.cribl.io/stream/securing-data; ; Networkology's Professional Services team can support the buyer to ensure their data is secured in accordance with their data security standards."

Availability and resilience

• Guaranteed availability: Cribl Stream can reside within the buyers' own infrastructure, within the infrastructure of their chosen Cloud Provider, or hosted within Cribl's own SaaS platform. Availability of the infrastructure within the buyer's control is the responsibility. If the buy choses to use Cribl's own SaaS environment the availabilty is 99.9%. For further details please see section 3.6 of our terms of service: https://cribl.io/legal/archived-terms/
• Approach to resilience: Cribl Stream can reside within the buyers' own infrastructure, within the infrastructure of their chosen Cloud Provider, or hosted within Cribl's own SaaS platform. Resilience of the buyer's own infrastructure (on-prem or Cloud) is the responsibility of the buyer or their cloud provider. If the buyer choses to use Cribl's SaaS platform the resilience is provided within the solution and ensures the platform is able to meet a 99.9% SLA. Information about Crib's SaaS resilience can be obtained on request.
• Outage reporting: Cribl Stream can reside within the buyers' own infrastructure, within the infrastructure of their chosen Cloud Provider, or hosted within Cribl's own SaaS platform. Outage reporting is the responsibility of the buyer or their cloud provider when hosted on their own infrastructure. If the buyer choses to use Cribl's SaaS platform, outages are reported via email.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Cribl Stream resides within the buyer's infrastructure; their chosen cloud service provider; or Cribl's SaaS platform. In all instances the Cribl Stream user authentication system allows the assignment of roles which require custom permissions. The buyer can define roles using a list of capabilities. internal authentication is enabled by default in Cribl Stream.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: QAS International
• ISO/IEC 27001 accreditation date: 14/06/2023
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: ISO27001

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: This is documented as part of our ISO27001 policies and processes.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Changes to services and features follow our documented configuration and change management policy.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: As part of our ISO27001 policies and processes we follow a number policies to prevent, assess, log, manage and eradicate vulnerabilities.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We have processes that continually review our monitoring devices, logs, processes, usage, application metrics, unauthorised connection attempts, attacks and so on.
• Incident management type: Supplier-defined controls
• Incident management approach: We have pre-defined ISO processes for incident management. Users report incidents through our helpdesk, using an incident management form. We provide incident management reports in a standard format as per our policy.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  As a business, Apto is committed to fighting climate change including operating in a modern, energy efficient managed office, encouraging limited travel and remote working where possible, operating a paperless office, operating on efficient cloud services where possible and operating electric vehicles. Our service is aimed at helping customers reduce their cloud workloads and therefore become more energy efficient and conscious

Pricing

• Price: £0.27 a gigabyte a day
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Yes - please see: https://cribl.io/cribl-cloud/try-cribl-cloud/
• Link to free trial: Yes - please see: https://cribl.io/cribl-cloud/try-cribl-cloud/

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at simon.eastwood@aptosolutions.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.