Take 60 seconds and watch this:
youtube.com/shorts/93spR...
youtube.com/shorts/93spR...
You've got data being ingested...
YouTube video by Julian Giuca
youtube.com
May 14, 2025 at 6:21 PM
Take 60 seconds and watch this:
youtube.com/shorts/93spR...
youtube.com/shorts/93spR...
Too many security teams blame the rule.
They tweak logic, write exceptions, tune thresholds, and still drown in false positives.
But the problem isn’t the rule. It’s the data feeding it.
Bad data in=bad alerts out.
Filter, shape, and enrich telemetry BEFORE it hits your SIEM.
👉 www.datable.io 👈
They tweak logic, write exceptions, tune thresholds, and still drown in false positives.
But the problem isn’t the rule. It’s the data feeding it.
Bad data in=bad alerts out.
Filter, shape, and enrich telemetry BEFORE it hits your SIEM.
👉 www.datable.io 👈
April 3, 2025 at 5:47 PM
Too many security teams blame the rule.
They tweak logic, write exceptions, tune thresholds, and still drown in false positives.
But the problem isn’t the rule. It’s the data feeding it.
Bad data in=bad alerts out.
Filter, shape, and enrich telemetry BEFORE it hits your SIEM.
👉 www.datable.io 👈
They tweak logic, write exceptions, tune thresholds, and still drown in false positives.
But the problem isn’t the rule. It’s the data feeding it.
Bad data in=bad alerts out.
Filter, shape, and enrich telemetry BEFORE it hits your SIEM.
👉 www.datable.io 👈
Detection engineers may have the hardest job in tech.
Their role is absolutely critical, they're ignored until something is wrong (rarely praised), and they're consistently pulled away from their core competency to solve other problems.
Am I wrong?
Their role is absolutely critical, they're ignored until something is wrong (rarely praised), and they're consistently pulled away from their core competency to solve other problems.
Am I wrong?
March 25, 2025 at 9:34 PM
Detection engineers may have the hardest job in tech.
Their role is absolutely critical, they're ignored until something is wrong (rarely praised), and they're consistently pulled away from their core competency to solve other problems.
Am I wrong?
Their role is absolutely critical, they're ignored until something is wrong (rarely praised), and they're consistently pulled away from their core competency to solve other problems.
Am I wrong?
My 2 cents.
Do you agree?
Do you agree?
March 24, 2025 at 10:01 PM
My 2 cents.
Do you agree?
Do you agree?
The plan was simple:
Build Cribl for Datadog.
Big Problem. Clear Pain. Let's go.
—But no one adopted it.
Now I'm looking to SecOps folks for their opinion.
www.linkedin.com/pulse/one-ca...
Build Cribl for Datadog.
Big Problem. Clear Pain. Let's go.
—But no one adopted it.
Now I'm looking to SecOps folks for their opinion.
www.linkedin.com/pulse/one-ca...
March 21, 2025 at 6:02 PM
The plan was simple:
Build Cribl for Datadog.
Big Problem. Clear Pain. Let's go.
—But no one adopted it.
Now I'm looking to SecOps folks for their opinion.
www.linkedin.com/pulse/one-ca...
Build Cribl for Datadog.
Big Problem. Clear Pain. Let's go.
—But no one adopted it.
Now I'm looking to SecOps folks for their opinion.
www.linkedin.com/pulse/one-ca...
Working on a post for Hacker News (the y combinator board).
Wish me luck.
Wish me luck.
March 19, 2025 at 4:43 PM
Working on a post for Hacker News (the y combinator board).
Wish me luck.
Wish me luck.
Noisy, redundant security data?
Shape it, enrich it, and route it exactly where it’s needed IN THE PIPELINE—before it drains your SIEM.
Try Datable and make your logs work smarter, not pricier.
Shape it, enrich it, and route it exactly where it’s needed IN THE PIPELINE—before it drains your SIEM.
Try Datable and make your logs work smarter, not pricier.
March 11, 2025 at 8:47 PM
Noisy, redundant security data?
Shape it, enrich it, and route it exactly where it’s needed IN THE PIPELINE—before it drains your SIEM.
Try Datable and make your logs work smarter, not pricier.
Shape it, enrich it, and route it exactly where it’s needed IN THE PIPELINE—before it drains your SIEM.
Try Datable and make your logs work smarter, not pricier.
Should CISOs report to the CEO?
Usually it's CISO>CIO/CTO>CEO.
But I'm seeing CISOs role bloom into a copilot role more often. (At least in SF.)
Usually it's CISO>CIO/CTO>CEO.
But I'm seeing CISOs role bloom into a copilot role more often. (At least in SF.)
March 7, 2025 at 8:45 PM
Should CISOs report to the CEO?
Usually it's CISO>CIO/CTO>CEO.
But I'm seeing CISOs role bloom into a copilot role more often. (At least in SF.)
Usually it's CISO>CIO/CTO>CEO.
But I'm seeing CISOs role bloom into a copilot role more often. (At least in SF.)
This Tech Company Sent The Largest Bill In History
YouTube video by Julian Giuca
youtu.be
March 5, 2025 at 10:50 PM
Writing a whole article on this tonight.
Shape data in the pipeline, before it gets astronomically slow and expensive to query.
Shape data in the pipeline, before it gets astronomically slow and expensive to query.
February 27, 2025 at 9:20 PM
Writing a whole article on this tonight.
Shape data in the pipeline, before it gets astronomically slow and expensive to query.
Shape data in the pipeline, before it gets astronomically slow and expensive to query.
How did data monitoring get so expensive?
Why are observability bills through the roof?
Watch here:
youtu.be/C1ubXpNo7AU
Why are observability bills through the roof?
Watch here:
youtu.be/C1ubXpNo7AU
Why Data Monitoring Got So Expensive (And How to Fix It)
YouTube video by Julian Giuca
youtu.be
February 19, 2025 at 6:18 PM
How did data monitoring get so expensive?
Why are observability bills through the roof?
Watch here:
youtu.be/C1ubXpNo7AU
Why are observability bills through the roof?
Watch here:
youtu.be/C1ubXpNo7AU
Secret sauce in this guide:
✅ Hidden Observability Costs
✅ Vendor Negotiation
✅ Data Optimization Strategies
Download it here: datable.io
✅ Hidden Observability Costs
✅ Vendor Negotiation
✅ Data Optimization Strategies
Download it here: datable.io
February 13, 2025 at 10:09 PM
Secret sauce in this guide:
✅ Hidden Observability Costs
✅ Vendor Negotiation
✅ Data Optimization Strategies
Download it here: datable.io
✅ Hidden Observability Costs
✅ Vendor Negotiation
✅ Data Optimization Strategies
Download it here: datable.io
SREs need secure pipelines. Pipelines others can't touch.
But PMs and BI teams need access to the right data, too.
With Datable, everyone gets a pipeline they control—secure, flexible, and theirs alone.
But PMs and BI teams need access to the right data, too.
With Datable, everyone gets a pipeline they control—secure, flexible, and theirs alone.
February 12, 2025 at 9:55 PM
SREs need secure pipelines. Pipelines others can't touch.
But PMs and BI teams need access to the right data, too.
With Datable, everyone gets a pipeline they control—secure, flexible, and theirs alone.
But PMs and BI teams need access to the right data, too.
With Datable, everyone gets a pipeline they control—secure, flexible, and theirs alone.
REMINDER:
I have a full video explaining how to reduce #observability costs.
Free gold for any engineer who wants to have a massive impact on their company's bottom line.
www.youtube.com/watch?v=ZyN-...
I have a full video explaining how to reduce #observability costs.
Free gold for any engineer who wants to have a massive impact on their company's bottom line.
www.youtube.com/watch?v=ZyN-...
Smart Observability Explained
YouTube video by Julian Giuca
www.youtube.com
February 11, 2025 at 11:53 PM
REMINDER:
I have a full video explaining how to reduce #observability costs.
Free gold for any engineer who wants to have a massive impact on their company's bottom line.
www.youtube.com/watch?v=ZyN-...
I have a full video explaining how to reduce #observability costs.
Free gold for any engineer who wants to have a massive impact on their company's bottom line.
www.youtube.com/watch?v=ZyN-...
Here's how it works:
February 5, 2025 at 11:15 PM
Here's how it works:
We treat everything as an event at my company.
Log data, trace data, metrics—everything.
And we normalize those events into the OpenTelemetry standard, creating a single, unified playing field for all of our data.
Here's why:
Log data, trace data, metrics—everything.
And we normalize those events into the OpenTelemetry standard, creating a single, unified playing field for all of our data.
Here's why:
February 3, 2025 at 5:39 PM
We treat everything as an event at my company.
Log data, trace data, metrics—everything.
And we normalize those events into the OpenTelemetry standard, creating a single, unified playing field for all of our data.
Here's why:
Log data, trace data, metrics—everything.
And we normalize those events into the OpenTelemetry standard, creating a single, unified playing field for all of our data.
Here's why:
OTel isn’t enough anymore. (THREAD)
Nobody tells you what happens when you use these tools in the real world.
Files get EXTREMELY difficult to manage.
They're great at collecting and sending data, but the more responsibility you put into them, the more complex and slower they become...
Nobody tells you what happens when you use these tools in the real world.
Files get EXTREMELY difficult to manage.
They're great at collecting and sending data, but the more responsibility you put into them, the more complex and slower they become...
January 31, 2025 at 8:07 PM
OTel isn’t enough anymore. (THREAD)
Nobody tells you what happens when you use these tools in the real world.
Files get EXTREMELY difficult to manage.
They're great at collecting and sending data, but the more responsibility you put into them, the more complex and slower they become...
Nobody tells you what happens when you use these tools in the real world.
Files get EXTREMELY difficult to manage.
They're great at collecting and sending data, but the more responsibility you put into them, the more complex and slower they become...
We normalize events into the OTel standard to create a unified playing field for all our data, regardless of origin.
Datable supports: Syslog, Json, Fluent—AND open source vendor protocols, like NR & DD.
By normalizing all our data, we ensure consistency even as data comes from various sources.
Datable supports: Syslog, Json, Fluent—AND open source vendor protocols, like NR & DD.
By normalizing all our data, we ensure consistency even as data comes from various sources.
January 30, 2025 at 9:19 PM
We normalize events into the OTel standard to create a unified playing field for all our data, regardless of origin.
Datable supports: Syslog, Json, Fluent—AND open source vendor protocols, like NR & DD.
By normalizing all our data, we ensure consistency even as data comes from various sources.
Datable supports: Syslog, Json, Fluent—AND open source vendor protocols, like NR & DD.
By normalizing all our data, we ensure consistency even as data comes from various sources.
Had a video to share today but it's 62 seconds long and there's a hard 60-second limit here.
To see it on YouTube, go here:
youtube.com/shorts/Mz0S2...
To see it on YouTube, go here:
youtube.com/shorts/Mz0S2...
Logs, traces, spans = Events
YouTube video by Julian Giuca
youtube.com
January 29, 2025 at 10:14 PM
Had a video to share today but it's 62 seconds long and there's a hard 60-second limit here.
To see it on YouTube, go here:
youtube.com/shorts/Mz0S2...
To see it on YouTube, go here:
youtube.com/shorts/Mz0S2...