Log Ingestion for CrowdStrike Falcon® LogScale

Overview

Vijilan's approach to harnessing external capabilities for building vendor-specific parsers is a shining example of leveraging open innovation in cybersecurity. By creating a platform that incorporates contributions from externalities, they've expanded their capability and adaptability immensely. Here's a more detailed look at this strategy:

Platform-Centric Approach

Open yet Controlled: Vijilan has set up a system that, while open to external inputs, still retains a degree of control. This ensures that while innovation is embraced, quality isn’t compromised.

Utilizing Software Development Kits (SDKs)

Vijilan’s provision of SDKs is a game-changer. By providing external developers with the necessary tools and libraries, Vijilan facilitates the creation of vendor-specific parsers that are consistent with the platform’s requirements.
This ensures a certain level of standardization, making the subsequent integration process smoother.

Encouraging External Innovation

By allowing externalities (be it independent developers, partner companies, or even user communities) to build and submit parsers, Vijilan taps into a vast reservoir of expertise and experience.
This model crowdsources the challenging task of keeping up with the myriad of vendors in the ever-evolving tech landscape.

Quality Assurance (QA) by Vijilan:

While the platform is open for contributions, quality is not left to chance. Every parser, once submitted, undergoes rigorous QA by Vijilan.
This ensures that while the platform benefits from rapid external development, the end-users receive a product that meets Vijilan’s high standards.

Seamless Integration with Log Ingestion Technologies

After QA, the parsers are integrated into Vijilan’s log ingestion technologies. This ensures that the new capabilities are quickly made available to users.
This rapid deployment, from external development to QA, and finally integration, ensures that Vijilan’s system remains at the cutting edge.

Feedback and Continuous Improvement

The platform benefits from continuous feedback loops. As externalities use the SDKs and build parsers, their feedback can lead to improvements in the SDKs themselves or the overall development process.
This creates a virtuous cycle of improvement, benefiting both Vijilan and the contributors.

Economic and Strategic Benefits:

This approach is not just technically sound but also economically strategic. By offloading some development tasks to externalities, Vijilan can focus its internal resources on core competencies and other high-priority tasks.
Furthermore, the collaborative approach can foster stronger partnerships and community loyalty.