Sándor Guba
CTO, Founder at Axoflow, Co-Founder at Banzai Cloud
Budapest, Hungary
Actions
Sándor Guba is CTO and co-founder of Axoflow, where he leads the technical direction for security data infrastructure. He is the creator of the Logging Operator - now a CNCF Sandbox project - which became the standard for Kubernetes-native log management in enterprise environments. Previously, he was co-founder at Banzai Cloud, responsible for observability and cloud-native engineering; the company was acquired by Cisco in 2021.
With over a decade at the intersection of cloud-native infrastructure and security telemetry, Sándor focuses on a problem most organizations underestimate: turning fragmented, high-volume log data into reliable, detection-ready security signals. He is a frequent contributor to open-source observability tooling and a builder of systems that run at Fortune 500 scale.
Area of Expertise
Topics
Efficient Observability With Telemetry Pipelines
Metrics, logs, and traces are the bread and butter for operations and developers. The problem is that observability data continues to grow yearly. Transporting, storing, and extracting value from it can be expensive. This is the reason behind the latest trend “Telemetry Pipelines” (also called “Observability Pipelines”). They help to collect, enrich, filter, and transport observability data. The more you prepare your data the better results you will get in your SIEM or observability systems. Sandor will demonstrate the strength of such a system throught the Kubernetes Logging Operator /CNCF Sandbox project/.
Multi-tenant Logging with Opentelemetry Collector
Kubernetes does not provide a rich multi-tenant experience out-of-the-box outside of Namespaces. Third-party tools try to bridge the gap generically, but there is no targeted solution to deal with telemetry data (logs, metrics, and traces). Sandor - the founder of Logging Operator that helps deal with logging on Kubernetes - gathered the team once again to re-evaluate the solution. The three main objectives were: to introduce tenants as first-class citizens, use OpenTelemetry Collector, and make it as simple as possible. The result is a new open-source project called Telemetry Controller. In this talk, Sandor will guide you through challenges like noisy neighbors, invalid configurations, parsing errors of multi-tenant logging, and how to solve them.
Turn the Volume down on Noisy Neighbors!
Using Kubernetes as a multi-tenant platform is becoming a general concept. However, the fact that different logs are mixed on the same nodes makes it difficult. Learn how the Telemetry Controller (an abstract layer on top of the OTel Collector) helps you tackle the first problem. Routing from the edges provides isolation for the tenants and simplifies filtering and routing on a tenant level. Sandor will present different scenarios to do intelligent routing and how to build a smart aggregator on top of the Telemetry Controller.
Kubernetes Observability the Cloud Native Way
Observability is key when running reliable production systems and it's no difference when applications are deployed on top of Kubernetes. The Cloud Native ecosystem provides numerous tools to help "observe" the system on Kubernetes. Some of these are Prometheus, Grafana, Thanos, Fluentd, Loki, and Jaeger. Making them properly work together and scale on K8s it's a difficult task alone. Moreover, when a problem occurs you need to quickly access logs, metrics, and traces and use all the tools above. This talk focuses on deep-diving into the K8s observability tools in complex multi-cluster environments to make you confident at the wheel.
Logging on Kubernetes the Easy Way
Running Kubernetes in production has moved from theory to practice in many organizations. Day 2 operations, however, are still challenging and mostly involve custom approaches. Finding an off-the-shelf solution is complicated by the fact that most logging products do not support Kubernetes-native concepts. This is why we felt the need to create the open source Logging Operator project. It is 2 years old and is deployed in a number of production environments both by us and the community. Some of the key features are name space isolation, pod label selector support, and using secrets for credentials. Sandor will introduce the challenges of configuring a complex logging stack on Kubernetes and will dive into the lessons learned during the creation and deployment of the operator.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top