Cribl
Cribl is a suite of products designed to manage and optimize telemetry data (logs, metrics, traces) for IT operations and security teams.
Our verdict
Who it's for
The Data Engine for IT and Security, offering choice, control, and flexibility for telemetry data.
Who should look elsewhere
Requires integration and configuration with existing data pipelines.
Pros
- +Significantly reduces data volume and associated storage/processing costs.
- +Provides granular control and flexibility over telemetry data streams.
- +Vendor-agnostic, preventing lock-in and integrating with existing tools.
- +Improves efficiency and relevance of data sent to SIEMs and observability tools.
- +Scalable to handle petabytes of daily volume and diverse data schemas.
Cons
- −Requires integration and configuration with existing data pipelines.
- −Learning curve for new users to fully leverage advanced transformation capabilities.
- −Potential complexity in managing multiple data flows and transformations.
Key features
- ✓Universal data ingestion and routing
- ✓Data reduction and transformation
- ✓Data replay capabilities
- ✓Centralized data shaping and control
- ✓Support for open formats and any data source/destination
- ✓Real-time data processing (millions of events per second)
- ✓Telemetry search across various data lakes and formats (Cribl Search)
- ✓Edge processing for streamlined telemetry (Cribl Edge)
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Free | — | month | Up to 1TB/day; Universal Sources; Unlimited Pipelines |
| Standard | — | month | Everything in Free; Up to 5TB/day*; Git backup |
| Enterprise | — | month | Everything in Standard; Unlimited TB/day*; Multiple Workspaces |