Cribl Reviews & Product Details

Cribl makes it much easier to manage and transform log data before sending it to different destinations. I like the flexibility of the pipelines and functions, especially being able to parse, filter, modify, and route events without having to make changes at the original data source. The interface also makes troubleshooting and testing changes fairly straightforward. Review collected by and hosted on G2.com.

There can be a learning curve when working with more complex pipelines, expressions, and functions. Troubleshooting can also take some time when an event is not being processed the way you expect, especially when multiple functions are involved. Some of the documentation could include more practical, real-world examples for more advanced configurations. Review collected by and hosted on G2.com.

What I like about Cribl

* Data routing and control: I like that Cribl can collect, transform, filter, enrich, and route telemetry to different destinations such as Splunk, S3, Elastic, etc.

* Cost optimization: Being able to filter unnecessary or duplicate logs before sending them to an expensive platform can reduce ingestion and storage costs.

* Flexibility: You aren’t locked into a single observability backend. The same data can be routed to different tools depending on the use case. Review collected by and hosted on G2.com.

Learning curve: Once pipelines become complex, understanding routes, pipelines, functions, destinations, and data flow can take time. This is also mentioned in user reviews.

* Troubleshooting complex flows: When data passes through multiple transformations and destinations, troubleshooting where data was dropped, modified, or delayed can become challenging.

* Operational complexity at scale: Large deployments require careful sizing, architecture, monitoring, and configuration management. Cribl’s documentation itself has dedicated guidance for sizing, scaling, and architectural considerations. Review collected by and hosted on G2.com.

Cribl gives me full control over my data before it reaches its destination. Routing, filtering and reducing noisy logs is straightforward, and it helped us cut ingest volume and licensing costs. The prebuilt packs save a lot of setup time. Review collected by and hosted on G2.com.

There is a real learning curve at the start — understanding routes, pipelines and packs takes time, and some documentation is dense. Troubleshooting complex pipelines can also be slow, and pricing is harder to justify for small deployments. Review collected by and hosted on G2.com.

Customer service has been helpful, and my discussions with the customer success team have gone smoothly, especially when it comes to implementing new features. Overall, I find the tool intuitive and flexible, it scales well, and it’s highly reliable. Review collected by and hosted on G2.com.

I just wish Cribl had been around sooner. That said, I do think some of the naming and how things connect could be clearer, and the interface could feel a bit less cluttered. The way packs and pipelines can also contain pipelines and routes gets confusing at times, because it’s not always obvious what relates to what. I’d also like the option to manage configurations from code rather than having to do everything through the console. Review collected by and hosted on G2.com.

I like Cribl’s great, sleek UI for managing configuration across our deployment. I can use it as a central collection layer to change log formats, normalize logs, reduce unnecessary logs and size when applicable, and send logs to multiple destinations. I also like the constant updates that add useful features, the mature product and support, and that we could collect cloud-based log sources quite easily after the learning curve. Review collected by and hosted on G2.com.

I found the initial setup had a learning curve. Sometimes I run into constraints in the REST API log source UI setup when connecting to APIs the way the log source vendor wants. I would also like an AI chatbot that is aware of my deployment and can answer setup questions. Review collected by and hosted on G2.com.

Cribl Stream and Cribl Edge play an important role in collecting, forwarding, processing, and parsing logs, helping ensure that log data is properly structured and delivered to the appropriate destinations for monitoring, troubleshooting, and analysis. Review collected by and hosted on G2.com.

Sometimes during upgrades, it can be difficult to monitor changes because logs may be missing from Cribl Edge. When that happens, it can be challenging to determine exactly what changed or where the issue is coming from. Having more visibility into the logs during the upgrade process would make troubleshooting much easier and help us identify issues more quickly. Review collected by and hosted on G2.com.

Being able to have full control over what the data looks like and where it goes. We've been able to reduce ingest across a variety of log sources whole still retaining full visibility inside of our SOC. Review collected by and hosted on G2.com.

Not much. I will say that there's definitely a bit of a learning curve with getting it to work in our Splunk environment. It's been quite the journey to understand both tools as we begin our migration but the pay off is pretty high. Review collected by and hosted on G2.com.

We love how Cribl puts the power in our hands to streamline our log monitoring, by reducing total log ingest volume with powerful rules based pipelines which help normalize and enrich logs. Review collected by and hosted on G2.com.

We have wished for better Git integration to better manage our change version control. The cost can become expensive and the pricing model has been somewhat complex to fully understand. Review collected by and hosted on G2.com.

I like that I can ingest different data sources into different pipelines to either drop or manipulate data, then send it to different destinations of our choosing. I can drop several events we no longer need or don’t find beneficial for security use cases. Setting up Cribl has been pretty easy. Cribl University is very helpful, and the Slack community is very easy to integrate with. I’d be very likely to recommend Cribl—an 8.5 for sure. Review collected by and hosted on G2.com.

I think Cribl Guard could be a little bit more accurate. We have it turned on, but detections sometimes have too many false positives. I also think the way it whitelists PII could be improved. Review collected by and hosted on G2.com.

I love how we can define what logs go where as well as trim down what we are sending to different places based on what is needed. I am just going through the process of taking over Cribl at our company and I have a lot to learn Review collected by and hosted on G2.com.

So far nothing. I have only used Cribl a little since it's on another team. I see a lot of areas for growth at our company and am looking forward to leading it. Review collected by and hosted on G2.com.