Cribl Reviews

Name: Cribl
Brand: Cribl
Rating: 4 (9 reviews)

Vendor: Cribl

4.1 out of 5

9 reviews
90% willing to recommend

What is Cribl?

Cribl optimizes log collection, data processing, and migration to Splunk Cloud, ensuring efficient data ingestion and management for improved operational efficiency.

Get the Cribl Buyer's Guide and find out what your peers are saying about Cribl, Wazuh, Splunk Enterprise Security and more!

Cribl is the #4 ranked solution in top Data Preparation Tools, #15 ranked solution in top Cloud Data Integration solutions, #19 ranked solution in Log Management Software, #24 ranked solution in APM tools, and #26 ranked solution in top Data Integration Tools. PeerSpot users give Cribl an average rating of 8.2 out of 10. Based on the analysis of the 9 most recent Cribl reviews, the overall sentiment is positive, with a sentiment score of 8.0. (Among the highest in the category). Cribl is most commonly compared to Wazuh: Cribl vs Wazuh. Cribl is popular among the large enterprise segment, accounting for 66% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 19% of all views.

Helped 813,418 peers since 2012

Featured reviews

Hariram G

Lead Engineer at a tech vendor with 1-10 employees

Cribl has simplified many aspects of the onboarding process, but there's still room for improvement. Currently, no other tools in the market truly compete with Cribl in its niche. Splunk is trying to retain customers by developing ingest actions to reduce licensing costs, hoping to prevent them from switching to Cribl. There is no alerting mechanism for the leader/worker nodes status. Since Cribl plays a major role in the mid-layer between the source and destination, there's a slight risk of losing data at some points while receiving real time data. It would be helpful if Cribl could temporarily store or index the data for a specific time range. This would prevent data loss during downtime. Additionally, there's room for improvement in how Cribl handles historical data. Currently, I can't view trends beyond a week, and even then, it’s often limited to just 24 hours. Since Cribl doesn’t index the data but only forwards it, extending the period for viewing statistics and monitoring trends would be a valuable enhancement.

Read full review

Phanindra Ponnada

Splunk SME at Sbase Technologies India PVT Lmtd

As of now, there are some environments where some organizations are still on legacy infrastructure, so they are still in virtual environments and are using old versions of devices. Some companies bought Splunk, while others bought Cribl for a very low-priced license. There are some protocols to connect from Cribl to Splunk. I understand Cribl has come into the market very recently, but the tool might have had a picture in its mind where organizations might also have some legacy infrastructure. In the future, with our protocols or our level of architecture, Cribl should not come and say that it is not compatible with them. If Cribl is the reason because I have to change my environment, then I will have to end up investing more. There are some organizations where the end machines have forwarders that forward the data to Cribl, and from it, the data is forwarded to Splunk. This is how general architecture works. There are two methods of connection between Cribl and Splunk. One is the S2S protocol, which collects logs from Cribl or sends data between Cribl and Splunk. There is another method called HTTP Event Collector (HEC) and HTTPS protocol. With Cribl, connecting to Splunk mostly uses the S2S protocol. The tool supports all the latest devices and platform devices, like all the latest operating systems. There are some organizations where there is legacy infrastructure or if they are still on the old platforms. Companies using old platforms have to consider HTTP Event Collector (HEC), and then they have to change their infrastructure setup in order to fulfill that setup. In order to have Google and Splunk set up in my organization, if I have to change my existing infrastructure connectivity or setup, that might incur more cost or more investment for me to have Cribl and Splunk. Cribl should provide compatibility, or else the tool's developers should speak to the people of such organizations and understand the challenges. Cribl could have developed some version that can give backward compatibility.

Read full review

Feroz Khan Peer Mohamed

Splunk / Cribl Consultant at HynoonTech LLC

We use Cribl Stream as a pipeline mid-tier solution. One use case involves curating logs for various reasons, such as reducing log size, redaction, and ensuring proper data ingestion across multiple end systems. The platform's most valuable feature is the ability to transform data in real-time…

Read full review

Valuable Features

Cribl stands out for its real-time data transformation, log reduction, and routing capabilities. Users appreciate the streamlined log collection from diverse sources and the ability to test data without a separate environment. Its powerful functions include data reduction, masking, and intelligence addition. Cribl LogStream and Cribl Edge enhance data security and routing, while efficient upgrade management and flexible event handling are significant benefits. Easy API setup and multiple destination routing offer added convenience.

"The capability to reduce logs in a user-friendly manner is a standout feature. Cribl allows us to view logs live as they are being processed, giving us quick feedback on the changes made."
"Features such as Cribl Stream, Cribl LogStream, and Cribl Edge have been the most beneficial. The Cribl LogStream, in particular, is valuable for routing data, creating firewalls on pipelines, and putting security measures in place to ensure data reaches its destination without issues."
"When it comes to the product's installation phase, it is not tough for people who have good knowledge...The tool is worth the investment."

Room for Improvement

Cribl needs compatibility with legacy infrastructures to prevent costly updates. It requires more custom packs for better integration and enhanced logging for easier error identification. The user interface lacks flexibility for customization, and documentation presents inconsistencies. Cribl's versioning system can be cumbersome, and onboarding remains challenging for newer developers. Temporarily storing data could prevent loss during downtimes. Lastly, smaller firms would benefit from more features to facilitate data migration.

"There is room for improvement in the documentation and knowledge base, particularly regarding configurations like sources where logs are being ingested"
"Cribl should consider adding more features that are applicable to smaller firms, allowing broader access to their data migration through Cribl."
"Cribl could have developed some version that can give backward compatibility."

ROI

Users have highlighted significant improvements in data handling efficiency and cost savings. Many have noted faster data processing and reduced storage expenses. Users mention increased flexibility and control over data streams. Several users expressed satisfaction with Cribl's ability to integrate seamlessly into existing infrastructures, which led to time savings and reduced operational costs. This combination of benefits resulted in a positive return on investment for many users.

Pricing

Organizations find Cribl's pricing more cost-effective compared to solutions like Splunk, offering value in scalability and efficiency. While not the cheapest option, its pricing is considered budget-friendly and reasonable, especially for mid-level companies. Users appreciate the potential savings on other licenses. Cribl offers competitive pricing with reductions of up to thirty percent, benefiting large enterprises with substantial data needs. Many find it to be a helpful and valuable tool in the data analytics market.

"I would not say it is a cheaply priced tool as it has been doing wonders in the market. The tool has been budget-friendly for organizations."
"The product pricing is reasonable compared to other solutions."

Popular Use Cases

Organizations primarily use Cribl to optimize data handling and reduce Splunk licensing costs. They leverage Cribl as a pipeline for collecting logs from different sources, migrating logs to cloud environments, and streamlining data processing, including data normalization and enrichment. Cribl helps by allowing selective data forwarding, replaying specific event data, and implementing efficient log management. It facilitates connections between diverse sources, enhancing cost efficiency and ensuring seamless integration with existing tools like Splunk Cloud and other SIEMs.

Service and Support

Cribl's customer service and support are generally praised for being responsive and effective. Several cases highlight prompt resolution and good assistance, though improvement in understanding customer needs is noted. Some experiences are mixed, with variations in effectiveness, while other users consistently receive high-quality support. Support is described as helpful, particularly during the setup phase. Assistance often involves a Customer Success Manager, ensuring issues are addressed swiftly based on priority level.

Deployment

Cribl's initial setup is generally straightforward, resembling Splunk. Installation takes about 30 minutes, though creating routes and pipelines requires additional time. Setup complexity depends on integration; standard formats are easier than customized ones. Cloud version upgrades are simple, often one-click. Cribl offers free training and comprehensive learning resources. Challenges arise in enterprise setups with documentation issues. Users employ hybrid strategies, balancing between cloud and on-premises depending on network constraints, ensuring efficient deployments with data processing.

Scalability

Cribl is regarded as quite scalable, providing flexibility by distributing workloads efficiently. Its architecture allows effortless deployment, even utilizing CI/CD for quick setup. Users appreciate Cribl's adaptability for different needs, making it suitable for both small and large enterprises. They have observed Cribl's ability to extend performance and upgrade seamlessly. Several users highlight its ease in managing cloud worker groups, accommodating growth with minimal effort. Cribl has proven sufficient for various scalability requirements.

Stability

Cribl is regarded as a generally stable system, often rated between six and eight out of ten. While some experience issues, particularly with advanced configurations or minor parsing bugs, these tend to be addressed in subsequent versions. Many benefit from built-in mechanisms that handle persistent queuing, mitigating crashes or downtime. Stability is enhanced for those with KPI knowledge, enabling them to effectively manage challenges without significant difficulties. Users appreciate the ongoing development that indicates continuous improvement.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Cribl Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

19%

Computer Software Company

12%

Healthcare Company

Government

Manufacturing Company

Energy/Utilities Company

Insurance Company

Comms Service Provider

Legal Firm

Non Profit

University

Educational Organization

Retailer

Wholesaler/Distributor

Media Company

Outsourcing Company

Photography Company

Construction Company

Hospitality Company

Recreational Facilities/Services Company

Performing Arts

Consumer Goods Company

Aerospace/Defense Firm

Marketing Services Firm

Compare Cribl with alternative products

Learn more about Cribl

Cribl offers seamless log collection directly from cloud sources, allowing users to visually extract necessary data and replay specific events for in-depth analysis. It provides robust management of events, parsing, and enrichment of data, along with effective log size reduction. Cribl is particularly beneficial for migrating enterprise logs, optimizing usage, and reducing costs while streamlining the transition between different log management tools.

What are Cribl's most important features?

Real-Time Data Transformation: Enables immediate data processing for accurate insights.
Simplified Log Collection: Gathers data from diverse sources effortlessly.
Powerful Data Reduction: Reduces log size without losing critical information.
Inbuilt Packs: Ready-to-use functions simplify complex tasks.
Live Testing: Allows testing before production deployment for reliability.
Master Node Updates: Manages worker groups efficiently for consistent performance.
Advanced Data Processing: Offers robust data serialization and coding perspectives.
Easy Plugin Configurations: Facilitates direct integration with reduced setup time.

What benefits and ROI should users look for?

Optimized Usage: Ensures effective resource management and cost reduction.
Streamlined Migration: Simplifies the transition between log management tools.
Enhanced Data Management: Improves data quality and processing efficiency.
Reduced Time and Effort: Direct-to-production capabilities save operational time.

Cribl is widely implemented in industries requiring extensive data management, such as technology and finance. Users leverage Cribl to handle log collection, processing, and migration efficiently, ensuring smooth operation and effective data analysis. It aids in managing temporary data storage during downtimes and better handling historical data, preventing data loss and allowing extended periods for viewing statistics and monitoring trends.