As we wrap up an incredible year, it’s the perfect time to celebrate Cribl’s progress and innovation in 2024! This year brought many exciting features designed to solve real-world problems and make life easier for our customers. In the spirit of reflection and festivity, I’ll highlight twelve game-changing product features, releases, and enhancements— each a testament to listening, learning, and delivering value to you, our users.

From tackling complex challenges easily to streamlining workflows, these features weren’t just updates; they were solutions that empowered teams, simplified processes, and unlocked new possibilities for Cribl customers. Whether you’re reminiscing about the moments that transformed your day-to-day or discovering something new to explore, this list is for you.

So grab a warm drink, settle in, and join me on this joyful journey through 2024’s standout innovations. 🎉

Day 1: Store, Access, and Replay Telemetry Data to your Heart’s Content

2024 brought the introduction of Cribl Lake! A turnkey data lake that makes it easy to store, access, and retrieve data. No cloud or data expertise is needed. With Cribl Lake, you get:

• Speed: get up and running in minutes. Zero configuration with automated provisioning unwraps a fully usable cloud data lake in minutes, not months.
• Ease: You can easily enter and exit data. Schema-on-need delivers the format you need when you need it. Unified security policies ensure your data stays on the nice list, safe from unauthorized access.
• Choice: store data where it makes sense and in open formats, no vendor lock-in. Your storage or ours, you decide.

Try the Lake Sandbox today and give yourself the gift of stress-free storage 🎁!

Day 2: More Cribl Stream Sources to Sweeten the Deal

New Sources and Destinations, oh my! At Cribl, we aim to please and maximize your existing technology investments, which is our (Holiday) jam. Some additions to Cribl Stream included:

Sources

• Wiz: Ingest security, threat, and vulnerability data with the Wiz source. Enjoy flexible configuration options, like collection state tracking and retry logic. Learn more.
• NetFlow v9 Source brings a new source and type of data! Explore network telemetry and better manage network traffic, network volumes, and get more tools to understand where data is moving. Learn more.
• Amazon Security Lake Source, complete with replay. Learn more.
• Enhanced TCP Source: Load balancing added for Cribl TCP and TCP JSON sources.

Day 3: Cribl Stream Destination Delight

Destinations

We added new destination persistent queuing (PQ) modes to ensure data reliability and delivery across all destinations, including some exciting new ones:

• CrowdStrike Falcon Next-Gen SIEM has a new dedicated Destination. Learn more.
• The new NetFlow Destination can transparently forward unmodified NetFlow v5 and v9 records to a downstream Netflow collector. Learn more.
• Dynatrace Destination for seamless telemetry management for both OLTP and non-OLTP formats (logs only).
• ClickHouse Destination for ultra-fast data processing. Learn more.
• The Exabeam Destination supports sending data to the Exabeam security operations platform or (as some people think of it) SIEM.
• Cribl Stream can also now send events to Elastic Cloud and Azure Data Explorer (ADX)

Day 4: Let your Holiday Spirit Take Flight

Think of Cribl Copilot as your new AI elf, designed to assist you with everything from product usage and administration to mastering regex and KQL search queries. Cribl Copilot started in the cloud, but that was just the start. Now, cloud, on-prem, and hybrid users can take advantage of Copilot services. You can use Copilot for docs; it will be RTFM for you. You can also Create Dashboards with Copilot: Let AI build your dashboards. Copilot can now help you create a new dashboard from scratch or modify an existing one. Click the Copilot icon in the bottom right to try it out. Learn more

Day 5: Baby, it’s Cold Cloudy Outside

Cribl and Azure go together like hot chocolate and marshmallows. In 2024, Cribl customers can now create Cribl-managed Worker Groups based in Azure (in addition to AWS) and assign the new group to your preferred region. Learn more.

Day 6: 🎶Two Hundred Fifty Thousand Edge Nodes Are Heeeree 🎶(sing to the tune of Seasons of Love)

250,000 Cribl Edge Nodes – Our elf-gineers worked hard to bring you unprecedented scale so that Edge Leaders can support up to 250k Edge Nodes! This scalability unlocks the ability for all our customers to standardize on a single agent, regardless of the size or growth of their environment. Learn more.

Day 7: Unwrap New Cribl Search Pack(age)s

Our new Cribl Search Packs provide customizable dashboards providing visualizations of Cribl Search Activity, CriblVision for Stream, and Cribl Sample Data Pack– all examples of the power of Search. Similar in concept to our original Cribl Stream Packs framework, Cribl Search Packs help users find value in their datasets more quickly across everyday use cases and get up and running in minimal time. Learn more and read the blog!

Day 8: Unfogging the Windows with Cribl Edge

Windows Laptop and Desktop Support (Preview): In a world where hybrid work is the norm (especially during the holiday season), simplifying data collection across all endpoints is no longer just a “nice-to-have”—it’s essential. That’s why in 2024 we made sure Cribl customers could deploy Cribl Edge onto Windows 10 and 11 workstations including laptops and desktops.. Learn more in our docs, or read the blog!

Day 9: Deck the Halls with a New Search Sandbox

We added a Cribl Search Sandbox this year! So now, instead of pondering— is Search capable of searching, exploring, and analyzing machine data (logs, traces, metrics)? Is it affordable and easy to use?…. You and your team can test it out on your own with live datasets. Our Search Sandbox has pre-configured datasets that let you learn and retain searches using VPC logs in an S3 bucket. Try out everything from a simple search to a complex aggregation. And because Search Sandboxes are always paired with a Cribl.Cloud organization, you can rehearse your use case repeatedly and refine your performance until it matches your vision. Gain greater visualization, simplified analysis, alerting, and reporting for more-informed decision-making.

Day 10: Make your Workspaces Sparkle this Holiday Season

Workspaces offer a multi-tenancy capability to create multiple isolated instances in your Cribl.Cloud organization while maintaining the benefits of centralized management and administration. Strengthen security and fulfill compliance and isolation requirements. Learn more and read our blog!

Day 11: OTEL It on the Mountain

Additionally, we’ve significantly enhanced our OpenTelemetry capabilities in Cribl Stream. The OTLP Source and Destination now support logs alongside metrics and traces, with improved batching for better performance. We’ve also introduced an OTLP Metrics Function to transform dimensional metrics into OTLP format, expanding interoperability with OpenTelemetry-capable systems. Learn more in our docs, or read the blog!

Day 12: Spreading Holiday Cheer One Credit at a Time

Universal Subscriptions allow you to convert on-prem Edge and Stream licenses into credits for flexibility to play with Cribl’s entire portfolio, no new license required for new products and no surprises with billing. Let’s connect.

As we get ready to close the book on 2024, it’s clear that this year was one to remember! I hope I’ve highlighted the heart of what we aim to achieve: solving real problems for real customers. Each innovation reflects your feedback, your needs, and our commitment to creating tools that empower you to do more.

This festive look back reminds us how far we’ve come and inspires us for what’s next—the opportunities are endless in 2025.

Speaking of 2025– I am adding a bonus sneak peek for next year. I’ll leave you with this image:

Cheers to you, our amazing customers, and a future full of innovation, collaboration, and success! 🎉

Happy New Year, and thank you for being part of our journey!