D-2012 Cribl + Microsoft Fabric Blog OG

Better together: Cribl and Microsoft Fabric just got radically simpler

Last edited: November 18, 2025

In September, I wrote about how Cribl and Microsoft Fabric Real-Time Intelligence provide a powerful combination, unlocking new analytics capabilities for security and IT teams.

I also said there was more to come…

Today, Cribl is thrilled to announce a new Cribl Destination for Microsoft Fabric Real-Time Intelligence, marking another big step forward in our collaboration with Microsoft to make it much easier for Cribl customers to use Fabric.

From Manual Mapping to a "Just Works" Experience

While the Azure Event Hubs method works, it requires manual mapping of fields and switching between screens to configure a destination that wasn't purpose-built for Fabric. We knew it could be easier. Our customers love Cribl for its choice and control, but they really love it when we make complex tasks easy.

This new integration streamlines the entire workflow, and it’s a two-part story, thanks to our deep collaboration with the Microsoft team.

1. A New "Cribl" Data Source in the Fabric Portal

That’s right—this isn't just a new feature in Cribl. Microsoft has built a new "Cribl" data source directly into the Real-Time hub in the Fabric portal.

unnamed.png

This makes configuration an absolute breeze and is a huge win for customers. Instead of a multi-step, generic setup, you can now simply select "Cribl" from the list of sources. When you create the source, Fabric will provision everything for you.

unnamed.png

Once provisioning is complete, you’ll see a screen with the information you’ll need to configure Cribl.

unnamed.png

2. The New "Fabric Real-Time Intelligence" Destination in Cribl

Once you have your connection details from the Fabric portal, the rest is smooth sailing with the new "Fabric Real-Time Intelligence" Destination in Cribl Stream.

unnamed.png

Creating the new Destination just takes a few steps as seen in the screenshot below!

  • Select "Fabric Real-Time Intelligence” from our destination list.

  • Copy the bootstrap server, topic, and connection string from the Cribl Source you created in the Fabric portal. The SASL JASS password will go under “Authentication” and will be stored in a secret.

  • Start streaming!

unnamed.png
unnamed.png

Here you can see my weblogs flowing directly into Fabric from my Cribl destination!

unnamed.png

Better Together: The Best of Cribl, The Best of Fabric

With the new Fabric Real-Time Intelligence Destination and Cribl Source in Fabric, you can analyze and detect threats across all your data that you are ingesting into Cribl in just minutes.

We’re not just giving you the building blocks; we're working with Microsoft to build streamlined, end-to-end solutions that make your job easier.

The integration will be generally available later this week, so keep an eye out!

Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl’s suite of products to collect, process, route, and analyze all IT and security data, delivering the flexibility, choice, and control required to adapt to their ever-changing needs.

We offer free training, certifications, and a free tier across our products. Our community Slack features Cribl engineers, partners, and customers who can answer your questions as you get started and continue to build and evolve. We also offer a variety of hands-on Sandboxes for those interested in how companies globally leverage our products for their data challenges.

More from the blog

get started

Choose how to get started

See

Cribl

See demos by use case, by yourself or with one of our team.

Try

Cribl

Get hands-on with a Sandbox or guided Cloud Trial.

Free

Cribl

Process up to 1TB/day, no license required.