In September, I wrote about how Cribl and Microsoft Fabric Real-Time Intelligence provide a powerful combination, unlocking new analytics capabilities for security and IT teams.
I also said there was more to come…
Today, Cribl is thrilled to announce a new Cribl Destination for Microsoft Fabric Real-Time Intelligence, marking another big step forward in our collaboration with Microsoft to make it much easier for Cribl customers to use Fabric.
From Manual Mapping to a "Just Works" Experience
While the Azure Event Hubs method works, it requires manual mapping of fields and switching between screens to configure a destination that wasn't purpose-built for Fabric. We knew it could be easier. Our customers love Cribl for its choice and control, but they really love it when we make complex tasks easy.
This new integration streamlines the entire workflow, and it’s a two-part story, thanks to our deep collaboration with the Microsoft team.
1. A New "Cribl" Data Source in the Fabric Portal
That’s right—this isn't just a new feature in Cribl. Microsoft has built a new "Cribl" data source directly into the Real-Time hub in the Fabric portal.

This makes configuration an absolute breeze and is a huge win for customers. Instead of a multi-step, generic setup, you can now simply select "Cribl" from the list of sources. When you create the source, Fabric will provision everything for you.

Once provisioning is complete, you’ll see a screen with the information you’ll need to configure Cribl.

2. The New "Fabric Real-Time Intelligence" Destination in Cribl
Once you have your connection details from the Fabric portal, the rest is smooth sailing with the new "Fabric Real-Time Intelligence" Destination in Cribl Stream.

Creating the new Destination just takes a few steps as seen in the screenshot below!
Select "Fabric Real-Time Intelligence” from our destination list.
Copy the bootstrap server, topic, and connection string from the Cribl Source you created in the Fabric portal. The SASL JASS password will go under “Authentication” and will be stored in a secret.
Start streaming!


Here you can see my weblogs flowing directly into Fabric from my Cribl destination!

Better Together: The Best of Cribl, The Best of Fabric
With the new Fabric Real-Time Intelligence Destination and Cribl Source in Fabric, you can analyze and detect threats across all your data that you are ingesting into Cribl in just minutes.
We’re not just giving you the building blocks; we're working with Microsoft to build streamlined, end-to-end solutions that make your job easier.
The integration will be generally available later this week, so keep an eye out!







