Cribl Search Sandbox

Let’s Put on a Show With Cribl’s Search Sandbox!

February 1, 2024
Written by
Perry Correll's Image

Perry Correll, Principal Technical Content Manager at Cribl, is passionate about the powe... Read Morer of observability and how, when done right, it can deliver operational insights into network performance. He has 30+ years of networking experience from early Ethernet to today's observability and held positions from SE to product management with leading organizations. Read Less

Remember when you were a kid and your school put on a production of the latest grade school drama? Maybe you didn’t get the lead role, but it was fun to put on (or watch) the show. Search Sandboxes are just like that! Except you get to be the stage manager when searching data. And Search Sandboxes offer you everything you need to make it an all-star performance.

Like a stage manager, as a security and data enthusiast, you probably get asked many questions, especially when trying to bring up a new tool (or stage a new theatre production ;)). Is the product capable of searching, exploring, and analyzing machine data (logs, traces, metrics)? Is it affordable and easy to use? Can you and your team test it out on your own with live datasets before you commit?

So, how do you answer all those questions with confidence? If you’re in the theater, you can try things out in rehearsal, right? You tweak the lights, the actors test out the script, you learn, and you adjust until everything is Broadway-ready, and then you show it off on opening night. It isn’t always that easy in the data world, but Cribl Search Sandboxes are here to help you own that stage.

First, a little bit about our star actor, Cribl Search:

  • Search data anywhere! Cribl Search is a vendor-agnostic analytics service that lets you search your data where it lives. Whether your data is in a public or private cloud, a self-managed on-premise deployment, or you have data on the edge, you can search it just the way it is. No specialized storage is required.
  • Get those lines right with Kusto. To get those queries just right, Cribl Search offers several pre-built operators and functions to guide you along the way. Search leverages the power of the Kusto query language to get you using simple, powerful data queries in plenty of time for your big debut.
  • Make it shine! A performance is only as good as the magic it creates. When you create a dashboard for your Search dataset, you can bring all your hard work to life. Our dashboards will help you evaluate our performance and show off all that dazzling data magic. It’s like rolling out the red carpet for your team and your sponsors (ahem, you know, your executive team)!

How does a Cribl Search Sandbox help you set the stage for all that Cribl Search talent? Let us take the lead:

Learn, Retain, Reuse!

Our Search Sandbox has a pre-configured dataset lets you learn and retain searches using VPC logs in an S3 bucket. Try out everything from a simple search to a complex aggregation. And because Search Sandboxes are always paired with a Cribl.Cloud organization, you can rehearse your use case repeatedly and refine your performance until it matches your vision.

Share the Stage With Confidence (And Security)

Do you want your team to participate in the show, but you don’t want to give too much away? No problem. We know that having the ability to share only what is needed is always an essential requirement for security and compliance datasets. Your Search Sandbox lets you screen-test our role-based access controls before you go live. Invite your team to Search-Admin role so they can run queries against our pre-configured sample dataset.

Our star actor is in place. Our stage is set. We’re ready. Now, how do we get this show on the road?

First, if you are New to Cribl, you’ll need to take a few minutes to sign up for a Cribl.Cloud account. This creates the Cribl.Cloud organization you’ll use for your Sandbox. (If you already have an organization, you must log in).

To get started without an existing Cribl.Cloud account.

  1. Launch a Cribl Search Sandbox.
  2. Sign up for a Cribl.Cloud organization. Once you verify your email, you’ll be redirected to the Cribl.Cloud login page.
  3. Launch the Sandbox and get learning!

Launching the Sandbox by clicking Try Search Sandbox is the experience you will have as an Existing user.

Your performance is underway! Expand your cast as you go by sharing with your team and giving a live performance at any time. Save your work along the way and pick up where you left off when you’re ready!

Are you ready to step into the spotlight? Share this show with your fellow data enthusiasts!


Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl’s suite of products to collect, process, route, and analyze all IT and security data, delivering the flexibility, choice, and control required to adapt to their ever-changing needs.

We offer free training, certifications, and a free tier across our products. Our community Slack features Cribl engineers, partners, and customers who can answer your questions as you get started and continue to build and evolve. We also offer a variety of hands-on Sandboxes for those interested in how companies globally leverage our products for their data challenges.

Feature Image

The Stream Life Episode 106: CriblCon 2024 Recap

Read More
Feature Image

CriblCon 2024 Recap!

Read More
Feature Image

Updates From the Edge: Scalability for 250,000 Nodes and More

Read More

Try Your Own Cribl Sandbox

Experience a full version of Cribl Stream and Cribl Edge in the cloud with pre-made sources and destinations.


So you're rockin' Internet Explorer!

Classic choice. Sadly, our website is designed for all modern supported browsers like Edge, Chrome, Firefox, and Safari

Got one of those handy?