Welcome!
We're so glad your here! No seriously, it makes our marketing team look good. Why are you here? Big questions... Well, let's just stick to what is covered in this click-through demo.
In this demo, we'll explore how Cribl transforms data management at Cribl Coffee Co. through the use of our Cribl.Cloud platform. We can break down the Cribl.Cloud experience into four key areas:
Team of Yes
Workload Segmentation
Flexibility, Choice, and Control
Speed-of-Thought Queries
By leveraging Cribl Stream, Edge, Lake, and Search together, we'll help Cribl Coffee Co. create a cost-effective, high-performance data ecosystem that enables each team to work efficiently while maintaining security and compliance.
Click "Next" if you're ready to rumble!
Setting the Stage — What is Cribl Coffee Co.?
What started as a small coffee shop in the Albanian foothills has grown into a global coffee brand, with over 100 stores and distribution in 140+ countries. After expanding to New York and scaling rapidly, the company faced a major challenge: managing massive volumes of data from POS systems, online orders, invoices, and logistics partners. In 2018, they integrated Cribl’s cloud-native observability pipeline into their operations.
Cribl provides a holistic solution to unify and route data across disparate sources, enabling real-time visibility, streamlined compliance, and actionable insights without vendor lock-in. With Cribl, this not-so-little coffee company transforms raw, noisy data into structured, valuable outputs —fueling predictive analytics, enhancing customer personalization, and driving operational efficiency.
Today, Cribl remains at the core of the Cribl Coffee Co. tech stack, supporting innovation across logistics, manufacturing, and retail analytics. Their story is a testament to how embracing modern data infrastructure—like Cribl’s flexible cloud platform—can power smarter decisions and global scale.
(Cribl Coffee Co. is, unfortunately, not a real company... yet)
Ready to Explore?
New to Cribl? Click the "Tell me more" button below to learn more about the Cribl suite of products and how they work together to form a powerful Data Engine for IT and Security your data.
Not so new? Or just impatient? Click "Start Demo"!
Say less. Say Yes.
As Cribl Coffee Company scaled globally, effective telemetry data management became critical. Through Cribl.Cloud Workspaces, we've democratized cloud resources and isolated workloads for different teams across the organization.
In the past, our centralized IT team was constantly overwhelmed with requests from marketing, DevOps, security, and other departments. We became known as the "team of no" because we simply couldn't keep up with demand. Provisioning resources, managing permissions, and handling data requests created bottlenecks that slowed down our business. Now, with Cribl Workspaces, we've transformed into the "team of yes."
We've created isolated Cribl workloads for different teams:
Our main workspace for centralized management
A Marketing Ops workspace focused on customer data analytics
A DevOps workspace for application monitoring
A SecOps workspace for security monitoring
Each workspace is tailored for specific teams, with separate product configurations, independent data flows, and dedicated resources. This ensures complete data and configuration separation for security, compliance, and prevents accidental interference between teams.
While teams operate independently, organization-level aspects like access controls, API credentials, licenses, and billing remain centrally managed under a unified control plane. This has empowered our teams while maintaining essential governance.
Get those Logs Flowing
Let's focus on Stream, our first step in building intelligent telemetry pipelines. Stream gave us immediate control over data costs and became our central hub for data flow. Looking at our routing table, you can see how we've organized our application data flow. Data tiering is a core strategy here:
First, we send a full-fidelity copy to cheap storage for long-term, cost-effective archiving. This is crucial for compliance and potential future analysis.
We route a copy to our Lakehouse for faster access to recent data (30 days), enabling quick insights.
Our main workspace feeds data to other Cribl Workspaces, enabling controlled sharing while maintaining isolation.
With our global Kubernetes infrastructure and point-of-sale systems, we use Cribl Edge to collect logs at the source via the 'Cribl HTTP' input. These Edge-collected logs are optimized by Stream pipelines and efficiently distributed to multiple destinations. (More on that later)
Lay Some Pipelines
In this pipeline view, with the functions on the left and a log sample on the right, admins who struggled managing complex configuration files from other solutions will enjoy using the powerful user interface.
We're parsing top-level fields and creating meta fields like __type to drive our data tiering strategy. This differentiates data value – critical server errors are more important than informational logs.
This raises important questions that highlight workload segmentation:
Should informational logs burden our SIEM?
Would our DevOps workspace find them valuable?
Can we route them to Lake, freeing downstream resources?
The OUT tab (on the right) shows the results of our data manipulation. Here, we're sampling health endpoint data, keeping only 1 in 10 status 200 checks, with the dropped events visible in real-time.
This workload segmentation approach ensures we're only sending relevant data to each system, optimizing both performance and cost. (This page can scroll, btw)
Data Segmentation
As our coffee business expanded to 100 stores globally and our bean distribution reached 140 countries, the volume of data exploded. Projects and Subscriptions provide the fine-grained control we need to manage this data efficiently.
For example, our DevOps team subscribes to data from our web application and database logs without being overwhelmed by point-of-sale system data from our retail locations when it's not relevant to their work.
Welcome to the Projects
Stream Projects have been a game-changer for our DevOps team's productivity. When we launched our specialty coffee subscription service last year, the team needed visibility into the entire customer journey from checkout to delivery.
Rather than submitting tickets to IT and waiting days for access, they could immediately build the pipelines they needed within their project boundaries. While they optimize data for their specific monitoring needs, we still maintain a full-fidelity copy in Cribl Lake for compliance and potential future needs.
Take it to the Edge
While Cribl Stream shapes our data, Edge enables us collect it efficiently. With global servers, we need a simplified, centralized management approach across our server fleet.
Cribl Edge agents collect and process observability data in real-time – logs, metrics, and traces – from endpoints like Linux, Windows, and Kubernetes, forwarding it to Stream or other destinations.
What's ON the Box?!
Cribl Edge's centralized management lets you explore logs collected within any Edge node. For example, we can explore the /var/log directory, ensure it contains needed data, and start monitoring it in a few clicks.
Kubernetes? I 'ardly knew 'er!
Our Kubernetes admins, managing thousands of pods, use Edge to filter out unwanted metadata, like ignoring pods in the kube-system namespace. This source filtering reduces the volume of data sent to centralized systems, saving processing and storage costs.
Hot Data Summer! At the Lake
Lake was our next step in data management evolution. While Stream shaped our data, Lake allowed us to store it efficiently, enabling us to decouple log collection from SIEM and observability platforms.
Building a data lake for long-term retention traditionally involves complexities, especially with S3. You face configuring buckets, managing IAM roles and permissions, often involving multiple teams and lengthy processes.
At Cribl Coffee Co., another team owns AWS resources. It was time-consuming and frustrating to request S3 buckets and wait for approvals and provisioning. We need to understand partitioning schemes, handle different retention periods for different datasets, and manage permissions for rehydration.
It's Easy as 1, 2, 3
Cribl Lake is our easy button. We can quickly provision a dataset, set sliding-scale retention periods, and immediately have it available as a destination in Stream and searchable from Cribl Search.
Unlike manual S3 management, we've set up Cribl Lake to archive data with per-dataset retention policies in just a few clicks. The data is stored in open formats like JSON and Parquet, avoiding vendor lock-in and providing flexibility in analysis tools.
Where's Wal-Data?
Having stored our data efficiently, we need quick access to insights. That's where Cribl Search comes in, letting us search data in place – in data lakes, APIs, even at the Edge.
Parsed and Ready to Go!
The fields are parsed and ready for easy interrogation, enabling iterative exploration of our data at remarkable speed. This is particularly valuable for our security and operations teams who need fast answers during incidents.
Wrap Up
Today, we've explored how Cribl has transformed data management at Cribl Coffee Co., addressing four key challenges:
Team of Yes: We've turned our data team from gatekeepers saying "no" to enablers saying "yes" through isolated, secure workspaces
Workload Segmentation: We're routing the right data to the right places through intelligent pipelines, reducing volume by up to 99%
Flexibility, Choice, and Control: Teams have self-service capabilities within governed boundaries
Speed-of-Thought Queries: Search + Lake enables rapid investigation and problem-solving
By leveraging Cribl Stream, Edge, Lake, and Search together, we've created a cost-effective, high-performance data ecosystem that enables each team to work efficiently while maintaining security and compliance.
The result? Faster insights, lower costs, and happier teams who can focus on innovation rather than fighting with data infrastructure. We've transformed our data from a burden into a strategic asset that drives our business forward.
Feel free to shedule a demo or try cribl by clicking on either.
Schedule a demoTry Cribl