Routing Telemetry with Cribl

Routing

Let’s explore the flexibility you get from Cribl Stream to manage and route your data. We have a slew of standard options but if you want more, you can easily send data to a webhook at the destination of your choice.

Plus, with a variety of pre-built Packs, Cribl makes it simple to format data exactly the way your tools require. Now, let’s pop the hood and dive into these features and see how they can streamline your data tool evaluations.

Ready to dig in?

New to Cribl? Click the 'Tell me more' button below to learn more about the Cribl suite of products and how they work together to form a powerful Data Engine for IT and Security your data.

Not so new? Or just impatient? Click "Start Demo" and let's route!

Test drive your tools

Test drive your tools with Cribl Stream. Experiment with various tools in your data plane, with the flexibility to route all your data as a Universal Receiver and send it to any destination you need. Here we are using quick connect, which simplifies the configuration process by giving you a streamlined, user-friendly interface to connect data streams, apply transformations, and deliver data to your desired endpoint.

With over 50 supported sources and destinations, Cribl empowers you to easily integrate and evaluate different tools so you find the perfect fit for your environment.

Now, let’s check in with our SecOps group to see how our SIEM bakeoff is coming along!

The Great SIEM bakeoff

Whip up efficient tool evaluations with Cribl. Finding the perfect ingredients for your IT and security operations can be like baking the perfect cake – complex and time consuming. But with Cribl, evaluating tools is a piece of cake.

Have your cake & eat it too

Effortlessly mix and route your data to multiple destinations, shape it to fit specific schemas, and conduct thorough assessments with real production data. Cribl streamlines your process, making migrations smooth and saving you valuable time for testing and strategic planning. Cribl is the secret ingredient to revolutionize your tool evaluations today. We’re here to help you cook up the perfect solution.

Destination

Let’s take a look at our native support for more destinations.

Google Security Operations

• Google Security Operations

• SentinelOne

• CrowdStrike

WebHook

If you need still more options, we can always send the data to a webhook at the destination of your choice.

Now, let's take a look at Cribl Packs that help you format data exactly how your prospective tool needs it.

Having reviewed Quick Connect, let’s view some routes.

Routes

With Cribl Routes, you can direct specific types of data to different destinations based on conditions such as log type or severity, with conditional data routing. Send data to multiple locations simultaneously, like a compliance archive and a monitoring tool, to ensure full coverage.

But don’t stop there. Routes also enables data transformation via pipeline, allowing you to filter, enrich, or optimize your data before it reaches its destination. It enhances your cost-efficiency by prioritizing high-value data for expensive tools, like SIEMs and sending lower-priority data to more affordable storage options.

With its flexibility, Routes grants you granular control over your data pipeline to easily build customized workflows for various use cases.

Packs

Cribl Packs are pre-built, reusable data pipeline configurations that simplify and speed up data collection, processing, and routing within Cribl Stream. Each Pack includes rules, pipelines, and logic tailored to specific use cases, helping you easily ingest, format, and customize data to fit your needs.

The OCSF Pack

Get data in the OCSF format for Amazon Security Lake.

Exabeam Pack

Optimize Palo Alto traffic for seamless integration into Exabeam.

Let’s explore more Packs in the Dispensary.

The Dispensary

We have so many Packs! They are all configured by goats and our community. These Packs combine routes and pipelines to transform your data into the right format, so you can get back to doing what you love.

Your secret ingredient for tool evaluation

Accelerate your tool vetting process and move from guessing to confidently making decisions. After evaluating various options, it’s clear that Your_Next_Tool (aka dragonglass) was the best fit for our environment.

We're using a pipeline from a pre-built pack to seamlessly integrate and send data in a plug-and-play scenario, which simplifies setup and reduces manual effort. In addition, we’re sending a full-fidelity copy of the data to Cribl Lake for long-term retention, ensuring that you maintain complete, unaltered records for compliance and future analysis.

Try your tools; Route anywhere

With Cribl, you can try before you buy. Use Packs to get the most from your metrics, events, logs and traces in the format you need and suited to your taste – ASAP. Make the most of your time with Cribl and your tool bakeoffs.

Feel free to shedule a demo or try cribl by clicking on either.