Cribl Lake

Storage that doesn’t lock data in. 

Cribl’s turnkey data lake makes it easy and economical to store, access, replay, and analyze data — no expertise needed.

Cribl Data Engine Light Lake

In a nutshell

No fuss, no muss. Just a central hub for telemetry data.

Mo’ data, mo’ problems? Not anymore. Cribl Lake keeps you from drowning in data with cost-effective, long-term retention of all your logs, metrics, and traces. Store data in open formats for fast retrieval, and easily set policies for retention, security, and access control. Let Cribl handle the heavy lifting so your data is usable and valuable to the teams and tools that need it. 

Benefits

Smooth sailing with Cribl Lake

store-icon.svg

Store any type of IT and security data

Raw, structured, unstructured, or in various formats.
FINANCIALS_02.svg

Optimize for future value

Schema-on-need stores data in any format. Apply schema and reformat when needed.
INTERACTIVE.svg

Easily access data

Storing data in open formats ensures future replay operations.
PROTECT.SECURITY.svg

Maintain security and compliance

Unified security features, retention policies, authentication features, and access controls makes for easy and secure management.
COST CUTTING.svg

Reduce storage costs

Use data tiers to route highly valuable data to downstream tools. Retain full-fidelity data in Cribl Lake for future use.

Customer Success

Cut SIEM costs

Cribl Lake allows us to send the data, search it, and analyze its relevance before deciding on its next steps. This approach has significantly reduced unnecessary data inflow into our SIEM, saving us time, budget, and resources while ensuring we focus only on what's essential.
Security Engineerat a Fortune 500 Travel Company

Features

Why Cribl Lake?

Speed
Ease
Choice
Fast-track your data lake strategy

Minutes, not months to get up and running with Cribl Lake. 

  • Zero configuration with automated provisioning and out-of-the-box integrations. Keep data safe and secure without custom code.

  • Flexible role-based access controls assign dataset access permissions based on users’ roles.

  • Integration with Cribl’s product suite minimizes the need for upfront configuration, making it easy to store, replay, and search data.

  • Streamline data ingestion and routing with Cribl Stream and Edge. Cribl Search unifies queries across all data sources for fast insights without delays.

Try Cribl Lake—50GB of storage—for free!

Capabilities

Feature highlights

Product_Lake_Retention.png
RETENTION

Keep data secure and accessible for the long haul

Take an easy path to collect and store data for long-term retention. Comply with legal and business requirements for data retention by defining specific retention periods for different types of data.
CriblLake-Security.png
Security and Access Controls

Peace of mind storing, securing, and accessing data

Utilize a strong enterprise security posture with unified controls. Flexible role-based access controls assign dataset access permissions based on users’ roles. Data is encrypted at-rest and in-transit.
CriblLake-Schema-on-need.png
Schema-on-need

No pre-defined schemas required

Not all data is created equal. Simplify data onboarding by storing data as is in Cribl Lake. Transform or enrich your data when you need to.
CriblLake-BYO-Storage.png
BYO Storage

A single view for federated data

No need to store all your data in one location. Cribl Lake offers a unified approach to manage all data so you can seamlessly access and query regardless of where it resides.
CriblLake-Replay.png
Replay

Send data to the teams and tools that need it

A data lake that doesn’t lock data in. Cribl Lake offers flexibility and affordability while allowing data to be replayed for analysis across different tools.
Product_Lake_Open Formats.png
Open Formats

Liberate your data

Cribl Lake stores data in open formats so there’s no vendor lock-in ever. No need for proprietary tools to access data — data can be replayed and sent to other tools.

FAQ

Frequently Asked Questions

Cribl Lake is centrally managed in the Cribl.Cloud portal UI and is available to all Cloud users. If you use Worker Groups connected to a Cloud Leader — for instance a self-managed Hybrid Worker Group on-prem or in your own cloud — you are able to write directly to Cribl Lake.

Cribl Lake supports both JSON and Parquet data formats. By default, data is stored as JSON documents, which are compressed using gzip. Events include the _raw field, allowing you to access the original data if needed.

We recently introduced dynamic schema support for Parquet. This format enhances performance for those who prefer to use a Dataset for analytical queries, rather than solely for long-term retention. Our goal is to simplify the process for customers by handling schema complexities, so you can focus on your data without worrying about schema management.

Cribl Lake offers permission settings based on users' role at the product-level, including Admin, Editor, and Read Only roles. You can control who can view and access Cribl Lake Datasets directly through the ‘Share’ menu in Cribl Search. We plan to expand capabilities so you will be able to manage Dataset access directly from the Cribl Lake UI, providing even more control over your data.

If you need to control who can write to specific Datasets within Cribl Lake, you can use Cribl Stream’s Projects to manage access, and ensure only authorized users are able to write to designated destinations.

In Cribl Lake, all your data is securely encrypted at rest, whether stored in your Cloud workspace or in your own cloud account. Cribl uses server-side encryption (SSE-S3) as the base level of protection, provided at no additional cost and with no impact on performance.

Each piece of data is encrypted with a unique key, which is further protected by a root key that is regularly rotated for added security. Cribl uses the 256-bit Advanced Encryption Standard (AES-256) to encrypt your data, one of the strongest encryption methods available, ensuring that your information remains safe and secure.

Cribl Lake follows Cribl’s flexible cloud consumption pricing so you only pay for what you use. You start by purchasing a pool of credits, which are then deducted as you store data in Cribl Lake. If you opt for Cribl-managed storage, you will be billed monthly at a rate of 0.05 credits per GB of stored data, with $1 = 1 credit. Billing is based on the total compressed data volume stored in Cribl Lake, not the raw volume of data sent to Cribl Lake.

For more information on Cribl Lake pricing, visit www.cribl.io/pricing.

Integrations

Streamline workflows

Lake + Stream.png
Stream

Replay data for rapid analysis

Already using Cribl Stream as your pipeline? Store full-fidelity IT and security telemetry data and replay it at any time. Integrate downstream services in any format, to any tool, at any time.

Stream on
Lake + Edge.png
Edge

Powerful ingest and routing

Already deployed Cribl Edge? Streamline data ingestion and management with Cribl Lake. Route data so the right teams and tools have access to it, without delays.

Feeling edgy?

Tech Docs

Learn the ins and outs

Resources - Docs - Cribl Lake.jpg

Getting Started with Cribl Lake

Read
Resources - Docs - Managing Datasets.jpg

Managing Datasets

Read
Resources - Docs - Search Cribl Lake.jpg

Searching Cribl Lake

Read
Resources - Docs - Cribl Lake Permissions.jpg

Cribl Lake Permissions

Read
Resources - Docs - Cribl Lake Collector.jpg

Cribl Lake Collector

Read
Resources - Docs - Cribl Lake Destination.jpg

Cribl Lake Destination

Read

get started

Water you waiting for?

Enhance data accessibility and analysis, expedite security incident response, and simplify compliance reporting.

Get started today and enjoy the easy #LakeLife with Cribl.

ForbesCloud -  AwardFortuneCyber - AwardInc5000 - AwardForbesStartup -  AwardCrowdstrike -  Award