Learn

Lastest Learn Posts

How to run your own Cribl Proof of Concepts
Tl;Dr – in v1.7 we introduced two very significant improvements that help you as a customer prove Cribl capabilities fast and efficiently....
Super Fast GeoIP Enrichment of Logs
A common use case for enriching logs is adding geographical information based on the IP address of some entity (e.g client IP,...
Estimating Capacity using LogStream
One frequent concern we hear is capacity anxiety: will this new source blow up my system? No matter the use case: IT,...
Practical Logs to Metrics Conversion With Cribl LogStream
When monitoring your infrastructure, applications, users, devices, sensors etc. you’re likely to be using a variety of data sources and a number...
Getting Smart and Practical With Dynamic Sampling
In the past we’ve written multiple posts about how Cribl helps you maintain visibility in high-volume/low-value scenarios without having to egregiously scale your...
Streaming Data Deduplication with Cribl
The Problem It’s not uncommon for machine data systems to send and receive duplicate or repeated events. This could be due to a variety of...