Cribl LogStream –
The Observability Pipeline

Cribl LogStream is built for handling logs, metrics, and observability data. LogStream helps you implement what we call an observability pipeline, which allows you to route machine data from any source to any destination while transforming your data in motion to enrich it with additional context, secure its contents, and control costs. Parse, restructure, and enrich data in flight. Get the right data, where you want, in the formats you need.

Cribl product screenshot

Product Features



Your existing agent, multiple destinations

LogStream makes it easy to route data to multiple destinations, delivering the right data to the right tools while putting full fidelity data in the most cost effective destination.


Data Reduction

Don’t pay for wasted data

As much as 50% of log and metric data goes unused – null fields, duplicate data and fields that offer zero analytical value. With LogStream, you can trim wasted data streams and analyze only what you need.


Universal Receiver

Eliminate bespoke connectors

Log systems require a lot of ancillary software: Syslog-ng, Splunk Heavy Forwarders, AWS & Kafka Connectors. LogStream consolidates receiving Splunk HEC, AWS, Kafka, and other sources all in one tool.

Parse and Structure Data

Work with even the ugliest formats

Parse and shape events in the stream, no matter how ugly the original log, and add context through enrichment before sending onto your destination system.


Process Log Data

Extract only signal, no noise

LogStream can aggregate logs into metrics for analysis by a wide array of tools, suppress duplicate events, or sample to keep a statistically significant subset of the full stream.


Intuitive Management Interface

Rich UI for configuration & monitoring

Reduce management overhead, with a robust and easy-to-use GUI-based configuration and testing interface. Capture live data and monitor your observability pipeline in real-time.

Learn Observability Best Practices: Creating an Observability Pipeline

What is an Observability Pipeline? Why do you need to have one? Watch this pre-recorded webinar to learn more about best practices for creating and implementing an Observability Pipeline.