Cribl Edge

Your not-so-secret agent for vendor-neutral, unified collection.

Cribl Data Engine Light Edge
Edge Leader Node Diagram

In a nutshell

Dispatch fleets of agents for central intelligence

Cribl Edge is a vendor-neutral, intelligent agent designed for the variety and scale of today’s modern architectures. With a unified telemetry collection system, you can have hundreds of  thousands of agents at your fingertips to automatically discover and collect data from your Windows, Linux, and Kubernetes environments. Featuring a rich UI, centralized fleet management, and seamless upgrades, it’s time to transform your agent management.

Benefits

Livin' on the (Cribl) Edge

The telemetry collection tools that got you to 2024 aren’t going to get you to 2034. Finally, hyper-scale agent management is here!

DATA.COLLECTION.svg

Consolidate your collection tools

No need for that hodgepodge of vendor-specific legacy agents and piecemeal forwarders.
INTERACTIVE.svg

Centralize and unify agent management

Say goodbye to the hassle of individual, manual upgrades and configurations —now, you can complete them in just a few clicks.
CRIBL_CLOUD.svg

Tackle sprawling environments

Get a handle of your distributed infrastructure with the ability to efficiently deploy and monitor thousands of nodes in days, not weeks.
Users.svg

Give control back to your team

Immediately access all of your telemetry data from any Windows, Linux, or Kubernetes environments directly - without waiting on permissions or changes from other teams.
search-icon.svg

Explore and investigate effortlessly

Search and teleport into nodes with an interactive experience to troubleshoot and gain unprecedented visibility at the edge.

Customer Success

Cribl Edge for the win

We have Cribl Edge installed on our Kubernetes nodes to gather logs and metrics. It’s a lot easier than deploying the Splunk forwarder. It deploys in five minutes, and then it’s done.
Joris VuffrayHead of Network & System Management, Swissloss
Read case study

Features

Why Cribl Edge?

Scalable
Flexible
Efficient
More grow, less groan
  • Easily deploy and manage up to 250,000 nodes with Edge’s built-in fleet management, reducing operational overhead.

  • Centrally configure, monitor, and upgrade entire fleets in minutes and without relying on the endpoint owner.

  • Keep costs of growing data volumes down by interrogating data at the source, before deciding to send it a central location.

Try Cribl Edge for free!
Product - Edge - Scalable

Capabilities

Feature highlights

Intelligent_1000x620-1536x952 (1).png
Intelligent

Raise your intelligence quotient to the top of the stack

Efficiently gather and auto-discover log data at its source. Automatically identify and collect logs and metrics from endpoints like servers, containers, or applications.
Product_-_Edge_-_Fleet_Management.png
Centralized Fleet Management

Easily monitor and manage thousands of edge nodes

Fleet management empowers you to monitor, manage, and configure thousands of agents from a single, centralized console. Enjoy visual configuration authoring and version control, all designed to scale effortlessly.
Agnostic_1000x620-1536x952.png
Agnostic

Choose any host, source, or destination. It’s up to you.

Deploy on your platform of choice and collect data from any Linux, Windows, or container system. Forward only the data you need to your destinations of your choice.
Teleporting_1000x505.png
Teleporting

One click access to view host information

Welcome to the future! Teleport into a node to directly explore metric and log data, either collected via the autodiscovery function or manual configuration of any data of interest. Then use the data to perform root-cause analysis or troubleshoot.
Edge_Capabilities_Kubernetes_Screen-1536x1095.png
Kubernetes Observability

DevOps and SREs Rejoice!

Eliminate the hassle of configuring FluentBit/Fluentd. With pre-packaged Helm charts, Cribl Edge deploys effortlessly, giving you greater visibility into your Kubernetes environments."
Windows_1000x620-1536x952.png
Window into Windows

Cribl Edge and Windows: The Perfect Pair for Observability

Cribl Edge was built with Windows environments in mind, offering an easy-to-use experience and native integrations for exploring and collecting Windows events, logs, and metrics.

FAQ

Frequently Asked Questions

Installing and configuring Cribl Edge is quick and easy. Start by downloading the agent from the Cribl website, where versions are available for Linux, Windows, Docker, and Kubernetes. Once downloaded, follow the simple installation steps for your platform. After installation, use Cribl's intuitive bootstrap script to configure your agent, specifying the data sources you want to collect and the destinations for that data. Once configured, you can start Cribl Edge!

Cribl Edge operates directly on the endpoint, collecting and processing telemetry in real-time by utilizing unused local capacity before forwarding it to a central destination. By performing lightweight processing closer to the source, it reduces data volume and bandwidth usage while also offering modern agent management capabilities. In contrast, Cribl Stream operates centrally and performs heavier processing, aggregating and optimizing data from multiple sources to manage, route, and streamline data flow across an organization's ecosystem.

Cribl Edge is designed for ITOps, SecOps, and SRE/DevOps teams that need to simplify data collection from distributed environments. It's especially useful for organizations managing large-scale observability needs in modern infrastructures.

Cribl Edge is a lightweight data collection agent with minimal resource demands, making it ideal for distributed environments. CPU and memory usage is low using one core, ensuring efficient operation without overburdening the endpoint's resources. Read the documentation to get more detail on your individual workload needs.

Cribl Edge pricing operates on a pay-as-you-go ingest model for both our on-premise and hybrid offering. This means you only pay for bringing in the data once so any data you send from Cirbl Edge to Cribl Stream won’t be billed again! Plus, we don’t make you pay for data you don’t end up collecting, so you won’t be charged for data dropped at the edge. Winner, winner, chicken dinner!

For more information on Cribl Edge pricing, visit www.cribl.io/pricing.

Integrations

A unified data engine

Edge + Stream.png
Stream

Time for some heavy lifting

Easily collect host data and perform lightweight processing with Cribl Edge using unused capacity on endpoints, then effortlessly send data to Stream for heavier processing. Plus, data ingestion in Cribl is only billed once so it won’t be billed again in Stream.

Stream on
Edge + Lake.png
Lake

Storage simplified

Directly send data from Cribl Edge to Lake to be securely stored in open formats and quickly make endpoint data easily accessible, usable, and valuable.

Dive in

Tech Docs

Learn the ins and outs

5Resource - Docs - Edge Basic Concepts.jpg

Edge Basic Concepts

Read
1Resource - Docs - Getting Started with Cribl Edge.jpg

Getting Started with Cribl Edge

Read
2Resource - Docs - Getting Started Edge Tutorial.jpg

Introductory Edge Tutorial

Read
3Resource - Docs - Edge Fleet Management.jpg

Cribl Edge Fleet Management

Read
4Resource - Docs - Edge Collecting Data.jpg

Cribl Edge Collecting Data

Read
6Resource - Docs - Cribl Edge Monitoring.jpg

Cribl Edge Monitoring

Read

Want to try living life on the edge?

Experience the full version of Edge for free, complete with pre-configured sources and destinations.

ForbesCloud -  AwardFortuneCyber - AwardInc5000 - AwardForbesStartup -  AwardCrowdstrike -  Award