Cribl Edge

The challenge

Data volumes and the number of data sources are growing exponentially. Companies need to collect, process, and forward that data, but data collection at the edge in modern apps and microservice environments can't keep up with the scale and types of telemetry. Teams need to keep costs down by processing data closer to the source and collect all the necessary data without installing, configuring, and managing multiple, independent agents. On top of all that, they require better visibility into edge data collection.

The Cribl solution

Cribl Edge is a powerful and intelligent agent designed to manage data collection at scale. Built with centralized fleet management as a core tenet, Edge delivers a simple way to auto-detect both OS and application telemetry, determine what portions are valuable or require additional processing, and then choose whether to forward that telemetry to Cribl Stream, Cribl Lake, or other destinations. Edge allows users to directly interact with endpoints and discover needed information before deciding whether to move it. In addition, Edge assists with agent consolidation efforts by providing robust centralized management and by collecting, transforming, and routing telemetry to a variety of destinations, all while taking advantage of unused capacity on endpoints rather than contributing to infrastructure costs associated with collecting, processing, and forwarding in a centralized location. As with all our products, Edge works even better in conjunction with Cribl Search, which allows teams to run searches directly on endpoints, explore data in place, and accelerate troubleshooting without moving data first.

Facets of Cribl Edge

SCALABLE DATA EXPLORATION AT THE SOURCE

Cribl Edge enables teams to explore logs, metrics, and application data at their egress points. Data exploration closer to the source gives teams the option to dive into the data before deciding what to collect and process.

LOWER TIME AND COST OF OWNERSHIP WITH BETTER DATA COLLECTION

Collect logs, metrics, traces, and application telemetry in any Windows, Linux, macOS, or Kubernetes environment at unprecedented scale. Easily manage hundreds of thousands of Edge nodes with Edge's built-in Fleet Management, lowering the time and cost of ownership of data collection. Edge also supports modern telemetry use cases such as macOS Apple Unified Logs, macOS system metrics, and GPU monitoring.

FLEXIBLE AND COST-EFFECTIVE DATA PROCESSING

Reduce, transform, and route data at the edge giving - more choice and control while lowering costs for forwarding and storing data. Being fully vendor agnostic, forward data to Cribl Stream, Cribl Lake, or any destination of choice.

INTERACTIVE TROUBLESHOOTING AND DETAILED METRICS - ANYTIME

Visually author configurations for data collection and transformation at the source. Cribl Edge's rich, interactive agent allows a team to teleport into any Edge node and get a detailed look at system performance metrics, running processes, containers, open log files, and more.

Summary

Data collection and processing at the edge in modern app and microservice environments just can't keep up with the scale and types of IT and security telemetry.

Enter Cribl Edge, a highly scalable, vendor-neutral endpoint telemetry collection and processing system for logs, metrics, traces, and application data. Edge is the easiest way to get telemetry out of any Windows, Linux, macOS, or Kubernetes environment, giving IT and Security Operations teams the ability to collect, process, and forward data at scale while keeping costs down. Manage fleets of Edge nodes without relying on external tools, and search telemetry on endpoints before deciding what to centralize.

Frequently asked questions