MyObservability

Cribl Stream

Cribl Stream helps you process machine data – logs, instrumentation data, application data, metrics, etc. – in real time, and deliver them to your analysis platform of choice.

Edge Stream Concepts

• Sources
• Quick Connect
• Routes
• Destinations

Sources: Remote senders (Splunk, TCP, Syslog, etc.), or to collect data from remote file stores or the local machine.

QuickConnect: Quickly drag and drop connections between Sources and Destinations, optionally including – or excluding – Pipelines or Packs.

Routes : Routes evaluate incoming events against filter expressions to find the appropriate Pipeline to send them to. Routes are evaluated in order. Each Route can be associated with only one Pipeline and one output (configured as a Cribl Stream Destination).

Pipelines: A series of Functions is called a Pipeline.

• pre-processing Pipelines
• post-processing Pipelines
• Functions: Piece of code that executes on an event (Ex: Encrypt, transform etc)

Distributed deployment architecture