Cribl Sandboxes

Welcome! Cribl is the Data Engine for IT and Security. Cribl Sandboxes are online tutorials to help you learn about Cribl products. We recommend you start with our Cribl Stream Overview, which covers basic product usage and includes a tour of some common use cases.

For more in-depth Courses and Certifications, please visit Cribl University

Overviews

Get started with these high-level introductions to the Cribl Suite of products

What's New?
v4.11
Updated: Mar 2025
Cribl Search
Search any data, any vendor, any format, from one location, using one query language.
Cribl Lake
Come in, the data's nice.
Cribl Stream
Getting data to the right places, in the right formats, at the right time
Cribl Copilot
Launch it, you're in good hands.
Cribl Edge
An intelligent, highly scalable edge-based data collection system
The Dispensary
A place to share and care
AppScope
Visibility: No configuration or agent

How-To's

Only got 10 minutes? No problem! Come see how to do basic tasks in the Cribl Suite of products in these short shorts. Nice!

Archiving to Object Storage
10 minutes
Data Enrichment
10 minutes
Data Shaping In Cribl Stream
10 minutes
Full Fidelity Replay
10 minutes
Cribl Search Data Sources
15 min
Into the Breach: Security Breach Replay
12 minutes
Into the Breach: Security Breach Replay
12 minutes
Regex 101
10 minutes
Roll Your Own Pack
10 minutes
Understanding JavaScript Expressions
10 minutes
Windows XML Event Reduction
10 minutes
Working with Metrics
15 minutes

Deep Dives

Jump in and learn more in these hyper-focused sandboxes

Cribl Search Operators
Cribl Search Dashboards
Advanced Collection & Replay
30 minutes
Event Breaking
60 minutes
Getting to Know Cribl Stream
90 minutes
Lookups Three Ways
30 minutes
Managing Stream with GitOps
30 minutes
REST API Collector
60 minutes
Kubernetes Observability with Cribl Edge
45 minutes