Welcome to Cribl (Lake)!
Cribl Lake, by itself, provides a quick tour. We can click around the entire interface in about four clicks. Actually, let's do that.
- From the Cribl.Cloud home page, click
Manage
in theCribl Lake
tile on the bottom left - In the top left, next to
Datasets
, clickManage
As you can see, we have some default datasets that ship with Cribl Lake. These have two purposes: storing Cribl Leader logs/metrics, and other default datasets to help jump-start your Data Lake. For our journey, we’ll use the default datasets. But most of the time, you will create your own datasets, depending on the data you need to store.
- Click
Add Dataset
at the top right - For the
ID
, entersbx_incident_response
- On the
Retention Period
slider, click60 Days
- Click
Save
That's it. That's 90% of the UI for Cribl Lake. The magic derives from the ease with which you just deployed a new dataset and data lake. Congratulations, you're now a data management expert! Let's get into what you can do with Cribl Lake.
Welcome to the Family​
Much like Dom Torretto, what makes Cribl Lake powerful is family. Cribl Lake empowers Cribl's suite of products in new and amazing ways, including (but not limited to):
- Cribl Stream can send any type of data to an easily configured long-term data store (no more waiting around for "the AWS team" to provision a new bucket)
- Cribl Stream can easily replay any data sent to Cribl Lake, and can enrich, optimize, or route it any which way you'd like
- Cribl Search includes every dataset in Cribl Lake by default, enabling admins to more quickly find data in their lake (Lake?) and then, using Stream as above,
send
it where it's needed- As a subset of this, Cribl Search can
export
query results directly to datasets without the need for Stream!
- As a subset of this, Cribl Search can
Actually, these use cases are all relatively straightforward to configure. We should configure them just to illustrate how lit Cribl Lake is. As my favorite Italian plumber would say, "Let's-a go!"