Cribl Insights 4.16.0

Introducing Cribl Insights to the Cribl Suite, providing centralized monitoring and alerting across your Cribl environment. Insights is a monitoring and analytics layer integrated into Cribl products that aggregates operational, system, and data metrics so you can quickly identify issues, optimize resource usage, and maintain system health.

Cribl Insights is available to Enterprise Cribl.Cloud organizations on the Main Workspace, with 48 hours of free data retention. Upgrade options are available.

System Insights gives product-level views into the control and data plane health of your Cribl deployment, including CPU and memory utilization, queue depth, backpressure, error and retry rates, and component availability. You use these dashboards to detect saturation and infrastructure problems early, validate changes, and drive root-cause analysis when system issues cascade into data symptoms. System Insights provides an overview page plus detailed dashboards for Stream, Edge, Lake, and Search, with drilldowns into metrics and logs.

Data Insights focuses on Cribl Stream data flows. It presents an interactive topology map that shows how data moves from Sources through Pre-Processing Pipelines, Routes/Quick Connect, Post-Processing Pipelines, and Destinations. At each point in the flow, Data Insights tracks volume, freshness (event age), and shape (field count) so you can spot partial failures, misconfigurations (such as Sources not attached to the expected Route), schema drift, drops, and gaps. The details pane and compare capabilities help you validate Pipeline changes and localize interruptions or regressions along the path.

Alerts provides a centralized experience for detecting important conditions and routing notifications. Insights includes default monitors for common health and data-path scenarios, which you can enable, tune, or mute as needed. Alert activity is consolidated in the Active Alerts view, where each alert links back to relevant metrics and logs. Through Notification Settings, you define reusable targets (such as Slack, email, PagerDuty, AWS SNS, and webhooks), message templates, label-based notification policies, and muting rules, so you can control when alerts fire, how they are formatted, and where they are delivered.

There are a couple of known issues with this first release of Cribl Insights. See the Known Issues section for details.