Cribl Insights 4.19.0 ​

Important Changes

This release introduces changes that require action if you use the affected features:

Multi-key tag filters now match as AND (behavior change)

Monitors that use more than one tag filter key (in Label filters or rule Included/Excluded tags) previously matched a series if any key matched. They now require all keys to match (AND across keys, OR within a single key’s list of values). If you built a Monitor that unintentionally relied on the old broad matching, it will now fire on fewer series - which is the intended, more precise behavior. See Included and Excluded Tags.

Summary ​

Cribl Insights 4.19.0 introduces alerts for Data Insights and support for missing-host metrics.

New Features ​

This release provides the following new features:

Alerts for Data Insights ​

You can now see and act on alerts directly from the Data Insights map, making it the single starting point for spotting and investigating data-flow problems without switching between the map and a separate Alerts page. Featured updates include:

• Alert status on the map: Sources and Destinations are color-coded by the highest-severity active alert, with an indicator for nodes that recently alerted. Filter the map to show only unhealthy nodes.
• Health tab in the node side panel: Click a node to view its active and recent alerts, including monitor name, severity, and fire time, with a one-click link to the Active Alerts page.
• Create a monitor from a node: Launch the monitor builder straight from a Data Insights node with the metric, namespace, and dimensions pre-filled.
• Data Insights metrics in the monitor builder: Data Insights metrics (volume, freshness, drops, shape) are now first-class in the builder, with the correct namespace and units applied automatically.

Alerts for Missing (Silent) Hosts ​

Custom Monitors now support the absent_over_time operator, so you can alert when a source stops reporting data. Unlike aggregation operators that return results only for series with data, absent_over_time returns a result for every matching series: 1 when a series has no data in the evaluation window and 0 when it recovers. This lets you identify which source went silent and clears the alert automatically when data resumes. See Detect Silent or Missing Sources.

Control Your Upgrade Cadence with Cribl.Cloud Release Channels ​

In Cribl.Cloud, Enterprise customers can assign each Workspace to the Regular or Slow release channel. The Regular release channel (default) follows the standard monthly release cadence. The Slow release channel also updates on a monthly basis but is one version behind Regular. Release channels give teams self-service control over Cribl upgrade cadence on a per-Workspace basis and allow them to validate new Cribl versions in pre-production Workspaces before deploying to production environments. Additionally, the Slow release channel is not updated in November and December to accommodate holiday season change freezes.

Multi-region Workspaces in Cribl.Cloud ​

In Cribl.Cloud, Admins can now add new Workspaces in any region, independently of the Organization region. This allows customers with global footprints to locate Workspaces within geographic and political boundaries as needed to meet standards for compliance, data residency and sovereignty, and local processing.

Apps (Preview): Capra in the App Scaffold ​

The Create App scaffold now installs Capra, the Cribl design system, by default. New projects include a Capra-based sample UI, Capra packages from the public npm registry, and AGENTS.md guidance for AI-assisted development. You can use Capra components and design tokens, apply Capra styling with your own components, or replace Capra with another UI stack.

Experience Improvements ​

• Cribl AI is now directly embedded into the suite by default, introducing AI-accelerated workflows across your Workspace. These capabilities are supported by either Cribl-supplied models or your own custom provider configurations, giving you full control over how AI processes your data.

• The Team Details page now lists SSO users under Team Members. SSO users are progressively added to the Team Members list as they log in.

• In the FinOps Center, a new Global Date Range picker lets you set the date range for all of your billing graphs in the FinOps Center at one time, reducing the number of clicks and saving you just a little time for more important work.

• Your Organization role(s) now appear under your name in the account menu, so you can see your role without navigating to Members & Teams.

Corrections ​

SDK Changelogs ​

The Cribl SDKs help you integrate with Cribl and reduce the need for repetitive tasks. We maintain changelogs for each version of the Cribl SDKs in their GitHub repositories:

• Go SDK changelogs: control plane and management plane
• Python SDK changelogs: control plane and management plane
• Typescript SDK changelogs: control plane and management plane