v.4.7 Release

PRODUCTDATERELEASEADDITIONAL RESOURCES
Lake2024-06-05Feature

Datatypes

You can now associate Datatypes with Cribl Lake Datasets.

Doing this helps break data into discrete events, timestamps them, and parses them as needed. Multiple Datatypes can parse events into a fully structured object for use with Cribl Search, improving your search experience.

Accelerated Datasets

You can now accelerate Cribl Lake Datasets in the same way you accelerate regular Cribl Search Datasets. Use acceleration to pre-scan portions of data which speeds up search performance for very large Datasets.

New Global Navigation

Building on the last release, in which we introduced the new Cribl.Cloud experience with Workspaces, we’ve added a global navigation system. Now when you opt in to the new Cribl.Cloud user interface, you’ll get a streamlined global navigation experience. When you open a Cribl product in a Workspace, a product navigation pane on the left helps you move around within that product. Click Products to switch to a different product or go back to Cribl.Cloud home.

Corrections

Exporting search results to a Cribl Lake Dataset using the export operator now includes the _raw field. You can remove this field from results by using the project-away operator. For example:

dataset="audit_logs" 
| project-away _raw
| export my_lake_dataset