This documentation explains the Cribl reference architecture. It’s a blueprint for designing a scalable and resilient Cribl deployment that fits your enterprise needs.

We provide links to the documentation for specific Cribl products for detailed instructions on how to configure and deploy the components we discuss.

What You Will Learn ​

This reference architecture provides:

• The technical guidance to deploy, scale, and operate Cribl products in an enterprise.
• Architectural considerations, including how components interact, and the trade-offs for production readiness.
• Deployment strategies for cloud, on-prem, and hybrid setups.

This framework is designed to help you handle complex data pipelines, making sure your Cribl deployment is optimized for future growth.

Specialized Reference Architectures ​

Specialized Reference Architectures are targeted blueprints for specific, demanding deployment scenarios, such as high-volume syslog ingestion or routing to many downstream platforms. They complement the guidance in this reference architecture rather than replacing it.

These blueprints now live in the Cribl Knowledge Base. See Specialized Reference Architectures for the full set, or use the Goat-to Resources links to open a specific architecture.