High-Level Example Architecture

This diagram details the product connections and serves as the practical blueprint for deployment. To feature the Cribl Search and Cribl Lake capabilities, the setup assumes a Cribl.Cloud Leader serves as the control plane. The architecture is hybrid, incorporating Stream Worker Groups, Edge Nodes, and customer-managed components deployed across on-premises or private cloud environments.

Download an editable version of this diagram in SVG or draw.io format. Download Cribl stencils here.

High-Level Architecture Diagram Overview

​

The Cribl.Cloud reference architecture provides a unified, composable framework for managing the entire observability data lifecycle — from ingestion and real-time processing to scalable storage and integrated analysis — spanning both cloud and hybrid deployment models.

The architecture is centrally governed by the control plane, which manages all Worker Groups, supporting both Cribl-managed SaaS and Hybrid Stream configurations to meet diverse operational and cost requirements.

Telemetry from various Sources (Push, Pull, and Cribl Edge Nodes) flows into Cribl Stream for further processing. Cribl Stream then routes this data to multiple Destination types: Cribl Lake for scalable, cost-optimized object storage; generic data lakes; or real-time analytics tools (SIEM/monitoring platforms).

If you plan to send data to the same cloud provider from which it originated, consider using hybrid Workers to minimize costs.

Finally, Cribl Search unifies the analysis layer, enabling efficient query and retrieval across all supported datasets stored in Cribl Lake and other compatible destinations.