Cribl Search 4.16.0
| PRODUCT | DATE | RELEASE | ADDITIONAL RESOURCES |
|---|---|---|---|
| Search | 2026-01-28 | Feature | Known Issues, Cribl Lake Release Notes |
Cribl Search 4.16.0 adds support for human-readable timestamps in queries, exporting Notebooks as PDFs, more fine-grained control of Search resources, and relevant bug fixes.
New Features
Notebook PDF Export
You can now export your Notebook as a PDF for a shareable artifact of your data investigation.
Notebook Cell Links
Each Notebook cell now has a unique URL that you can easily copy and share.
Time Parameters Accept ISO Format
You can now specify earliest and latest time parameters as ISO 8601-formatted timestamps. For example:
dataset="cribl_search_sample" earliest="2024-01-01T00:00:00Z" latest="2024-01-31T23:59:59Z"This is in addition to the existing support for relative values (-3h) and Unix time (1704067200).
HTTP API Provider Enhancements
Improved pagination ensures complete, correct results, preventing missed insights from truncated responses.
Access Control
Resource-Level Access Rights for API Credentials
Members with sufficient Permissions can now grant access rights on individual Cribl Search resources, such as Datasets and Notebooks, to API Credentials.
This allows fine-grained access control on data visibility and retrieval rather than blanket access rights on an entire Workspace. It is especially useful for managing service accounts that connect to Cribl Search via API.
Users and Editors Can Set Notifications
Search Users and Search Editors are now able to configure Notifications for scheduled searches (before, only Search Admins could do this).
For the full list of permissions, see Search Permissions in our new Identity and Access Management docs section.
Corrections
| ID | Description |
|---|---|
SEARCH-10475 Known issue | Filtering on Datatype-extracted fields when Cribl Lake uses Parquet now works as expected. |
| SEARCH-11978 | Scheduling a Pack Dashboard that references a Pack Macro now works correctly. |
| SEARCH-12066 | Fixed an issue where Dataset and Dashboard Maintainers couldn’t share resources with others. |
| SEARCH-11855 | Fixed an issue where Azure Blob searches with limits could appear as failed. |
| SEARCH-10850 | Fixed an issue with exporting or importing a Pack when referencing a Macro. |
| SEARCH-11671 | Running two timestats operators in a row no longer fails. |
| SEARCH-11222 | Fixed an issue where queries using a virtual table, an aggregation function, and an export function didn’t work properly. |
SDK Changelogs
The Cribl SDKs help you integrate with Cribl and reduce the need for repetitive tasks. We maintain changelogs for each version of the Cribl SDKs in their GitHub repositories:
- Go SDK changelogs: control plane and management plane
- Python SDK changelogs: control plane and management plane
- Typescript SDK changelogs: control plane and management plane