Cribl Search 4.16.0 (Coming Soon)
| PRODUCT | DATE | RELEASE | ADDITIONAL RESOURCES |
|---|---|---|---|
| Search | 2026-01-28 | Feature | Known Issues, Cribl Lake Release Notes |
The following draft provides early access to release notes for the upcoming Cribl Suite product release. Features or functionality presented are not considered binding commitments and are subject to change at the discretion of Cribl at any time for any reason without notice. This information should not be relied upon in making purchasing decisions.
Cribl Search 4.16.0 adds support for human-readable timestamps in queries, exporting Notebooks as PDFs, more fine-grained control of Search resources, and relevant bug fixes.
New Features
Notebooks PDF Export
You can now export your Notebook as a PDF for a shareable artifact of your data investigation.
Notebooks Cell URLs
Each Notebook cell now has an anchor URL that you can easily copy and share.
Time Parameters Accept ISO Format
You can now specify earliest and latest time parameters as ISO 8601-formatted timestamps. For example:
dataset="cribl_search_sample" earliest="2024-01-01T00:00:00Z" latest="2024-01-31T23:59:59Z"This is in addition to the existing support for relative values (-3h) and Unix time (1704067200).
Access Control
Resource-Level Access Rights for API Credentials
Members with sufficient Permissions can now grant access rights on individual Cribl Search resources, such as Datasets and Notebooks, to API Credentials.
This allows fine-grained access control on data visibility and retrieval rather than blanket access rights on an entire Workspace. It is especially useful for managing service accounts that connect to Cribl Search via API.
Users and Editors Can Set Notifications
Search Users and Search Editors are now able to configure Notifications for scheduled searches (before, only Search Admins could do this).
For the full list of permissions, see Search Permissions in our new Identity and Access Management docs section.
Corrections
| ID | Description |
|---|---|
SEARCH-10475 Known issue | Filtering on Datatype-extracted fields when Cribl Lake uses Parquet now works as expected. |
| SEARCH-11978 | Scheduling a Pack Dashboard that references a Pack Macro now works correctly. |
| SEARCH-12066 | Fixed an issue where Dataset and Dashboard Maintainers couldn’t share resources with others. |
| SEARCH-11855 | Fixed an issue where Azure Blob searches with limits could appear as failed. |
| SEARCH-10850 | Fixed an issue with exporting or importing a Pack when referencing a Macro. |
| SEARCH-11671 | Running two timestats operators in a row no longer fails. |
| SEARCH-11222 | Fixed an issue where queries using a virtual table, an aggregation function, and an export function didn’t work properly. |