These docs are for Cribl Stream 4.11 and are no longer actively maintained.
See the latest version (4.13).
About Cribl Stream
What Is Cribl Stream?
Cribl Stream helps you process machine data – logs, instrumentation data, application data, metrics, etc. – in real time, and deliver them to your analysis platform of choice. It allows you to:
- Add context to your data, by enriching it with information from external data sources.
- Help secure your data, by redacting, obfuscating, or encrypting sensitive fields.
- Optimize your data, per your performance and cost requirements.

Cribl Stream ships in a single, no-dependencies package. It provides a refreshing and modern interface for working with and transforming your data. It scales with – and works inline with – your existing infrastructure, and is transparent to your applications.
Conceptual Overview of Cribl Stream
This two-minute video provides a conceptual overview of Cribl Stream capabilities.
Who Is Cribl Stream For?
Cribl Stream is built for administrators, managers, and users of operational/DevOps and security intelligence products and services.
How Can I Get Started with Cribl Stream?
You can quickly create a Cribl.Cloud account to get Cribl Stream running on infrastructure that Cribl manages on your behalf. Or you can deploy Cribl Stream software on your own infrastructure, Kubernetes Pods, or containers. For differences between these options, see these topics:
Both options offer a range of free and paid alternatives. With an Enterprise Cloud plan, you have the additional option of a hybrid deployment. Here, Cribl manages the control plane (Leader) for you on Cribl.Cloud, but your data plane (Workers) can run on any mix of Cribl-managed versus self-hosted infrastructure.