This release brings faster search performance, more flexible data collection, and reliability improvements across the platform!
Search
• Copilot Investigator: AI-assisted investigations that generate queries, analyze results, and summarize findings from natural language prompts.
• Federated Search Improvements: Pushdown execution across S3, Azure Blob, and Cribl Lake for faster queries.
Search/Lake
• Lakehouse Search Engines: High-performance ingestion with near real-time search and automatic parsing across 200+ datatypes.
Stream / Edge
• Cribl Guard Background Detection: Always-on scanning that samples pipeline data to detect sensitive data patterns like PII, secrets, and regulated data.
• Microsoft Graph Source: Microsoft is deprecating the legacy O365 Message Trace API on April 6, 2026. Customers using the legacy source should migrate to the new Microsoft Graph Source.
• OpenAI Source: Easily ingest OpenAI model invocation logs and audit logs.
Platform
• Bring Your Own AI Model: Route Cribl AI features through your own managed LLM for better control over privacy, compliance, and AI spend.
• Reliability Improvements: Persistent Queue stability updates and fixes for HTTPS proxy deadlocks and long-running HTTP requests.
There is SO MUCH MORE in this release. Check out the full release notes for Stream, Edge, Search, Lake, and Insights.
Cribl.Cloud customers are already upgraded, just click Deploy.
On-prem customers can download the update now.