Cribl Logstream Integration

Pre-built monitoring use cases for Cribl Logstream with native SPL integration, multi-worker group support, and comprehensive pipeline and route monitoring.

Key Capabilities

Pre-Built Use Cases

Monitor Cribl Logstream out of the box with dedicated Flex Object templates — covering pipelines, routes, worker processes, destinations, sources, system health, internal metrics, and license usage.

Native SPL Integration

All Cribl monitoring use cases are built on native SPL queries against the Cribl internal logs and metrics forwarded to Splunk. No additional agents or external scripts required.

Multi-Worker Group Support

Monitor multiple Cribl worker groups from a single TrackMe instance. Each worker group's health, throughput, and error rates are tracked independently with dedicated entity views.

Pipeline & Route Monitoring

Track the health and performance of every pipeline and route in your Cribl deployment. Detect processing anomalies, dropped events, and throughput deviations before they impact downstream systems.

Health & Destination Monitoring

Continuously monitor Cribl destination health, backpressure events, and delivery failures. Get alerted when destinations become unreachable or when event delivery rates drop unexpectedly.

Flex Object Integration

Every Cribl use case is implemented as a Flex Object template — fully editable, extensible, and integrated with TrackMe's alerting, maintenance, and RBAC frameworks.