Cribl is user-friendly, which I think is one of its most valuable features. When I learned from my senior and Cribl University, at first sight, it was very user-friendly. The UI of Cribl is very good for new users, a particular client, or anybody to understand. The ingestion pipelines, basically the pipeline feature, is very great. If a client or security team only needed security logs, we can send security logs to Splunk. We can send application logs to, suppose, we want to send to AWS, you could separate it via Cribl. Suppose we are getting lots of logs, but we want to separate it from one platform; you could separate it and send it to different platforms if you want. This is the feature of Cribl I appreciate the most. The Search in Place feature of Cribl is very impressive. Suppose we have Kubernetes logs coming from Kubernetes or an AWS server, and we are sending it via Cribl to Splunk. We could also search the logs from the source. There are three flows in this: source, destination, and between them, there is the pipeline. Suppose we are getting logs from the source, which are original logs, and we are modifying them through the pipeline. If we want to debug and check how the log is being modified, the searching feature belongs in both the destination and source. We could see the original and the modified one. This feature of Cribl is very great.
