

SAS Enterprise Guide and Cribl are competing products in data analytics and management. SAS holds an advantage due to its robust analytics platform and comprehensive data integration capabilities, appealing for complex analytical endeavors.
Features: SAS Enterprise Guide provides a robust analytics suite with advanced data management and integration, allowing sophisticated data analysis. Cribl excels in streamlining data flow with dynamic processing, scalable architecture, and intuitive interface, offering unique customization options.
Room for Improvement: SAS could enhance flexibility and customization to better adapt to specific user needs, improve modern UI design, and reduce initial setup complexity. Cribl could strengthen complex analytical capabilities, advance data integration features, and streamline user onboarding for non-technical users.
Ease of Deployment and Customer Service: SAS offers a traditional deployment model with solid customer support, beneficial for organizations with stable IT setups. Cribl provides versatile deployment options, accommodating various platforms, supported by adaptable customer service responsive to modern business environments.
Pricing and ROI: SAS features higher upfront costs but promises substantial long-term ROI through its powerful analytics functions. Cribl, with a more cost-effective setup, potentially delivers quicker ROI due to its scalable and flexible infrastructure, appealing to budget-conscious businesses seeking efficacy.
What we've seen is really an overall reduction of just shy of 40% in our ingest into our SIM platform versus prior to having Cribl.
The second thing is that data aggregation, sampling, and reduction that we're able to do of the data, lowering our overall data volume, both traversing the network as well as what's being stored inside of our final solutions.
In terms of reduction, we were able to save almost ~40% of our total cost.
I have seen investment using SAS Enterprise Guide as it has some capabilities which require very little manpower, and also scheduling jobs and flows reduces human intervention.
They had extensive expertise with the product and were able to facilitate everything we needed.
Usually, within an hour, we get a response, and we are able to work with them back and forth until we resolve the issues.
Sometimes by hearing the problem itself, they will know what the solution is, and they will let us know how to resolve it, and we do it immediately.
The customer support of SAS is always outstanding.
The infrastructure behind Cribl Search is also scalable as it uses a CPU and just spawns horizontally more instances as it demands and requires.
Compared to other SIEM tools I use, any slight change on the operating system end impacts a lot on our SIEM tools and other things, but Cribl performs well in that regard.
Cribl performs effectively across both market segments.
SAS Enterprise Guide is highly scalable.
Migrating from those SC4S servers to Cribl worker nodes has truly been a game-changer.
Regarding scalability, we started with zero servers and have around 285 servers now.
Cribl is designed to deal with certain kinds of loads and is not designed to handle any scenario in the market.
A more stringent role-based access control feature would enhance security and allow granular control over what users can see and access.
When passing query logs or DNS logs, if certain malicious query patterns need to be identified or if fast-flux attacks are happening, Cribl can report that and those would definitely be a plus for them.
I would advise others looking to implement Cribl that if they are evolving Cribl Search, it would be very interesting to see more capability, more flexibility, and more ways to share the data similar to Splunk.
Some data visualization tools may be improved by SAS Enterprise Guide.
Over time, the licensing cost has increased.
It was cheaper than the Splunk license.
Splunk is more expensive, and Cribl appears to be more affordable.
The data reduction and preprocessing capabilities make Cribl really unique.
Cribl has a feature called JSON Unroll or Unroll function that allows you to differentiate the events; each event will come ingested as a single log instead of piling it up with multiple events.
The Cribl UI is very simple and easy to use, particularly when working with data from various sources; it makes it very easy to create pipelines, add complex logic to those pipelines, and then gives you a preview of what your data looks like before applying that pipeline and what you get after.
The best feature of SAS Enterprise Guide is scheduling jobs and flows.
| Product | Mindshare (%) |
|---|---|
| Cribl | 36.0% |
| Onum | 11.0% |
| BindPlane OP | 9.6% |
| Other | 43.4% |
| Product | Mindshare (%) |
|---|---|
| SAS Enterprise Guide | 7.7% |
| Alteryx Designer Cloud | 8.5% |
| Alteryx | 8.1% |
| Other | 75.7% |


| Company Size | Count |
|---|---|
| Small Business | 50 |
| Midsize Enterprise | 8 |
| Large Enterprise | 35 |
| Company Size | Count |
|---|---|
| Small Business | 3 |
| Midsize Enterprise | 6 |
| Large Enterprise | 16 |
Cribl offers advanced data transformation and routing with features such as data reduction, plugin configurations, and log collection within a user-friendly framework supporting various deployments, significantly reducing data volumes and costs.
Cribl is designed to streamline data management, offering real-time data transformation and efficient log management. It supports seamless SIEM migration, enabling organizations to optimize costs associated with platforms like Splunk through data trimming. The capability to handle multiple data destinations and compression eases log control. With flexibility across on-prem, cloud, or hybrid environments, Cribl provides an adaptable interface that facilitates quick data model replication. While it significantly reduces data volumes, enhancing overall efficiency, there are areas for improvement, including compatibility with legacy systems and integration with enterprise products. Organizations can enhance their operational capabilities through certification opportunities and explore added functionalities tailored towards specific industry needs.
What are Cribl's most important features?Cribl sees extensive use in industries prioritizing efficient data management and cost optimization. Organizations leverage its capabilities to connect between different data sources, including cloud environments, improving both data handling and storage efficiency. Its customization options appeal to firms needing specific industry compliance and operational enhancements.
SAS Enterprise Guide features a user-friendly visual interface that simplifies data exploration and management. With its compatibility with other software, it supports data manipulation, analysis, and preparation across industries.
SAS Enterprise Guide offers a range of functionalities ideal for both novice and advanced users. Its visual interface, combined with features like the query builder and drag-and-drop tools, enables data exploration without coding. The tool shines in data management, predictive analytics, and cleaning, providing a platform compatible with other software and facilitating large dataset handling. The reporting and ETL capability further support comprehensive data strategies. Despite strengths, it could benefit from better machine learning integration and enhanced visualization without coding. Challenges also include stability issues, limited community support, and performance faltering with large datasets, especially in environments like Netezza.
What are the key features of SAS Enterprise Guide?SAS Enterprise Guide finds application in industries like banking, pharmaceuticals, and healthcare, mainly for tasks involving data manipulation, statistical analysis, and quality assurance. Its ability to handle large datasets while providing an interface for non-programmers makes it a choice for data modeling and ETL processes. Organizations leverage its integration capabilities for data strategies, enabling agility in data processing and insights generation.
We monitor all Observability Pipeline Software reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.