Data Flow

Data Enrichment redesign — Manage all enrichment types in a unified table with search and type filtering. Add enrichments using type shortcut cards or the + Add enrichment button. Edit any enrichment by selecting its row to open the configuration drawer. The keys usage indicator shows how many enrichment keys are in use relative to your plan limit. Learn more

Streaming enhancements and rule-filtering in the Pipeline Analyzer for clearer pipeline visibility. Learn more

Compare mode for Pipeline Analyzer. Learn more

Schema Manager — See if fields are fully mapped, unmapped, or partially mapped, right inside Schema Manager. Learn more

See inside your data with Pipeline Analyzer — Pipeline Analyzer gives you real-time visibility into your log pipeline. Instantly inspect logs as they're ingested, view parsing rules in execution order, and capture live log streams. Learn more

Take control with Quota Rules — Quota Rules let you set precise usage limits across your telemetry pipeline. Enforce automated blocks, control costs, prevent noisy data spikes. Learn more

Protect data cleanliness — Predefine field types, maintain structured data, and eliminate ingestion order dependencies for more accurate and efficient monitoring. Learn more

Integrate Coralogix with your data pipelines with Forwarders — Seamlessly send parsed and enriched log data from Coralogix to an external kafka cluster with Forwarders. Learn more

Custom log enrichment is now even more intuitive — Enrich logs from specific columns in your CSV file, download enriched files, and use them as data sources in DataPrime queries. Learn more

Log normalization for simplified data analysis — Leverage new log normalization feature to standardize keys for commonly occurring values across various security log types. Learn more

Set Multiple Retention Periods with Archive Tags — Control the length of archive retention for different groups of logs. Define different lifecycle policies in the Setup Archive page. View Documentation >. Learn more

New Parsing Rules — Introducing Stringify JSON Field and Parse JSON Field rules to parse escaped JSON values within a field to a valid JSON object and vice versa. Learn More >. Learn more