Cribl Is the Last Observability Asset Still Priced Off 2024
Four scaled independents left the category in ninety days, and the remaining shortlist includes one name trading at a quarter of its peers' multiple on a mark set before the agent-telemetry wave began.
What the acquirers were actually buying
The total is the boring number. The interesting one is whose treasury wrote the largest check: Palo Alto Networks — a security company — paid $3.35B for Chronosphere, more than Snowflake paid for Observe ($1B) and over three times Dynatrace's $915M for Arize AI. Order the prints that way and the category changes shape. Nobody paid up for IT monitoring here; they paid up for visibility and safeguards over autonomous agents, out of a security budget, on security multiples rather than APM ones. That $3.35B is also $3.35B not spent on anything else on the acquirer's roadmap this year, which is the part the press release never mentions. Dynatrace's Arize print sets a hard floor comp for agent and model-behavior tracing, and Elastic's $85M for Deductive AI sets the tuck-in floor underneath it. Call it an $85M–$915M underwriting band for seed and Series A in agent tracing, evals and guardrails. Printed in the last two weeks, not projected.
The mark dispersion the growth story left behind
Same category, same tailwind, same quarter, and roughly a 5x spread in implied multiple, driven almost entirely by when each company last went out for money.
| Company | ARR | Growth (window) | Last mark | Implied multiple | Exit posture |
|---|---|---|---|---|---|
| ClickHouse | $350M | +40% since May 2026 | $15B (Jan 2026) | ~43x | Refused sale; many inbounds |
| Grafana | $400M+ | Recent pickup (AI assistant) | $9.6B (Mar 2026) | ~24x | Most-named banker target |
| Cribl | ~$400M | +33% since Feb 2026 | $3.5B (Aug 2024) | ~9x | IPO targeted in ~2 years |
Cribl's mark is 24 months old against ARR that has moved 33% in six months, and management has said out loud that it intends to list inside roughly two years. The repricing catalyst sits on a calendar rather than in a thesis, which is a materially different risk profile from waiting for a category to be discovered.
Where the workload is actually going
The quiet competitive datapoint is worth more than any of the deal prices: OpenAI's ClickHouse usage ramped sharply this year while OpenAI remains a Datadog customer. That is incumbent observability spend leaking to a cheaper, open-source-rooted alternative at the single most-watched reference account in software. The Information's Briefing and Dealmaker coverage corroborate the same figure from different angles, with ClickHouse past $350M recurring revenue and OpenAI and agent workloads named as the drivers. Cribl sells the identical arbitrage as arithmetic rather than vision: data compounding around 30% annually against flat budgets, executed for Zoom, ServiceNow and Hilton by routing telemetry into cheaper storage.
Four assets left the market in ninety days and a fifth publicly declined to sell — bidder demand now concentrates on a two-name shortlist.
What breaks the trade
Discount each number by its provenance, because the provenance is uneven: Cribl's ARR is self-reported, Grafana's "pickup" comes from its CMO with no figures attached, and the M&A-appetite color rests on unnamed bankers. This is probably the wrong worry, but the systemic risk is anchor failure: if Datadog's public multiple compresses on displacement evidence, every private mark in that table loses its reference point, and the 43x asset falls furthest. The counterweight is that this demand is cost-takeout driven rather than discretionary innovation spend, which makes it one of the few AI-adjacent categories that still works in a downturn. Both things can be true, and the calendar decides which one gets priced first.
What to do
Commission a pricing study on Cribl secondaries this week — canvass 2024-vintage holders and employee tender channels to establish where blocks actually clear against the August 2024 $3.5B mark.
Require cohort-level concentration disclosure — top-10 accounts, NRR by cohort, contract duration — as a condition of diligence on any ClickHouse exposure at or above the January $15B mark.
Re-mark every data-infra and observability-adjacent position against the $3.35B / $1B / $915M / $85M comp set before quarter-end reporting, flagging anything still priced off pre-2026 APM comparables.