General Discussions

Discussion List

• 
  Cribl announces their strategic partnership with Elastic

  Announcement Tony Reinke - Cribl 107 views 0 comments 2 points Started by Tony Reinke - Cribl November 15
• 
  Has anyone tried to onboard OneDrive Logs?

  Question Hillary Masciave 82 views 0 comments 0 points Started by Hillary Masciave November 15
• 
  Regarding Cribl License in case of business groups

  Answered Kumaresh Swaminathan 186 views 1 comment 0 points Most recent by Jon Rust November 14
• 
  What is the best way to reference a Worker Group Level Lookup File inside a pack?

  Answered ✓ JP Bourget 226 views 2 comments 0 points Most recent by JP Bourget November 9
• 
  Release of Cribl v4.4

  Tony Reinke - Cribl 95 views 0 comments 2 points Started by Tony Reinke - Cribl November 8
• 
  Does Cribl have any documentation for pulling Workday report logs?

  Answered ✓ itsjustjordyn 221 views 1 comment 0 points Most recent by Kyle McCririe November 2
• 
  does anyone know how to 'unflatten' fields in Cribl Stream?

  Answered ✓ Tony Reinke - Cribl 176 views 1 comment 0 points Most recent by Jon Rust October 30
• 
  Community Members Achieve Level 2 and Beyond in Cribl Curious, Plus Double Points Week Ahead!

  Tony Reinke - Cribl 173 views 1 comment 1 point Most recent by Shawn Cannon October 26
• 
  Does anyone know if the MinIO destination in Cribl Stream supports virtual hosting style addressing?

  Answered ✓ Chris Breshears 169 views 1 comment 0 points Most recent by Kyle McCririe October 26
• 
  Cribl v.4.3.1 has been released!

  Tony Reinke - Cribl 95 views 0 comments 0 points Started by Tony Reinke - Cribl October 11
• 
  Is it possible to disable certificate validation when connecting a Splunk Search Collector?

  Answered ✓ guifue 256 views 2 comments 1 point Most recent by guifue October 5
• 
  Is replay actually a feature in itself or just a technique implemented via a Source with different

  Answered ✓ Brian Wasserman 619 views 6 comments 0 points Most recent by Tony Reinke - Cribl October 4
• 
  Looking for help with Filters and Eval Functions

  Answered ✓ Erin Sweeney 235 views 2 comments 0 points Most recent by Erin Sweeney October 4
• 
  Is there a cribl equivalent to Splunk’s rex mode=sed?

  Answered ✓ Tony Reinke - Cribl 167 views 1 comment 0 points Most recent by David Maislin October 4
• 
  Using Persistent Queue drops thruput

  Answered ✓ Mike Dupuis 192 views 1 comment 0 points Most recent by Brandon McCombs October 4
• 
  Using a load balancer with RAW HTTP source, what to use for a health check?

  Answered ✓ Shawn Cannon 248 views 2 comments 0 points Most recent by xpac xpac October 4
• 
  Using "Webhook" Destination: Can we transform events to be used as HTTP requests?

  Answered ✓ benjamin.rader 351 views 3 comments 0 points Most recent by just October 4
• 
  Does anyone have an example of a working configuration to receive Palo Alto logs over HTTPS?

  Answered ✓ vupham 401 views 3 comments 5 points Most recent by Tony Reinke - Cribl October 2
• 
  Anyone have a good set up for querying Azure AD?

  Answered ✓ Tony Reinke - Cribl 195 views 1 comment 0 points Most recent by Tony Reinke - Cribl September 29
• 
  Cribl Stream Leader on Fargate, the container keeps running with unhealthy health check.

  Answered Joel Yue 169 views 1 comment 0 points Most recent by Tony Reinke - Cribl September 28
• 
  Injesting sysmon logs via Elastic API and events are getting dropped

  Answered Joel Yue 151 views 1 comment 0 points Most recent by itsjustjordyn September 26
• 
  Would my destination see the srcIP field as a string or as an IP field?

  Answered wcall_cribl 635 views 9 comments 0 points Most recent by itsjustjordyn September 26
• 
  I have several questions regarding Stream deployed in AWS...

  Question itsjustjordyn 113 views 0 comments 0 points Started by itsjustjordyn September 26
• 
  Any reason my leader doesn't want to grab 4.03?

  Answered JP Bourget 279 views 2 comments 0 points Most recent by Ben Marcus September 25
• 
  Moved: Processing Syslog messages and sending to Splunk

  Closed Michael Donnelly 1 view 0 comments 0 points Started by Michael Donnelly September 22
• 
  Dynamic Date in API URL

  Answered Tony Reinke - Cribl 162 views 1 comment 0 points Most recent by Ryan Hennessy September 22
• 
  Moved: would it be possible to use the same encryption key in an Edge fleet and in a Stream worker …

  Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 22
• 
  Is there documentation for implementing local storage archival and replay functions?

  Answered ✓ Neil Parisi 424 views 6 comments 0 points Most recent by xpac xpac September 22
• 
  how would i configure encryption from a splunk uf to cribl cloud?

  Answered ✓ Franky Laarits 479 views 4 comments 0 points Most recent by Jon Rust September 22
• 
  Is it possible to configure Cribl to sign the commits to Github?

  Answered ✓ Closed Eugene Katz 163 views 1 comment 0 points Most recent by Ben Marcus September 22
• 
  Recurring UI problem with one worker group. Leader restart helps temporarily.

  Answered Eugene Katz 1.5K views 19 comments 0 points Most recent by Eugene Katz September 22