General Discussions

Discussion List

• 
  Is there a way we could use cribl to aggregate our log source data and create a report from it?

  Answered Nick Kwiecien Nick Kwiecien 2.1K views 3 comments 0 points Most recent by Manish September 2023
• 
  Has anyone here used API calls to perform Health Checks from a F5 VIP to the Worker Nodes?

  Answered ✓ Christopher Owen 2.3K views 2 comments 0 points Most recent by Christopher Owen September 2023
• 
  Is is possible to import a packs directly from my own git via rest api?

  Answered Thomas Vogt 4.2K views 8 comments 0 points Most recent by David Maislin September 2023
• 
  Could I replace my Splunk HEC with Cribl for my Corelight Sensors?

  Answered Franky Laarits 3.5K views 5 comments 0 points Most recent by Franky Laarits September 2023
• 
  Guidance on when to add additional processors due to a large number of consecutive tasks?

  Answered Brendan Dalpe 2.7K views 5 comments 0 points Most recent by Jon Rust September 2023
• 
  Is there a way to rename a field and remove parts of it?

  Answered Jeremy Prescott 1.4K views 2 comments 0 points Most recent by David Maislin September 2023
• 
  Is anyone sending PerfmonMetrics through Cribl?

  Answered jlstanley 26.1K views 43 comments 0 points Most recent by morrisnky September 2023
• 
  What information is needed (software, storage, hardware and network) to calculate ROI?

  Answered Franky Laarits 6.5K views 10 comments 0 points Most recent by Franky Laarits September 2023
• 
  Is there an easy way to analyze the memory usage of specific procs and pipelines?

  Answered Brett Windom 3.8K views 6 comments 0 points Most recent by Brett Windom September 2023
• 
  Could the Azure Blob collector potentially be used to pull in Azure Table data too?

  Answered Ryan Hennessy 2.9K views 3 comments 0 points Most recent by Ryan Hennessy September 2023
• 
  How do we decide on a safe value for concurrency for Chronicle destination?

  Answered Eugene Katz 12.8K views 14 comments 0 points Most recent by Kam Amir September 2023
• 
  How do you guys get data into Cribl to transform before hitting Splunk indexers?

  Answered Robbert Hink 12.4K views 17 comments 0 points Most recent by Robbert Hink September 2023
• 
  Are there documented procedures for moving the leader to new hardware?

  Answered Dave Geller 4.3K views 7 comments 0 points Most recent by Brandon McCombs September 2023
• 
  Check if a cribl instance is configured as a worker or a leader from the command-line?

  Answered Franky Laarits 3K views 6 comments 0 points Most recent by Brandon McCombs September 2023
• 
  When does the license clock start midnight my local timezone or GMT?

  Answered Corey McClure 917 views 1 comment 0 points Most recent by Brendan Dalpe September 2023
• 
  What exactly does a Syslog source do when it experiences backpressure?

  Answered Quinn Stevenson 5.8K views 7 comments 0 points Most recent by Quinn Stevenson September 2023
• 
  Script source in a distributed environment - Run once to avoid duplicates?

  Answered Jeremy Prescott 2K views 3 comments 0 points Most recent by Harry Gardner September 2023
• 
  Does anyone else deal with a high rate of job failures for Office365 Message Trace logs?

  Answered Nick Kwiecien Nick Kwiecien 6.7K views 7 comments 0 points Most recent by JP Bourget September 2023
• 
  Monitor and get alerted as soon as there is any issue with Cribl pushing data to AWS?

  Answered Bradley Murphy 1.8K views 2 comments 0 points Most recent by Brendan Dalpe September 2023
• 
  Passing two Collect parameters using the same name in a REST collector using a Get collect method?

  Answered lstropole 1.7K views 2 comments 0 points Most recent by lstropole September 2023
• 
  How do I prevent the double underscore internal Cribl fields from being inserted into the _raw?

  Answered Eric Reusche 3.2K views 7 comments 0 points Most recent by Jon Rust September 2023
• 
  Is there any way to force a pipeline to ONLY run on a single worker?

  Answered Abby Strong 10.3K views 15 comments 0 points Most recent by Abby Strong September 2023
• 
  For CloudTrail, how would I format a query to look for the follow pattern?

  Answered ✓ Steve Litras 2.2K views 4 comments 0 points Most recent by Steve Litras September 2023
• 
  Moved: Licensing Stream vs Edge. - Is it the same license or are they separate?

  Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 2023
• 
  anyway to deal with unix epoch nanoseconds?

  Answered SonOfBuzi 5.4K views 7 comments 0 points Most recent by SonOfBuzi September 2023
• 
  Anyone know the proper method to extract something prior to pipelines to use for filtering?

  Answered mferris 5.9K views 10 comments 0 points Most recent by mferris September 2023
• 
  DNS Header Flag fields that are boolean, can I convert this to ECS by just having one object

  Answered Sheldon Carmichael 19.1K views 30 comments 0 points Most recent by Sheldon Carmichael September 2023
• 
  Is there a way to debug a kafka input?

  Answered Taylor Mill 1.6K views 2 comments 0 points Most recent by Taylor Mill September 2023
• 
  Updates to the Sandbox platform's verification code functionality

  Brendan Dalpe 752 views 0 comments 1 point Started by Brendan Dalpe September 2023
• 
  Getting no results with DB Connect

  Answered ✓ noura ali 2.5K views 3 comments 0 points Most recent by noura ali September 2023