General Discussions

Discussion List

• 
  Monitor and get alerted as soon as there is any issue with Cribl pushing data to AWS?

  Answered Bradley Murphy 150 views 2 comments 0 points Most recent by Brendan Dalpe September 22
• 
  Passing two Collect parameters using the same name in a REST collector using a Get collect method?

  Answered lstropole 128 views 2 comments 0 points Most recent by lstropole September 22
• 
  How do I prevent the double underscore internal Cribl fields from being inserted into the _raw?

  Answered Eric Reusche 238 views 7 comments 0 points Most recent by Jon Rust September 22
• 
  Is there any way to force a pipeline to ONLY run on a single worker?

  Answered Abby Strong 1.2K views 15 comments 0 points Most recent by Abby Strong September 22
• 
  For CloudTrail, how would I format a query to look for the follow pattern?

  Answered ✓ Steve Litras 315 views 4 comments 0 points Most recent by Steve Litras September 22
• 
  Moved: Licensing Stream vs Edge. - Is it the same license or are they separate?

  Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 22
• 
  anyway to deal with unix epoch nanoseconds?

  Answered SonOfBuzi 393 views 7 comments 0 points Most recent by SonOfBuzi September 22
• 
  Anyone know the proper method to extract something prior to pipelines to use for filtering?

  Answered mferris 515 views 10 comments 0 points Most recent by mferris September 22
• 
  DNS Header Flag fields that are boolean, can I convert this to ECS by just having one object

  Answered Sheldon Carmichael 1.9K views 30 comments 0 points Most recent by Sheldon Carmichael September 22
• 
  Is there a way to debug a kafka input?

  Answered Taylor Mill 125 views 2 comments 0 points Most recent by Taylor Mill September 22
• 
  Updates to the Sandbox platform's verification code functionality

  Brendan Dalpe 68 views 0 comments 1 point Started by Brendan Dalpe September 18
• 
  Getting no results with DB Connect

  Answered ✓ noura ali 227 views 3 comments 0 points Most recent by noura ali September 14
• 
  Using REST Collector source, is there a way to mark the each event from which URL it was retrieved

  Answered ✓ noura ali 204 views 4 comments 0 points Most recent by Jon Rust September 14
• 
  Official Release of Cribl v4.3.0

  Tony Reinke - Cribl 131 views 0 comments 0 points Started by Tony Reinke - Cribl September 13
• 
  Is it possible to POST to the API to trigger a collector?

  Answered ✓ Erin Sweeney 155 views 2 comments 0 points Most recent by Andrew Luke September 13
• 
  Full Visio Stencil for Cribl

  Answered ✓ mateo.sosa 494 views 3 comments 0 points Most recent by Tony Reinke - Cribl September 8
• 
  AWS Cross-Account Data Collection - "failed to AssumeRole"

  Answered weiting lau 915 views 11 comments 0 points Most recent by weiting lau September 6
• 
  Access Splunk UF meta data

  Answered ✓ Mike Dupuis 1K views 9 comments 0 points Most recent by Anson VanDoren September 5
• 
  Memory usage with Cribl Leader Logs for cpuPerc

  Answered ✓ Anoop Ramachandran 282 views 3 comments 0 points Most recent by Oliver Hoppe August 29
• 
  Trying to send data to Chronicle using a custom log type but it is not working

  Answered ✓ Terry Mulligan 303 views 4 comments 0 points Most recent by Terry Mulligan August 23
• 
  Cribl v4.2.2

  Tony Reinke - Cribl 110 views 0 comments 0 points Started by Tony Reinke - Cribl August 21
• 
  The TCP output processor has paused the data flow

  Answered ✓ Thinus Swart 406 views 4 comments 0 points Most recent by Thinus Swart August 17
• 
  What is the per node -2 referring to in Cribl Sizing?

  Answered lou 323 views 3 comments 0 points Most recent by Brendan Dalpe August 16
• 
  What (D&D) alignment are you?

  Poll Tony Reinke - Cribl 131 views 1 comment 0 points Most recent by Tony Reinke - Cribl August 11
• 
  Cribl setup in GitOps mode with Azure AD Auth

  Answered Joshua Cook 264 views 5 comments 0 points Most recent by Joshua Cook August 10
• 
  Getting "Forbidden" when generating a bearer token for GitOps sync

  Answered ✓ Joshua Cook 890 views 16 comments 0 points Most recent by nicktank August 10
• 
  Kicking off Black Hat with a strategic partnership with Exabeam!

  Tony Reinke - Cribl 50 views 0 comments 0 points Started by Tony Reinke - Cribl August 9
• 
  What is the name of the object containing _raw?

  Answered ✓ andrewski 255 views 2 comments 0 points Most recent by andrewski August 7
• 
  How is Free Memory calculated per worker?

  Answered ✓ Tony Reinke - Cribl 70 views 1 comment 0 points Most recent by Jon Rust August 7
• 
  How do i retrieve the data from the "_raw" field for Chronicle destination

  Answered lou 334 views 6 comments 0 points Most recent by lou August 5