General Discussions

Discussion List

• 
  Can cribl read .trc files that are produced by SQL Server?

  Answered Nick Kwiecien Nick Kwiecien 2.9K views 4 comments 0 points Most recent by Brandon McCombs September 2023
• 
  Database connection unsuccessful: Failed to connect - What certificate is it using?

  Answered Shawn Cannon 30.9K views 67 comments 0 points Most recent by Jeremiah Ross September 2023
• 
  Are there any best practices to collect cribl logs and forward to Splunk?

  Answered Martin Prado 4.4K views 5 comments 0 points Most recent by Martin Prado September 2023
• 
  Is there a way we could use cribl to aggregate our log source data and create a report from it?

  Answered Nick Kwiecien Nick Kwiecien 2.3K views 3 comments 0 points Most recent by Manish September 2023
• 
  Has anyone here used API calls to perform Health Checks from a F5 VIP to the Worker Nodes?

  Answered ✓ Christopher Owen 2.5K views 2 comments 0 points Most recent by Christopher Owen September 2023
• 
  Is is possible to import a packs directly from my own git via rest api?

  Answered Thomas Vogt 4.5K views 8 comments 0 points Most recent by David Maislin September 2023
• 
  Could I replace my Splunk HEC with Cribl for my Corelight Sensors?

  Answered Franky Laarits 3.7K views 5 comments 0 points Most recent by Franky Laarits September 2023
• 
  Guidance on when to add additional processors due to a large number of consecutive tasks?

  Answered Brendan Dalpe 2.8K views 5 comments 0 points Most recent by Jon Rust September 2023
• 
  Is there a way to rename a field and remove parts of it?

  Answered Jeremy Prescott 1.5K views 2 comments 0 points Most recent by David Maislin September 2023
• 
  Is anyone sending PerfmonMetrics through Cribl?

  Answered jlstanley 27.9K views 43 comments 0 points Most recent by morrisnky September 2023
• 
  What information is needed (software, storage, hardware and network) to calculate ROI?

  Answered Franky Laarits 6.9K views 10 comments 0 points Most recent by Franky Laarits September 2023
• 
  Is there an easy way to analyze the memory usage of specific procs and pipelines?

  Answered Brett Windom 4.1K views 6 comments 0 points Most recent by Brett Windom September 2023
• 
  Could the Azure Blob collector potentially be used to pull in Azure Table data too?

  Answered Ryan Hennessy 3K views 3 comments 0 points Most recent by Ryan Hennessy September 2023
• 
  How do we decide on a safe value for concurrency for Chronicle destination?

  Answered Eugene Katz 13.6K views 14 comments 0 points Most recent by Kam Amir September 2023
• 
  How do you guys get data into Cribl to transform before hitting Splunk indexers?

  Answered Robbert Hink 13.1K views 17 comments 0 points Most recent by Robbert Hink September 2023
• 
  Are there documented procedures for moving the leader to new hardware?

  Answered Dave Geller 4.6K views 7 comments 0 points Most recent by Brandon McCombs September 2023
• 
  Check if a cribl instance is configured as a worker or a leader from the command-line?

  Answered Franky Laarits 3.2K views 6 comments 0 points Most recent by Brandon McCombs September 2023
• 
  When does the license clock start midnight my local timezone or GMT?

  Answered Corey McClure 979 views 1 comment 0 points Most recent by Brendan Dalpe September 2023
• 
  What exactly does a Syslog source do when it experiences backpressure?

  Answered Quinn Stevenson 6.1K views 7 comments 0 points Most recent by Quinn Stevenson September 2023
• 
  Script source in a distributed environment - Run once to avoid duplicates?

  Answered Jeremy Prescott 2.2K views 3 comments 0 points Most recent by Harry Gardner September 2023
• 
  Does anyone else deal with a high rate of job failures for Office365 Message Trace logs?

  Answered Nick Kwiecien Nick Kwiecien 7.1K views 7 comments 0 points Most recent by JP Bourget September 2023
• 
  Monitor and get alerted as soon as there is any issue with Cribl pushing data to AWS?

  Answered Bradley Murphy 1.9K views 2 comments 0 points Most recent by Brendan Dalpe September 2023
• 
  Passing two Collect parameters using the same name in a REST collector using a Get collect method?

  Answered lstropole 1.8K views 2 comments 0 points Most recent by lstropole September 2023
• 
  How do I prevent the double underscore internal Cribl fields from being inserted into the _raw?

  Answered Eric Reusche 3.4K views 7 comments 0 points Most recent by Jon Rust September 2023
• 
  Is there any way to force a pipeline to ONLY run on a single worker?

  Answered Abby Strong 11K views 15 comments 0 points Most recent by Abby Strong September 2023
• 
  For CloudTrail, how would I format a query to look for the follow pattern?

  Answered ✓ Steve Litras 2.3K views 4 comments 0 points Most recent by Steve Litras September 2023
• 
  Moved: Licensing Stream vs Edge. - Is it the same license or are they separate?

  Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 2023
• 
  anyway to deal with unix epoch nanoseconds?

  Answered SonOfBuzi 5.8K views 7 comments 0 points Most recent by SonOfBuzi September 2023
• 
  Anyone know the proper method to extract something prior to pipelines to use for filtering?

  Answered mferris 6.3K views 10 comments 0 points Most recent by mferris September 2023
• 
  DNS Header Flag fields that are boolean, can I convert this to ECS by just having one object

  Answered Sheldon Carmichael 20.3K views 30 comments 0 points Most recent by Sheldon Carmichael September 2023