We have updated our Terms of Service, Code of Conduct, and Addendum.

General Discussions

Discuss general Cribl topics with your peers.

Could the Azure Blob collector potentially be used to pull in Azure Table data too?

Answered Ryan Hennessy 2.3K views 3 comments 0 points Most recent by Ryan Hennessy September 2023
How do we decide on a safe value for concurrency for Chronicle destination?

Answered Eugene Katz 10.4K views 14 comments 0 points Most recent by Kam Amir September 2023
How do you guys get data into Cribl to transform before hitting Splunk indexers?

Answered Robbert Hink 10.2K views 17 comments 0 points Most recent by Robbert Hink September 2023
Are there documented procedures for moving the leader to new hardware?

Answered Dave Geller 3.4K views 7 comments 0 points Most recent by Brandon McCombs September 2023
Check if a cribl instance is configured as a worker or a leader from the command-line?

Answered Franky Laarits 2.4K views 6 comments 0 points Most recent by Brandon McCombs September 2023
When does the license clock start midnight my local timezone or GMT?

Answered Corey McClure 702 views 1 comment 0 points Most recent by Brendan Dalpe September 2023
What exactly does a Syslog source do when it experiences backpressure?

Answered Quinn Stevenson 4.6K views 7 comments 0 points Most recent by Quinn Stevenson September 2023
Script source in a distributed environment - Run once to avoid duplicates?

Answered Jeremy Prescott 1.6K views 3 comments 0 points Most recent by Harry Gardner September 2023
Does anyone else deal with a high rate of job failures for Office365 Message Trace logs?

Answered Nick Kwiecien Nick Kwiecien 5.3K views 7 comments 0 points Most recent by JP Bourget September 2023
Monitor and get alerted as soon as there is any issue with Cribl pushing data to AWS?

Answered Bradley Murphy 1.4K views 2 comments 0 points Most recent by Brendan Dalpe September 2023
Passing two Collect parameters using the same name in a REST collector using a Get collect method?

Answered lstropole 1.3K views 2 comments 0 points Most recent by lstropole September 2023
How do I prevent the double underscore internal Cribl fields from being inserted into the _raw?

Answered Eric Reusche 2.5K views 7 comments 0 points Most recent by Jon Rust September 2023
Is there any way to force a pipeline to ONLY run on a single worker?

Answered Abby Strong 8.1K views 15 comments 0 points Most recent by Abby Strong September 2023
For CloudTrail, how would I format a query to look for the follow pattern?

Answered ✓ Steve Litras 1.7K views 4 comments 0 points Most recent by Steve Litras September 2023
Moved: Licensing Stream vs Edge. - Is it the same license or are they separate?

Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 2023
anyway to deal with unix epoch nanoseconds?

Answered SonOfBuzi 4.2K views 7 comments 0 points Most recent by SonOfBuzi September 2023
Anyone know the proper method to extract something prior to pipelines to use for filtering?

Answered mferris 4.6K views 10 comments 0 points Most recent by mferris September 2023
DNS Header Flag fields that are boolean, can I convert this to ECS by just having one object

Answered Sheldon Carmichael 15.1K views 30 comments 0 points Most recent by Sheldon Carmichael September 2023
Is there a way to debug a kafka input?

Answered Taylor Mill 1.3K views 2 comments 0 points Most recent by Taylor Mill September 2023
Updates to the Sandbox platform's verification code functionality

Brendan Dalpe 602 views 0 comments 1 point Started by Brendan Dalpe September 2023
Getting no results with DB Connect

Answered ✓ noura ali 2K views 3 comments 0 points Most recent by noura ali September 2023
Using REST Collector source, is there a way to mark the each event from which URL it was retrieved

Answered ✓ noura ali 1.8K views 4 comments 0 points Most recent by Jon Rust September 2023
Official Release of Cribl v4.3.0

Tony Reinke - Cribl 843 views 0 comments 0 points Started by Tony Reinke - Cribl September 2023
Is it possible to POST to the API to trigger a collector?

Answered ✓ Erin Sweeney 1.6K views 2 comments 0 points Most recent by Andrew Luke September 2023
Full Visio Stencil for Cribl

Answered ✓ mateo.sosa 3K views 3 comments 0 points Most recent by Tony Reinke - Cribl September 2023
AWS Cross-Account Data Collection - "failed to AssumeRole"

Answered weiting lau 5.4K views 11 comments 0 points Most recent by weiting lau September 2023
Access Splunk UF meta data

Answered ✓ Mike Dupuis 7.3K views 9 comments 0 points Most recent by Anson VanDoren September 2023
Memory usage with Cribl Leader Logs for cpuPerc

Answered ✓ Anoop Ramachandran 1.8K views 3 comments 0 points Most recent by Oliver Hoppe August 2023
Trying to send data to Chronicle using a custom log type but it is not working

Answered ✓ Terry Mulligan 2.8K views 4 comments 0 points Most recent by Terry Mulligan August 2023
Cribl v4.2.2

Tony Reinke - Cribl 750 views 0 comments 0 points Started by Tony Reinke - Cribl August 2023

Categories

Popular Tags