We have updated our Terms of Service, Code of Conduct, and Addendum.

General Discussions

Discuss general Cribl topics with your peers.

For CloudTrail, how would I format a query to look for the follow pattern?

Answered ✓ Steve Litras 2.5K views 4 comments 0 points Most recent by Steve Litras September 2023
Moved: Licensing Stream vs Edge. - Is it the same license or are they separate?

Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 2023
anyway to deal with unix epoch nanoseconds?

Answered SonOfBuzi 6.4K views 7 comments 0 points Most recent by SonOfBuzi September 2023
Anyone know the proper method to extract something prior to pipelines to use for filtering?

Answered mferris 7K views 10 comments 0 points Most recent by mferris September 2023
DNS Header Flag fields that are boolean, can I convert this to ECS by just having one object

Answered Sheldon Carmichael 22.4K views 30 comments 0 points Most recent by Sheldon Carmichael September 2023
Is there a way to debug a kafka input?

Answered Taylor Mill 1.9K views 2 comments 0 points Most recent by Taylor Mill September 2023
Updates to the Sandbox platform's verification code functionality

Brendan Dalpe 841 views 0 comments 1 point Started by Brendan Dalpe September 2023
Getting no results with DB Connect

Answered ✓ noura ali 3K views 3 comments 0 points Most recent by noura ali September 2023
Using REST Collector source, is there a way to mark the each event from which URL it was retrieved

Answered ✓ noura ali 2.8K views 4 comments 0 points Most recent by Jon Rust September 2023
Official Release of Cribl v4.3.0

Tony Reinke - Cribl 1.1K views 0 comments 0 points Started by Tony Reinke - Cribl September 2023
Is it possible to POST to the API to trigger a collector?

Answered ✓ Erin Sweeney 2.3K views 2 comments 0 points Most recent by Andrew Luke September 2023
Full Visio Stencil for Cribl

Answered ✓ mateo.sosa 4.4K views 3 comments 0 points Most recent by Tony Reinke - Cribl September 2023
AWS Cross-Account Data Collection - "failed to AssumeRole"

Answered weiting lau 8.1K views 11 comments 0 points Most recent by weiting lau September 2023
Access Splunk UF meta data

Answered ✓ Mike Dupuis 10.6K views 9 comments 0 points Most recent by Anson VanDoren September 2023
Memory usage with Cribl Leader Logs for cpuPerc

Answered ✓ Anoop Ramachandran 2.7K views 3 comments 0 points Most recent by Oliver Hoppe August 2023
Trying to send data to Chronicle using a custom log type but it is not working

Answered ✓ Terry Mulligan 4.2K views 4 comments 0 points Most recent by Terry Mulligan August 2023
Cribl v4.2.2

Tony Reinke - Cribl 1K views 0 comments 0 points Started by Tony Reinke - Cribl August 2023
The TCP output processor has paused the data flow

Answered ✓ Thinus Swart 4.8K views 4 comments 0 points Most recent by Thinus Swart August 2023
What is the per node -2 referring to in Cribl Sizing?

Answered lou 2.8K views 3 comments 0 points Most recent by Brendan Dalpe August 2023
What (D&D) alignment are you?

Poll Tony Reinke - Cribl 1.5K views 1 comment 0 points Most recent by Tony Reinke - Cribl August 2023
Cribl setup in GitOps mode with Azure AD Auth

Answered Joshua Cook 3.9K views 5 comments 0 points Most recent by Joshua Cook August 2023
Getting "Forbidden" when generating a bearer token for GitOps sync

Answered ✓ Joshua Cook 13.7K views 16 comments 0 points Most recent by nicktank August 2023
Kicking off Black Hat with a strategic partnership with Exabeam!

Tony Reinke - Cribl 643 views 0 comments 0 points Started by Tony Reinke - Cribl August 2023
What is the name of the object containing _raw?

Answered ✓ andrewski 2K views 2 comments 0 points Most recent by andrewski August 2023
How is Free Memory calculated per worker?

Answered ✓ Tony Reinke - Cribl 1K views 1 comment 0 points Most recent by Jon Rust August 2023
How do i retrieve the data from the "_raw" field for Chronicle destination

Answered lou 4.8K views 6 comments 0 points Most recent by lou August 2023
What is Cribl up to in August?

Tony Reinke - Cribl 682 views 0 comments 0 points Started by Tony Reinke - Cribl August 2023
Cribl Community Swag

Tony Reinke - Cribl 888 views 0 comments 0 points Started by Tony Reinke - Cribl July 2023
Config for Splunk Universal Forwarder

Answered ✓ Matt Feeley 4.2K views 4 comments 0 points Most recent by Paul Dott July 2023
Cribl Stream, Edge, Search v4.2.0 and AppScope v1.4.1

Tony Reinke - Cribl 700 views 0 comments 0 points Started by Tony Reinke - Cribl July 2023

Categories

Popular Tags