General Discussions

Discussion List

• 
  Regex to Grab Key:Value

  Answered ✓ ekalby 1.9K views 2 comments 0 points Most recent by pie March 2023
• 
  Technical question on stream file monitor

  Answered ✓ SonOfBuzi 1.4K views 2 comments 1 point Most recent by Brendan Dalpe March 2023
• 
  Odd error message

  Answered fshelton79 1.2K views 1 comment 1 point Most recent by Brendan Dalpe March 2023
• 
  Problem with Worker connecting to Leader node

  Answered ✓ mikeylee 4.5K views 4 comments 2 points Most recent by Martin Prado March 2023
• 
  Fundamental question on git deployment in distributed setup

  Answered ✓ Govardhanen Gopal 1.7K views 1 comment 1 point Most recent by Brendan Dalpe March 2023
• 
  Python Collector Script issue

  Answered Shawn Cannon 2K views 3 comments 0 points Most recent by Brendan Dalpe March 2023
• 
  How to use first line in CSV as the headers for Parser function

  Answered ✓ Shawn Cannon 1.7K views 2 comments 2 points Most recent by Shawn Cannon March 2023
• 
  How do you capture, work on, live preview a massive event without browser JS engine timing out?

  Answered ✓ Govardhanen Gopal 1.7K views 1 comment 0 points Most recent by Jon Rust March 2023
• 
  Cribl Dockers are not persisting config

  Answered ✓ chrisboy68 2.2K views 3 comments 0 points Most recent by chrisboy68 March 2023
• 
  Upgrading splunk app fails because cribl is working

  Answered ✓ SonOfBuzi 2.5K views 2 comments 0 points Most recent by Johan Woger March 2023
• 
  Where to find GeoIP files

  Answered ✓ jroot42 2K views 3 comments 0 points Most recent by Jon Rust March 2023
• 
  Question on pipeline timeout during testing vs real time running

  Answered Govardhanen Gopal 3.7K views 3 comments 0 points Most recent by Jon Rust March 2023
• 
  Migrate from Cribl Standalone to Cribl Distributed(+ Edge)

  Answered ✓ Govardhanen Gopal 3.1K views 2 comments 1 point Most recent by Govardhanen Gopal March 2023
• 
  Office 365 Activity Logs

  Answered mluescher 1.3K views 1 comment 0 points Most recent by CriblNinja March 2023
• 
  Can I aggregate events multiple collector tasks from a single collection job into a single event?

  Answered cupcake 1.4K views 1 comment 0 points Most recent by Ahmed Kira March 2023
• 
  Patterns for suppressing Splunk cooked data

  Answered ✓ hpapazov 3.1K views 5 comments 0 points Most recent by Jon Rust March 2023
• 
  Splunk HEC Destination - Next Processing Queue

  Answered ✓ Quinn Stevenson 2.3K views 2 comments 0 points Most recent by Quinn Stevenson March 2023
• 
  We want to enable persistent queuing and want to know how large we can make the max file size?

  Answered ✓ Erin Sweeney 1.3K views 1 comment 0 points Most recent by Brandon McCombs March 2023
• 
  Has anyone had a collector persist collecting after being deleted?

  Answered ✓ Shane Daniels 1.8K views 1 comment 0 points Most recent by pie March 2023
• 
  HEC Indexer Acknowledgment for HEC destinations?

  Answered ✓ josh.hart 1.8K views 2 comments 2 points Most recent by josh.hart March 2023
• 
  Does GitOps only make changes via the UI read-only or are changes via API read-only also?

  Answered ✓ Shane Daniels 1.7K views 1 comment 0 points Most recent by Chris March 2023
• 
  What are the differences between your free version and the licensed option?

  Answered ✓ Shane Daniels 1.3K views 1 comment 0 points Most recent by Jon Rust March 2023
• 
  What open source software does Cribl Stream leverage?

  Answered ✓ Shane Daniels 1.3K views 1 comment 0 points Most recent by dritan March 2023
• 
  Is there a way to filter out multiple IP address without using multiple drop functions?

  Answered ✓ Shane Daniels 1.4K views 1 comment 1 point Most recent by Jon Rust March 2023
• 
  SplunkTCP Source with UF using compress=true

  Answered ✓ davec 1.4K views 1 comment 0 points Most recent by Clint Sharp March 2023
• 
  Persistent Queue Question and Upstream Block Signals

  Answered ✓ jccurtis 2.1K views 2 comments 0 points Most recent by jccurtis March 2023
• 
  Why is Auto Timestamp failing to extract a timestamp?

  Answered ✓ Jon Rust 1.8K views 1 comment 1 point Most recent by Jon Rust March 2023
• 
  Is there a limit to file size when importing data from object stores?

  Answered ✓ Jon Rust 3.9K views 4 comments 1 point Most recent by Brandon McCombs March 2023
• 
  Is there a way to measure the size of a field and then only keep XX bytes of it?

  Answered ✓ Erin Sweeney 1.3K views 1 comment 0 points Most recent by Brandon McCombs March 2023
• 
  How do I pull out a substring from my _raw, and put it at the **beginning** of the event?

  Answered ✓ Erin Sweeney 1.3K views 1 comment 0 points Most recent by Jon Rust March 2023