General Discussions

Discussion List

• 
  Splunk HEC Destination - Next Processing Queue

  Answered ✓ Quinn Stevenson 157 views 2 comments 0 points Most recent by Quinn Stevenson March 27
• 
  We want to enable persistent queuing and want to know how large we can make the max file size?

  Answered ✓ Erin Sweeney 83 views 1 comment 0 points Most recent by Brandon McCombs March 27
• 
  Has anyone had a collector persist collecting after being deleted?

  Answered ✓ Shane Daniels 101 views 1 comment 0 points Most recent by pie March 27
• 
  HEC Indexer Acknowledgment for HEC destinations?

  Answered ✓ josh.hart 142 views 2 comments 2 points Most recent by josh.hart March 27
• 
  Does GitOps only make changes via the UI read-only or are changes via API read-only also?

  Answered ✓ Shane Daniels 95 views 1 comment 0 points Most recent by Chris March 27
• 
  What are the differences between your free version and the licensed option?

  Answered ✓ Shane Daniels 93 views 1 comment 0 points Most recent by Jon Rust March 27
• 
  What open source software does Cribl Stream leverage?

  Answered ✓ Shane Daniels 84 views 1 comment 0 points Most recent by dritan March 27
• 
  How can I create a REST Collection with authentication requiring an HMAC signature

  Answered ✓ josh.hart 160 views 3 comments 0 points Most recent by dritan March 27
• 
  Is there a way to filter out multiple IP address without using multiple drop functions?

  Answered ✓ Shane Daniels 139 views 1 comment 1 point Most recent by Jon Rust March 27
• 
  SplunkTCP Source with UF using compress=true

  Answered ✓ davec 99 views 1 comment 0 points Most recent by Clint Sharp March 27
• 
  Persistent Queue Question and Upstream Block Signals

  Answered ✓ jccurtis 134 views 2 comments 0 points Most recent by jccurtis March 27
• 
  Why is Auto Timestamp failing to extract a timestamp?

  Answered ✓ Jon Rust 85 views 1 comment 1 point Most recent by Jon Rust March 27
• 
  Is there a limit to file size when importing data from object stores?

  Answered ✓ Jon Rust 165 views 4 comments 1 point Most recent by Brandon McCombs March 27
• 
  Is there a way to measure the size of a field and then only keep XX bytes of it?

  Answered ✓ Erin Sweeney 85 views 1 comment 0 points Most recent by Brandon McCombs March 27
• 
  How do I pull out a substring from my _raw, and put it at the **beginning** of the event?

  Answered ✓ Erin Sweeney 96 views 1 comment 0 points Most recent by Jon Rust March 27
• 
  How can I add Humio as an Elasticsearch destination?

  Answered ✓ Erin Sweeney 81 views 1 comment 0 points Most recent by Brendan Dalpe March 27
• 
  How can I correctly break up giant JSON events?

  Answered ✓ Erin Sweeney 70 views 1 comment 0 points Most recent by Raanan Dagan March 27
• 
  How do I aggregate multiple logs into a single output?

  Answered ✓ Tony Reinke - Cribl 115 views 1 comment 0 points Most recent by pie March 27
• 
  What's the environment variable to persist data?

  Answered ✓ Tony Reinke - Cribl 107 views 1 comment 0 points Most recent by pie March 27
• 
  Is there an easy way to share/transfer/download/upload sample files?

  Answered ✓ Tony Reinke - Cribl 226 views 1 comment 0 points Most recent by pie March 27
• 
  How would I go about replacing text within an event?

  Answered ✓ Tony Reinke - Cribl 116 views 1 comment 0 points Most recent by pie March 27
• 
  Can you apply a set of regex rules as a group vs listing them one by one?

  Answered ✓ Tony Reinke - Cribl 118 views 1 comment 0 points Most recent by Erin Sweeney March 27
• 
  How do I turn a string field value to an integer?

  Answered ✓ Tony Reinke - Cribl 137 views 2 comments 1 point Most recent by Brendan Dalpe March 27
• 
  PAN Packs Question: what purpose does the index index || ‘firewall’ serve?

  Answered ✓ Tony Reinke - Cribl 123 views 1 comment 0 points Most recent by pie March 27
• 
  mtimeMs - Modify Time in Milliseconds

  Answered ✓ Louise Tang 98 views 1 comment 0 points Most recent by pie March 27
• 
  Curious Issues - January 21st

  Closed Tony Reinke - Cribl 52 views 0 comments 1 point Started by Tony Reinke - Cribl March 23
• 
  Release of AppScope v1.3.1 and Edge, Search, and Stream v4.1

  Tony Reinke - Cribl 73 views 0 comments 1 point Started by Tony Reinke - Cribl March 21