We have updated our Terms of Service, Code of Conduct, and Addendum.

General Discussions

Discuss general Cribl topics with your peers.

Release of Cribl v4.4

Tony Reinke - Cribl 1.9K views 0 comments 2 points Started by Tony Reinke - Cribl November 2023
Does Cribl have any documentation for pulling Workday report logs?

Answered ✓ itsjustjordyn 3.9K views 1 comment 0 points Most recent by Kyle McCririe November 2023
does anyone know how to 'unflatten' fields in Cribl Stream?

Answered ✓ Tony Reinke - Cribl 3.2K views 1 comment 0 points Most recent by Jon Rust October 2023
Community Members Achieve Level 2 and Beyond in Cribl Curious, Plus Double Points Week Ahead!

Tony Reinke - Cribl 3.5K views 1 comment 1 point Most recent by Shawn Cannon October 2023
Does anyone know if the MinIO destination in Cribl Stream supports virtual hosting style addressing?

Answered ✓ Chris Breshears 3.7K views 1 comment 0 points Most recent by Kyle McCririe October 2023
Cribl v.4.3.1 has been released!

Tony Reinke - Cribl 1.9K views 0 comments 0 points Started by Tony Reinke - Cribl October 2023
Is it possible to disable certificate validation when connecting a Splunk Search Collector?

Answered ✓ guifue 5.4K views 2 comments 1 point Most recent by guifue October 2023
Is replay actually a feature in itself or just a technique implemented via a Source with different

Answered ✓ Brian Wasserman 12.7K views 6 comments 0 points Most recent by Tony Reinke - Cribl October 2023
Looking for help with Filters and Eval Functions

Answered ✓ Erin Sweeney 5.6K views 2 comments 0 points Most recent by Erin Sweeney October 2023
Is there a cribl equivalent to Splunk’s rex mode=sed?

Answered ✓ Tony Reinke - Cribl 3.7K views 1 comment 0 points Most recent by David Maislin October 2023
Using Persistent Queue drops thruput

Answered ✓ Mike Dupuis 3.6K views 1 comment 0 points Most recent by Brandon McCombs October 2023
Using a load balancer with RAW HTTP source, what to use for a health check?

Answered ✓ Shawn Cannon 5K views 2 comments 0 points Most recent by xpac xpac October 2023
Using "Webhook" Destination: Can we transform events to be used as HTTP requests?

Answered ✓ benjamin.rader 6.6K views 3 comments 0 points Most recent by just October 2023
Does anyone have an example of a working configuration to receive Palo Alto logs over HTTPS?

Answered ✓ vupham 7.3K views 3 comments 5 points Most recent by Tony Reinke - Cribl October 2023
Anyone have a good set up for querying Azure AD?

Answered ✓ Tony Reinke - Cribl 3.6K views 1 comment 0 points Most recent by Tony Reinke - Cribl September 2023
Cribl Stream Leader on Fargate, the container keeps running with unhealthy health check.

Answered Joel Yue 3.5K views 1 comment 0 points Most recent by Tony Reinke - Cribl September 2023
Injesting sysmon logs via Elastic API and events are getting dropped

Answered Joel Yue 3.2K views 1 comment 0 points Most recent by itsjustjordyn September 2023
Would my destination see the srcIP field as a string or as an IP field?

Answered wcall_cribl 11.7K views 9 comments 0 points Most recent by itsjustjordyn September 2023
Any reason my leader doesn't want to grab 4.03?

Answered JP Bourget 4.4K views 2 comments 0 points Most recent by Ben Marcus September 2023
Moved: Processing Syslog messages and sending to Splunk

Closed Michael Donnelly 1 view 0 comments 0 points Started by Michael Donnelly September 2023
Dynamic Date in API URL

Answered Tony Reinke - Cribl 2.6K views 1 comment 0 points Most recent by Ryan Hennessy September 2023
Moved: would it be possible to use the same encryption key in an Edge fleet and in a Stream worker …

Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 2023
Is there documentation for implementing local storage archival and replay functions?

Answered ✓ Neil Parisi 5.5K views 6 comments 0 points Most recent by xpac xpac September 2023
how would i configure encryption from a splunk uf to cribl cloud?

Answered ✓ Franky Laarits 4.1K views 4 comments 0 points Most recent by Jon Rust September 2023
Is it possible to configure Cribl to sign the commits to Github?

Answered ✓ Closed Eugene Katz 2.3K views 1 comment 0 points Most recent by Ben Marcus September 2023
Recurring UI problem with one worker group. Leader restart helps temporarily.

Answered Eugene Katz 22.7K views 19 comments 0 points Most recent by Eugene Katz September 2023
For wildcards to reference existing field names in an eval, how do you reference those field names?

Answered Brett Windom 4.5K views 3 comments 0 points Most recent by Ahmed Kira September 2023
Troubleshooting file monitor permission issue

Answered Ryan Hennessy 10.6K views 11 comments 0 points Most recent by Ryan Hennessy September 2023
Query on simplifying JSON to CSV conversion.

Answered hgoolya 9.9K views 12 comments 0 points Most recent by hgoolya September 2023
is there a way to remove the metric event but still send it to splunk not as a metric

Answered Ahmed Kira 15.9K views 14 comments 0 points Most recent by Ahmed Kira September 2023

Categories

Popular Tags