General Discussions

Discussion List

• 
  Does anyone know if the MinIO destination in Cribl Stream supports virtual hosting style addressing?

  Answered ✓ Chris Breshears 3.5K views 1 comment 0 points Most recent by Kyle McCririe October 2023
• 
  Cribl v.4.3.1 has been released!

  Tony Reinke - Cribl 1.8K views 0 comments 0 points Started by Tony Reinke - Cribl October 2023
• 
  Is it possible to disable certificate validation when connecting a Splunk Search Collector?

  Answered ✓ guifue 5.2K views 2 comments 1 point Most recent by guifue October 2023
• 
  Is replay actually a feature in itself or just a technique implemented via a Source with different

  Answered ✓ Brian Wasserman 12.2K views 6 comments 0 points Most recent by Tony Reinke - Cribl October 2023
• 
  Looking for help with Filters and Eval Functions

  Answered ✓ Erin Sweeney 5.4K views 2 comments 0 points Most recent by Erin Sweeney October 2023
• 
  Is there a cribl equivalent to Splunk’s rex mode=sed?

  Answered ✓ Tony Reinke - Cribl 3.6K views 1 comment 0 points Most recent by David Maislin October 2023
• 
  Using Persistent Queue drops thruput

  Answered ✓ Mike Dupuis 3.5K views 1 comment 0 points Most recent by Brandon McCombs October 2023
• 
  Using a load balancer with RAW HTTP source, what to use for a health check?

  Answered ✓ Shawn Cannon 4.9K views 2 comments 0 points Most recent by xpac xpac October 2023
• 
  Using "Webhook" Destination: Can we transform events to be used as HTTP requests?

  Answered ✓ benjamin.rader 6.4K views 3 comments 0 points Most recent by just October 2023
• 
  Does anyone have an example of a working configuration to receive Palo Alto logs over HTTPS?

  Answered ✓ vupham 7K views 3 comments 5 points Most recent by Tony Reinke - Cribl October 2023
• 
  Anyone have a good set up for querying Azure AD?

  Answered ✓ Tony Reinke - Cribl 3.4K views 1 comment 0 points Most recent by Tony Reinke - Cribl September 2023
• 
  Cribl Stream Leader on Fargate, the container keeps running with unhealthy health check.

  Answered Joel Yue 3.4K views 1 comment 0 points Most recent by Tony Reinke - Cribl September 2023
• 
  Injesting sysmon logs via Elastic API and events are getting dropped

  Answered Joel Yue 3.1K views 1 comment 0 points Most recent by itsjustjordyn September 2023
• 
  Would my destination see the srcIP field as a string or as an IP field?

  Answered wcall_cribl 11.2K views 9 comments 0 points Most recent by itsjustjordyn September 2023
• 
  Any reason my leader doesn't want to grab 4.03?

  Answered JP Bourget 4.2K views 2 comments 0 points Most recent by Ben Marcus September 2023
• 
  Moved: Processing Syslog messages and sending to Splunk

  Closed Michael Donnelly 1 view 0 comments 0 points Started by Michael Donnelly September 2023
• 
  Dynamic Date in API URL

  Answered Tony Reinke - Cribl 2.5K views 1 comment 0 points Most recent by Ryan Hennessy September 2023
• 
  Moved: would it be possible to use the same encryption key in an Edge fleet and in a Stream worker …

  Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 2023
• 
  Is there documentation for implementing local storage archival and replay functions?

  Answered ✓ Neil Parisi 5.2K views 6 comments 0 points Most recent by xpac xpac September 2023
• 
  how would i configure encryption from a splunk uf to cribl cloud?

  Answered ✓ Franky Laarits 3.9K views 4 comments 0 points Most recent by Jon Rust September 2023
• 
  Is it possible to configure Cribl to sign the commits to Github?

  Answered ✓ Closed Eugene Katz 2.1K views 1 comment 0 points Most recent by Ben Marcus September 2023
• 
  Recurring UI problem with one worker group. Leader restart helps temporarily.

  Answered Eugene Katz 21.3K views 19 comments 0 points Most recent by Eugene Katz September 2023
• 
  For wildcards to reference existing field names in an eval, how do you reference those field names?

  Answered Brett Windom 4.2K views 3 comments 0 points Most recent by Ahmed Kira September 2023
• 
  Troubleshooting file monitor permission issue

  Answered Ryan Hennessy 10K views 11 comments 0 points Most recent by Ryan Hennessy September 2023
• 
  Query on simplifying JSON to CSV conversion.

  Answered hgoolya 9.3K views 12 comments 0 points Most recent by hgoolya September 2023
• 
  is there a way to remove the metric event but still send it to splunk not as a metric

  Answered Ahmed Kira 14.9K views 14 comments 0 points Most recent by Ahmed Kira September 2023
• 
  Can I add a field that isn’t added to _raw, like not show up in the JSON that is the event?

  Answered Jon Rust 18.6K views 19 comments 0 points Most recent by Jon Rust September 2023
• 
  Has Cribl considered Panther as a new possible Destination?

  Answered Eugene Katz 12.8K views 11 comments 0 points Most recent by Eugene Katz September 2023
• 
  Optimize sourcetype assignment in pipeline

  Answered Franky Laarits 6.9K views 5 comments 0 points Most recent by Franky Laarits September 2023
• 
  Is there a way to do POST to Cribl api endpoint (`/api/v1/version/sync`) from pipeline/destination?

  Answered ✓ Closed Martin Prado 7.5K views 6 comments 0 points Most recent by Martin Prado September 2023