General Discussions

Discussion List

• 
  When replacing a leader, is it okay if the Cribl was started after installing?

  Answered Eugene Katz 94 views 2 comments 0 points Most recent by David Maislin September 22
• 
  Does Collect has a checkpoint option?

  Answered mtorres30 86 views 1 comment 0 points Most recent by Tomer Shvueli September 22
• 
  There a way to manually run stream file collector against previously collected files?

  Answered Oliver Hoppe 242 views 5 comments 0 points Most recent by Raanan Dagan September 22
• 
  Need some help with RegEx in JSON data

  Answered Shawn Cannon 293 views 4 comments 0 points Most recent by Shawn Cannon September 22
• 
  Is it feasible to enrich events with say, DNS CAA record details as it flows through stream?

  Answered Oliver Hoppe 1.3K views 29 comments 0 points Most recent by Oliver Hoppe September 22
• 
  Running antivirus in Linux with a Stream worker?

  Answered Edward Bailey 444 views 12 comments 0 points Most recent by mferris September 22
• 
  Can we pragmatically put in the actual worker not just a workergroup detail in Cribl pipeline?

  Answered Tony Reinke - Cribl 227 views 4 comments 0 points Most recent by xpac xpac September 22
• 
  We want to CIM the fields, is there a way to do it?

  Answered Taylor Mill 156 views 3 comments 0 points Most recent by Taylor Mill September 22
• 
  Installing Stream without internet?

  Answered Mike Dupuis 235 views 5 comments 0 points Most recent by David Maislin September 22
• 
  configuring cribl to receive github logs

  Answered piebob 105 views 2 comments 0 points Most recent by piebob September 22
• 
  can I loop through an array and convert the values?

  Answered Eugene Katz 206 views 5 comments 0 points Most recent by Jeremy Prescott September 22
• 
  trying to change the format of Timestamp within _Raw using Mask function

  Answered ✓ Tony Reinke - Cribl 292 views 4 comments 0 points Most recent by Tony Reinke - Cribl September 22
• 
  Looking for some guidance on using SSO OpenID auth with Cribl GitOps

  Answered jinsea 118 views 2 comments 0 points Most recent by Raanan Dagan September 22
• 
  spliting 2 types of events from single syslog stream based on event data fields

  Answered ledion 207 views 4 comments 0 points Most recent by Oliver Hoppe September 22
• 
  I configured a notification that is triggering every minute and I do not see these notifications

  Answered Jaime Sanchez 183 views 3 comments 0 points Most recent by Jaime Sanchez September 22
• 
  Event Breaking issues in JSON Array Mode

  Answered Igor Gifrin 430 views 12 comments 0 points Most recent by Jon Rust September 22
• 
  How can I get notifications.log from the Leader Node, and forward them to Splunk?

  Answered mtorres30 359 views 11 comments 0 points Most recent by Raanan Dagan September 22
• 
  Any issues if we made out `prod` branch the default branch in Gitlab?

  Answered jinsea 379 views 8 comments 0 points Most recent by jinsea September 22
• 
  REST collector issue with using Bearer token

  Answered Shawn Cannon 960 views 19 comments 0 points Most recent by Shawn Cannon September 22
• 
  Moved: Location of the Cribl Edge local application logs stored on Windows?

  Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 22
• 
  is any one pulling data out of Kronos with Cribl currently?

  Answered CriblNinja 102 views 2 comments 0 points Most recent by CriblNinja September 22
• 
  REST Collector Authentication Questions - Login vs OAuth

  Answered Brendan Dalpe 109 views 2 comments 0 points Most recent by Brendan Dalpe September 22
• 
  if I'm looking to forward the cribl metrics into splunk, is it similar to log data?

  Answered etc_cribl 569 views 14 comments 0 points Most recent by Jon Rust September 22
• 
  Steps to ingest Box logs in to Cribl

  Answered piebob 696 views 17 comments 0 points Most recent by piebob September 22
• 
  What is best way to pull Gsuite logs into Cribl?

  Answered piebob 118 views 2 comments 0 points Most recent by Joshua Napier September 22
• 
  Anyone do anything with ASN enrichment?

  Answered Daniel Jordan 399 views 8 comments 0 points Most recent by Daniel Jordan September 22
• 
  Is there a place to see the users of Cribl Stream who have access via Okta?

  Answered David Maislin 153 views 4 comments 0 points Most recent by David Maislin September 22
• 
  Trying to configuring a REST collector and I connect using ClientID and ClientSecret

  Answered Tomer Shvueli 207 views 4 comments 0 points Most recent by Tomer Shvueli September 22
• 
  Has anyone created custom timestamp for Azure Monitor in Sentinel?

  Answered Mo Hassan 125 views 2 comments 0 points Most recent by Mo Hassan September 22
• 
  does cribl keep any sort of state regarding files it has seen before?

  Answered sondra@cribl 463 views 10 comments 0 points Most recent by Raanan Dagan September 22