We have updated our Terms of Service, Code of Conduct, and Addendum.

General Discussions

Discuss general Cribl topics with your peers.

is there a way to remove the metric event but still send it to splunk not as a metric

Answered Ahmed Kira 16.6K views 14 comments 0 points Most recent by Ahmed Kira September 2023
Can I add a field that isn’t added to _raw, like not show up in the JSON that is the event?

Answered Jon Rust 20.4K views 19 comments 0 points Most recent by Jon Rust September 2023
Has Cribl considered Panther as a new possible Destination?

Answered Eugene Katz 14.2K views 11 comments 0 points Most recent by Eugene Katz September 2023
Optimize sourcetype assignment in pipeline

Answered Franky Laarits 7.6K views 5 comments 0 points Most recent by Franky Laarits September 2023
Is there a way to do POST to Cribl api endpoint (`/api/v1/version/sync`) from pipeline/destination?

Answered ✓ Closed Martin Prado 8.3K views 6 comments 0 points Most recent by Martin Prado September 2023
Is there an easy way to view all the HEC tokens in a HEC source?

Answered Shawn Cannon 4.7K views 3 comments 0 points Most recent by Shawn Cannon September 2023
Best practice when adding event breakers to sources with different teams using the same source?

Answered Franky Laarits 5.1K views 3 comments 0 points Most recent by Franky Laarits September 2023
Does Cribl have a checkpoint feature, similar to Splunk's fishbucket feature?

Answered Robbert Hink 10.1K views 7 comments 0 points Most recent by Brandon McCombs September 2023
is there a function that works with tabular data, like `top` output from linux?

Answered Franky Laarits 10.4K views 9 comments 0 points Most recent by Franky Laarits September 2023
Moved: How do the Windows Edge Nodes extract Windows Event logs and forward them to Cribl?

Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 2023
Are there default limits for JSON processing and are they tunable?

Answered Jeremy Prescott 25K views 20 comments 0 points Most recent by Brandon McCombs September 2023
Preserving dual values for a field in parser function extract mode.

Answered Eugene Katz 23.6K views 19 comments 0 points Most recent by Eugene Katz September 2023
Query about global variable behavior with event values

Answered Eric Reusche 21.8K views 25 comments 0 points Most recent by Eric Reusche September 2023
i applied a scheduler but it's not working

Answered lstropole 3.4K views 2 comments 0 points Most recent by Paul Dott September 2023
does cribls collector for rest api support jwt?

Answered Thomas Vogt 9.3K views 8 comments 0 points Most recent by Jon Rust September 2023
Using variables to select the production or staging redis environment?

Answered Martin Prado 4.6K views 4 comments 0 points Most recent by Martin Prado September 2023
A few question about PQ

Answered ✓ Thomas Vogt 8.8K views 10 comments 0 points Most recent by David Maislin September 2023
Looking into some dropped events when sending to one of my splunk sources

Answered mferris 23K views 22 comments 0 points Most recent by mferris September 2023
is there a way to add a function to drop for windows event logs that are sent via syslog?

Answered Abby Strong 5K views 6 comments 0 points Most recent by David Maislin September 2023
Does anyone have experience using cribl to send prometheus metrics?

Answered Erin Sweeney 43.1K views 36 comments 0 points Most recent by nicktank September 2023
Can we ingest data off the wire into Cribl?

Answered Abdullah Zubair 9.5K views 8 comments 0 points Most recent by lstropole September 2023
Does cribl had an agent that will run on IBM iseries?

Answered Steve Litras 1.7K views 1 comment 0 points Most recent by David Maislin September 2023
Timestamp for the data in replay is not honoring the original timestamp

Answered Sirius Lange 8.6K views 7 comments 0 points Most recent by Sirius Lange September 2023
Unable to bind to 514 for syslog input on Cribl with non-sudo user

Answered Neil Parisi 12.5K views 14 comments 0 points Most recent by David Maislin September 2023
Setting the timestamp to a value when sending data to Elasticsearch

Answered lstropole 12.1K views 10 comments 0 points Most recent by lstropole September 2023
Is sending data from InfluxDB to Cribl possible?

Answered mtorres30 4.2K views 4 comments 0 points Most recent by nicktank September 2023
For bringing Amazon Kinesis Firehose in to Cribl, what format should I use?

Answered mferris 10.2K views 10 comments 0 points Most recent by mferris September 2023
When replacing a leader, is it okay if the Cribl was started after installing?

Answered Eugene Katz 2.8K views 2 comments 0 points Most recent by David Maislin September 2023
Does Collect has a checkpoint option?

Answered mtorres30 2.2K views 1 comment 0 points Most recent by Tomer Shvueli September 2023
There a way to manually run stream file collector against previously collected files?

Answered Oliver Hoppe 7.4K views 5 comments 0 points Most recent by Raanan Dagan September 2023

Categories

Popular Tags