We have updated our Terms of Service, Code of Conduct, and Addendum.

General Discussions

Discuss general Cribl topics with your peers.

Is there an easy way to view all the HEC tokens in a HEC source?

Answered Shawn Cannon 4.3K views 3 comments 0 points Most recent by Shawn Cannon September 2023
Best practice when adding event breakers to sources with different teams using the same source?

Answered Franky Laarits 4.7K views 3 comments 0 points Most recent by Franky Laarits September 2023
Does Cribl have a checkpoint feature, similar to Splunk's fishbucket feature?

Answered Robbert Hink 9.3K views 7 comments 0 points Most recent by Brandon McCombs September 2023
is there a function that works with tabular data, like `top` output from linux?

Answered Franky Laarits 9.6K views 9 comments 0 points Most recent by Franky Laarits September 2023
Moved: How do the Windows Edge Nodes extract Windows Event logs and forward them to Cribl?

Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 2023
Are there default limits for JSON processing and are they tunable?

Answered Jeremy Prescott 23K views 20 comments 0 points Most recent by Brandon McCombs September 2023
Preserving dual values for a field in parser function extract mode.

Answered Eugene Katz 21.8K views 19 comments 0 points Most recent by Eugene Katz September 2023
Query about global variable behavior with event values

Answered Eric Reusche 20K views 25 comments 0 points Most recent by Eric Reusche September 2023
i applied a scheduler but it's not working

Answered lstropole 3.1K views 2 comments 0 points Most recent by Paul Dott September 2023
does cribls collector for rest api support jwt?

Answered Thomas Vogt 8.6K views 8 comments 0 points Most recent by Jon Rust September 2023
Using variables to select the production or staging redis environment?

Answered Martin Prado 4.2K views 4 comments 0 points Most recent by Martin Prado September 2023
A few question about PQ

Answered ✓ Thomas Vogt 8.1K views 10 comments 0 points Most recent by David Maislin September 2023
Looking into some dropped events when sending to one of my splunk sources

Answered mferris 21K views 22 comments 0 points Most recent by mferris September 2023
is there a way to add a function to drop for windows event logs that are sent via syslog?

Answered Abby Strong 4.6K views 6 comments 0 points Most recent by David Maislin September 2023
Does anyone have experience using cribl to send prometheus metrics?

Answered Erin Sweeney 39.7K views 36 comments 0 points Most recent by nicktank September 2023
Can we ingest data off the wire into Cribl?

Answered Abdullah Zubair 8.7K views 8 comments 0 points Most recent by lstropole September 2023
Does cribl had an agent that will run on IBM iseries?

Answered Steve Litras 1.6K views 1 comment 0 points Most recent by David Maislin September 2023
Timestamp for the data in replay is not honoring the original timestamp

Answered Sirius Lange 7.9K views 7 comments 0 points Most recent by Sirius Lange September 2023
Unable to bind to 514 for syslog input on Cribl with non-sudo user

Answered Neil Parisi 11.4K views 14 comments 0 points Most recent by David Maislin September 2023
Setting the timestamp to a value when sending data to Elasticsearch

Answered lstropole 11.1K views 10 comments 0 points Most recent by lstropole September 2023
Is sending data from InfluxDB to Cribl possible?

Answered mtorres30 3.9K views 4 comments 0 points Most recent by nicktank September 2023
For bringing Amazon Kinesis Firehose in to Cribl, what format should I use?

Answered mferris 9.3K views 10 comments 0 points Most recent by mferris September 2023
When replacing a leader, is it okay if the Cribl was started after installing?

Answered Eugene Katz 2.6K views 2 comments 0 points Most recent by David Maislin September 2023
Does Collect has a checkpoint option?

Answered mtorres30 2K views 1 comment 0 points Most recent by Tomer Shvueli September 2023
There a way to manually run stream file collector against previously collected files?

Answered Oliver Hoppe 6.8K views 5 comments 0 points Most recent by Raanan Dagan September 2023
Need some help with RegEx in JSON data

Answered Shawn Cannon 5.8K views 4 comments 0 points Most recent by Shawn Cannon September 2023
Is it feasible to enrich events with say, DNS CAA record details as it flows through stream?

Answered Oliver Hoppe 31.7K views 29 comments 0 points Most recent by Oliver Hoppe September 2023
Running antivirus in Linux with a Stream worker?

Answered Edward Bailey 11.1K views 12 comments 0 points Most recent by mferris September 2023
Can we pragmatically put in the actual worker not just a workergroup detail in Cribl pipeline?

Answered Tony Reinke - Cribl 5.3K views 4 comments 0 points Most recent by xpac xpac September 2023
We want to CIM the fields, is there a way to do it?

Answered Taylor Mill 3.8K views 3 comments 0 points Most recent by Taylor Mill September 2023

Categories

Popular Tags