General Discussions

Discussion List

• 
  S3 source is able to get data through routes but only via passthru

  Answered sidd 302 views 5 comments 0 points Most recent by sidd September 22
• 
  I am trying to configure the Auto Timestamp function to extract a time field

  Answered Franky Laarits 113 views 2 comments 0 points Most recent by Oliver Hoppe September 22
• 
  Moved: Is it possible to manage an Edge agent from a standalone Stream instance?

  Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 22
• 
  is it advised to have both a cribl agent and a splunk universal forwarder installed on a host?

  Answered tommy 143 views 2 comments 0 points Most recent by Corey McClure September 22
• 
  Searching for keywords across all fields in live data.

  Answered ✓ Ahmed Kira 1.5K views 21 comments 0 points Most recent by Ahmed Kira September 22
• 
  Is cribl compatible with IPV6 for both sources and destination?

  Answered pdugas 363 views 8 comments 0 points Most recent by pdugas September 22
• 
  Any suggestions on how to move a REST collector?

  Answered lstropole 123 views 2 comments 0 points Most recent by lstropole September 22
• 
  Redis filtering issue with unexpected results and need help on response handling. Any suggestions?

  Answered Rob Franz 330 views 8 comments 0 points Most recent by Rob Franz September 22
• 
  How do I test a set of sample data all the way through it’s processing pipeline

  Answered Franky Laarits 145 views 2 comments 0 points Most recent by dritan September 22
• 
  setting up a Cribl journald data source for journal logs on remote machine

  Answered davec 232 views 5 comments 0 points Most recent by davec September 22
• 
  Question about formatting date in REST collector for JSON body.

  Answered Shawn Cannon 551 views 9 comments 0 points Most recent by Shawn Cannon September 22
• 
  Cribl is stopped, but pid file exists

  Answered tpeveler 239 views 3 comments 0 points Most recent by Brandon McCombs September 22
• 
  Trying to set up monitoring for expanding health checks on various endpoints.

  Answered mferris 316 views 6 comments 0 points Most recent by mferris September 22
• 
  Is there a way to order/sort the JSON keys prior to hitting the destination?

  Answered Takashi Kumagai 1.1K views 30 comments 0 points Most recent by Brendan Dalpe September 22
• 
  I want to duplicate a certain set of sourcetypes to a second index

  Answered etc_cribl 120 views 2 comments 0 points Most recent by etc_cribl September 22
• 
  IBM Qradar side what should I select as a log source type?

  Answered bryce 319 views 5 comments 0 points Most recent by Takashi Kumagai September 22
• 
  Issues with REST collector in distributed setup, authentication token errors on multiple workers.

  Answered Shawn Cannon 194 views 2 comments 0 points Most recent by Shawn Cannon September 22
• 
  TCP syslog flow to cribl is reporting that TCP window is full

  Answered neelsethia 113 views 1 comment 0 points Most recent by Brandon McCombs September 22
• 
  how do people handle secrets that need to be used in scripts that Cribl may run?

  Answered etc_cribl 653 views 12 comments 0 points Most recent by etc_cribl September 22
• 
  Can I create a lookup file from data I receive from a collector?

  Answered ✓ Shawn Cannon 389 views 4 comments 0 points Most recent by JP Bourget September 22
• 
  Can I load a .js file up and just tell the code function to run the js file?

  Answered mromano 69 views 1 comment 0 points Most recent by Tony Reinke September 22
• 
  Time is correct before processing and incorrect after processing

  Answered hgoolya 691 views 13 comments 0 points Most recent by hgoolya September 22
• 
  HEC Source, what is the service endpoint?

  Answered Franky Laarits 66 views 1 comment 0 points Most recent by Brandon McCombs September 22
• 
  Does anyone know how to migrate Splunk Cloud Archive frozen data to Azure blob (or even AWS)?

  Answered Julian Singkham 316 views 6 comments 0 points Most recent by Raanan Dagan September 22
• 
  is it possible to change the max size of cribl.log?

  Answered Edward Bailey 532 views 12 comments 0 points Most recent by Edward Bailey September 22
• 
  Perminately export environmental variables

  Answered dle 120 views 2 comments 0 points Most recent by dle September 22
• 
  generate logging messages when a Cribl worker node goes off-line & also when it recovers operation

  Answered aren 350 views 8 comments 0 points Most recent by Brandon McCombs September 22
• 
  Any plans to implement something like server classes?

  Answered Jeremiah Ross 166 views 3 comments 0 points Most recent by nicktank September 22
• 
  Can we merge two APIs response in Cribl?

  Answered lukasz 693 views 13 comments 0 points Most recent by lukasz September 22
• 
  Is there a way to set a retention period for filesystem destination?

  Answered azerbe 67 views 1 comment 0 points Most recent by Brandon McCombs September 22