We have updated our Terms of Service, Code of Conduct, and Addendum.

General Discussions

Discuss general Cribl topics with your peers.

S3 source is able to get data through routes but only via passthru

Answered sidd 6.7K views 5 comments 0 points Most recent by sidd September 2023
I am trying to configure the Auto Timestamp function to extract a time field

Answered Franky Laarits 3.1K views 2 comments 0 points Most recent by Oliver Hoppe September 2023
Moved: Is it possible to manage an Edge agent from a standalone Stream instance?

Closed Maliha Balala 1 view 0 comments 0 points Started by Maliha Balala September 2023
is it advised to have both a cribl agent and a splunk universal forwarder installed on a host?

Answered tommy 3.5K views 2 comments 0 points Most recent by Corey McClure September 2023
Searching for keywords across all fields in live data.

Answered ✓ Ahmed Kira 23.2K views 21 comments 0 points Most recent by Ahmed Kira September 2023
Is cribl compatible with IPV6 for both sources and destination?

Answered pdugas 8.2K views 8 comments 0 points Most recent by pdugas September 2023
Any suggestions on how to move a REST collector?

Answered lstropole 2.8K views 2 comments 0 points Most recent by lstropole September 2023
Redis filtering issue with unexpected results and need help on response handling. Any suggestions?

Answered Rob Franz 7.7K views 8 comments 0 points Most recent by Rob Franz September 2023
How do I test a set of sample data all the way through it’s processing pipeline

Answered Franky Laarits 3.4K views 2 comments 0 points Most recent by dritan September 2023
setting up a Cribl journald data source for journal logs on remote machine

Answered davec 5.6K views 5 comments 0 points Most recent by davec September 2023
Question about formatting date in REST collector for JSON body.

Answered Shawn Cannon 9.9K views 9 comments 0 points Most recent by Shawn Cannon September 2023
Trying to set up monitoring for expanding health checks on various endpoints.

Answered mferris 6.9K views 6 comments 0 points Most recent by mferris September 2023
Is there a way to order/sort the JSON keys prior to hitting the destination?

Answered Takashi Kumagai 24.6K views 30 comments 0 points Most recent by Brendan Dalpe September 2023
I want to duplicate a certain set of sourcetypes to a second index

Answered etc_cribl 2.8K views 2 comments 0 points Most recent by etc_cribl September 2023
IBM Qradar side what should I select as a log source type?

Answered bryce 6.8K views 5 comments 0 points Most recent by Takashi Kumagai September 2023
Issues with REST collector in distributed setup, authentication token errors on multiple workers.

Answered Shawn Cannon 3.7K views 2 comments 0 points Most recent by Shawn Cannon September 2023
TCP syslog flow to cribl is reporting that TCP window is full

Answered neelsethia 2.5K views 1 comment 0 points Most recent by Brandon McCombs September 2023
how do people handle secrets that need to be used in scripts that Cribl may run?

Answered etc_cribl 13.8K views 12 comments 0 points Most recent by etc_cribl September 2023
Can I create a lookup file from data I receive from a collector?

Answered ✓ Shawn Cannon 6.5K views 4 comments 0 points Most recent by JP Bourget September 2023
Can I load a .js file up and just tell the code function to run the js file?

Answered mromano 1.8K views 1 comment 0 points Most recent by Tony Reinke September 2023
Time is correct before processing and incorrect after processing

Answered hgoolya 15.1K views 13 comments 0 points Most recent by hgoolya September 2023
HEC Source, what is the service endpoint?

Answered Franky Laarits 1.8K views 1 comment 0 points Most recent by Brandon McCombs September 2023
Does anyone know how to migrate Splunk Cloud Archive frozen data to Azure blob (or even AWS)?

Answered Julian Singkham 8.3K views 6 comments 0 points Most recent by Raanan Dagan September 2023
is it possible to change the max size of cribl.log?

Answered Edward Bailey 12.9K views 12 comments 0 points Most recent by Edward Bailey September 2023
Perminately export environmental variables

Answered dle 2.7K views 2 comments 0 points Most recent by dle September 2023
generate logging messages when a Cribl worker node goes off-line & also when it recovers operation

Answered aren 8K views 8 comments 0 points Most recent by Brandon McCombs September 2023
Any plans to implement something like server classes?

Answered Jeremiah Ross 3.8K views 3 comments 0 points Most recent by nicktank September 2023
Can we merge two APIs response in Cribl?

Answered lukasz 15.7K views 13 comments 0 points Most recent by lukasz September 2023
Is there a way to set a retention period for filesystem destination?

Answered azerbe 1.7K views 1 comment 0 points Most recent by Brandon McCombs September 2023
Anyone integrate with Microsoft cloud app security?

Answered Daniel Jordan 6.2K views 4 comments 0 points Most recent by JP Bourget September 2023

Categories

Popular Tags