General Discussions

Discussion List

• 
  how do people handle secrets that need to be used in scripts that Cribl may run?

  Answered etc_cribl 9.1K views 12 comments 0 points Most recent by etc_cribl September 2023
• 
  Can I create a lookup file from data I receive from a collector?

  Answered ✓ Shawn Cannon 4.5K views 4 comments 0 points Most recent by JP Bourget September 2023
• 
  Can I load a .js file up and just tell the code function to run the js file?

  Answered mromano 1.2K views 1 comment 0 points Most recent by Tony Reinke September 2023
• 
  Time is correct before processing and incorrect after processing

  Answered hgoolya 10K views 13 comments 0 points Most recent by hgoolya September 2023
• 
  HEC Source, what is the service endpoint?

  Answered Franky Laarits 1.2K views 1 comment 0 points Most recent by Brandon McCombs September 2023
• 
  Does anyone know how to migrate Splunk Cloud Archive frozen data to Azure blob (or even AWS)?

  Answered Julian Singkham 5.8K views 6 comments 0 points Most recent by Raanan Dagan September 2023
• 
  is it possible to change the max size of cribl.log?

  Answered Edward Bailey 8.5K views 12 comments 0 points Most recent by Edward Bailey September 2023
• 
  Perminately export environmental variables

  Answered dle 1.9K views 2 comments 0 points Most recent by dle September 2023
• 
  generate logging messages when a Cribl worker node goes off-line & also when it recovers operation

  Answered aren 5.2K views 8 comments 0 points Most recent by Brandon McCombs September 2023
• 
  Any plans to implement something like server classes?

  Answered Jeremiah Ross 2.5K views 3 comments 0 points Most recent by nicktank September 2023
• 
  Can we merge two APIs response in Cribl?

  Answered lukasz 10.6K views 13 comments 0 points Most recent by lukasz September 2023
• 
  Is there a way to set a retention period for filesystem destination?

  Answered azerbe 1.2K views 1 comment 0 points Most recent by Brandon McCombs September 2023
• 
  Anyone integrate with Microsoft cloud app security?

  Answered Daniel Jordan 4.2K views 4 comments 0 points Most recent by JP Bourget September 2023
• 
  Does the S3 collector pull every file from the s3 bucket on each run?

  Answered Igor Gifrin 6K views 6 comments 0 points Most recent by Raanan Dagan September 2023
• 
  New index time fields from a syslog

  Answered Chad Lavine 2.6K views 4 comments 0 points Most recent by xpac xpac September 2023
• 
  With Cribl GitOps - how can we avoid script collector running ONLY in production environment?

  Answered Martin Prado 2.7K views 3 comments 0 points Most recent by Brendan Dalpe September 2023
• 
  Forcing the Worker nodes (using Docker) to communicate with the leader over a specific TLS version?

  Answered dritan 5.9K views 7 comments 0 points Most recent by dritan September 2023
• 
  Testing 2 different index mapping in Elastic

  Answered steve.malenfant 12.4K views 23 comments 0 points Most recent by David Maislin September 2023
• 
  Handling the missing date_ fields for Splunk Enterprise Security

  Answered asc_me 7.5K views 11 comments 0 points Most recent by asc_me September 2023
• 
  how to get the current mode the collector is running in

  Answered nick 1.9K views 2 comments 0 points Most recent by nick September 2023
• 
  Field shows up in preview but not sent to syslog

  Answered kpimentel 1.2K views 1 comment 0 points Most recent by Brendan Dalpe September 2023
• 
  Directory structure of Cribl for the Leader

  Answered Carley Rosato 3.7K views 6 comments 0 points Most recent by Brendan Dalpe September 2023
• 
  Is there a way to download the captured data locally?

  Answered dshanaghy 3K views 5 comments 0 points Most recent by dshanaghy September 2023
• 
  list of all functions that support querying a URL from within a pipeline for enrichment purposes?

  Answered bradleychambers 2.3K views 3 comments 0 points Most recent by Igor Gifrin September 2023
• 
  What Report URL are you using to collect Office 365 Message Trace collector logs?

  Answered LovetheBeach 12.2K views 18 comments 0 points Most recent by LovetheBeach September 2023
• 
  How to integrate Cribl with Databricks(Destination)?

  Answered Neil Parisi 5.9K views 6 comments 0 points Most recent by Kam Amir September 2023
• 
  Anyone doing any with netapp fpolicy and syslog?

  Answered Daniel Jordan 5.9K views 7 comments 0 points Most recent by Ben Marcus September 2023
• 
  Identifying a timestamp inside of JSON

  Answered Shawn Cannon 10.8K views 22 comments 0 points Most recent by David Maislin September 2023
• 
  Is it possible to take advantage of Microsoft log sources being free to ingest into Sentinel?

  Answered Trevor VanDoren 5.1K views 5 comments 0 points Most recent by Kam Amir September 2023
• 
  Is there any workaround to send uncooked data from Splunk HF to Cribl?

  Answered Perry Correll 4.5K views 8 comments 0 points Most recent by xpac xpac September 2023