General Discussions

Discussion List

• 
  Anyone integrate with Microsoft cloud app security?

  Answered Daniel Jordan 293 views 4 comments 0 points Most recent by JP Bourget September 22
• 
  Does the S3 collector pull every file from the s3 bucket on each run?

  Answered Igor Gifrin 415 views 6 comments 0 points Most recent by Raanan Dagan September 22
• 
  New index time fields from a syslog

  Answered Chad Lavine 191 views 4 comments 0 points Most recent by xpac xpac September 22
• 
  With Cribl GitOps - how can we avoid script collector running ONLY in production environment?

  Answered Martin Prado 210 views 3 comments 0 points Most recent by Brendan Dalpe September 22
• 
  Forcing the Worker nodes (using Docker) to communicate with the leader over a specific TLS version?

  Answered dritan 455 views 7 comments 0 points Most recent by dritan September 22
• 
  Testing 2 different index mapping in Elastic

  Answered steve.malenfant 951 views 23 comments 0 points Most recent by David Maislin September 22
• 
  Handling the missing date_ fields for Splunk Enterprise Security

  Answered asc_me 692 views 11 comments 0 points Most recent by asc_me September 22
• 
  how to get the current mode the collector is running in

  Answered nick 125 views 2 comments 0 points Most recent by nick September 22
• 
  Field shows up in preview but not sent to syslog

  Answered kpimentel 76 views 1 comment 0 points Most recent by Brendan Dalpe September 22
• 
  Directory structure of Cribl for the Leader

  Answered Carley Rosato 274 views 6 comments 0 points Most recent by Brendan Dalpe September 22
• 
  Is there a way to download the captured data locally?

  Answered dshanaghy 232 views 5 comments 0 points Most recent by dshanaghy September 22
• 
  list of all functions that support querying a URL from within a pipeline for enrichment purposes?

  Answered bradleychambers 161 views 3 comments 0 points Most recent by Igor Gifrin September 22
• 
  What Report URL are you using to collect Office 365 Message Trace collector logs?

  Answered LovetheBeach 974 views 18 comments 0 points Most recent by LovetheBeach September 22
• 
  How to integrate Cribl with Databricks(Destination)?

  Answered Neil Parisi 376 views 6 comments 0 points Most recent by Kam Amir September 22
• 
  Anyone doing any with netapp fpolicy and syslog?

  Answered Daniel Jordan 456 views 7 comments 0 points Most recent by Ben Marcus September 22
• 
  Identifying a timestamp inside of JSON

  Answered Shawn Cannon 823 views 22 comments 0 points Most recent by David Maislin September 22
• 
  Is it possible to take advantage of Microsoft log sources being free to ingest into Sentinel?

  Answered Trevor VanDoren 315 views 5 comments 0 points Most recent by Kam Amir September 22
• 
  Is there any workaround to send uncooked data from Splunk HF to Cribl?

  Answered Perry Correll 350 views 8 comments 0 points Most recent by xpac xpac September 22
• 
  Which ports are needed to be opened on Cribl and Graylog?

  Answered ✓ nicktank 121 views 1 comment 0 points Most recent by Kam Amir September 22
• 
  How can I drop part of a syslog header?

  Answered ✓ saurabh.gupta 597 views 10 comments 0 points Most recent by saurabh.gupta September 22
• 
  How can I troubleshoot a cribl destination (Splunk HEC) not sending data?

  Answered joelvincent 524 views 11 comments 0 points Most recent by joelvincent September 22
• 
  With Cribl, is it possible to have snmpTrap?

  Answered Ahmed Kira 383 views 7 comments 0 points Most recent by Ahmed Kira September 22
• 
  How would I extract a token in Cribl REST collector authentication with a HTTP request?

  Answered Chris Rogers 406 views 7 comments 0 points Most recent by Eric Reusche September 22
• 
  Is it possible to have dynamic table mapping/schema?

  Answered Julian Singkham 231 views 5 comments 0 points Most recent by Julian Singkham September 22
• 
  Any suggestions for a destination facing severe issues: Write ECONNRESET error

  Answered saurabh.gupta 348 views 7 comments 0 points Most recent by saurabh.gupta September 22
• 
  I need to drop computer account name ending with $ sign

  Answered saurabh.gupta 832 views 22 comments 0 points Most recent by xpac xpac September 22
• 
  Extracting values from a netscaler log

  Answered Franky Laarits 1.1K views 21 comments 0 points Most recent by Franky Laarits September 22
• 
  One of the Workers in one of the Worker Groups seems to be stuck in deploying a version

  Answered Mina Yacoub 343 views 7 comments 0 points Most recent by Raanan Dagan September 22
• 
  Does the cribl Stream leader do anything on port 3128?

  Answered Harry Gardner 275 views 5 comments 0 points Most recent by Brandon McCombs September 22
• 
  Getting different results in Postman and Cribl Rest Collector for the Cribl API

  Answered Bharath Ram Ramanathan 848 views 19 comments 0 points Most recent by Mugdha Khandekar September 22