General Discussions

Discussion List

• 
  Testing 2 different index mapping in Elastic

  Answered steve.malenfant 17.5K views 23 comments 0 points Most recent by David Maislin September 2023
• 
  Handling the missing date_ fields for Splunk Enterprise Security

  Answered asc_me 10.4K views 11 comments 0 points Most recent by asc_me September 2023
• 
  how to get the current mode the collector is running in

  Answered nick 2.6K views 2 comments 0 points Most recent by nick September 2023
• 
  Field shows up in preview but not sent to syslog

  Answered kpimentel 1.7K views 1 comment 0 points Most recent by Brendan Dalpe September 2023
• 
  Directory structure of Cribl for the Leader

  Answered Carley Rosato 5.1K views 6 comments 0 points Most recent by Brendan Dalpe September 2023
• 
  Is there a way to download the captured data locally?

  Answered dshanaghy 4.2K views 5 comments 0 points Most recent by dshanaghy September 2023
• 
  list of all functions that support querying a URL from within a pipeline for enrichment purposes?

  Answered bradleychambers 3.2K views 3 comments 0 points Most recent by Igor Gifrin September 2023
• 
  What Report URL are you using to collect Office 365 Message Trace collector logs?

  Answered LovetheBeach 17K views 18 comments 0 points Most recent by LovetheBeach September 2023
• 
  How to integrate Cribl with Databricks(Destination)?

  Answered Neil Parisi 8K views 6 comments 0 points Most recent by Kam Amir September 2023
• 
  Anyone doing any with netapp fpolicy and syslog?

  Answered Daniel Jordan 8.2K views 7 comments 0 points Most recent by Ben Marcus September 2023
• 
  Identifying a timestamp inside of JSON

  Answered Shawn Cannon 14.9K views 22 comments 0 points Most recent by David Maislin September 2023
• 
  Is it possible to take advantage of Microsoft log sources being free to ingest into Sentinel?

  Answered Trevor VanDoren 6.8K views 5 comments 0 points Most recent by Kam Amir September 2023
• 
  Is there any workaround to send uncooked data from Splunk HF to Cribl?

  Answered Perry Correll 6.3K views 8 comments 0 points Most recent by xpac xpac September 2023
• 
  Which ports are needed to be opened on Cribl and Graylog?

  Answered ✓ nicktank 2.5K views 1 comment 0 points Most recent by Kam Amir September 2023
• 
  How can I drop part of a syslog header?

  Answered ✓ saurabh.gupta 8.4K views 10 comments 0 points Most recent by saurabh.gupta September 2023
• 
  How can I troubleshoot a cribl destination (Splunk HEC) not sending data?

  Answered joelvincent 9.8K views 11 comments 0 points Most recent by joelvincent September 2023
• 
  With Cribl, is it possible to have snmpTrap?

  Answered Ahmed Kira 7K views 7 comments 0 points Most recent by Ahmed Kira September 2023
• 
  How would I extract a token in Cribl REST collector authentication with a HTTP request?

  Answered Chris Rogers 8.2K views 7 comments 0 points Most recent by Eric Reusche September 2023
• 
  Is it possible to have dynamic table mapping/schema?

  Answered Julian Singkham 4.6K views 5 comments 0 points Most recent by Julian Singkham September 2023
• 
  Any suggestions for a destination facing severe issues: Write ECONNRESET error

  Answered saurabh.gupta 6.6K views 7 comments 0 points Most recent by saurabh.gupta September 2023
• 
  I need to drop computer account name ending with $ sign

  Answered saurabh.gupta 14.8K views 22 comments 0 points Most recent by xpac xpac September 2023
• 
  Extracting values from a netscaler log

  Answered Franky Laarits 19.7K views 21 comments 0 points Most recent by Franky Laarits September 2023
• 
  One of the Workers in one of the Worker Groups seems to be stuck in deploying a version

  Answered Mina Yacoub 6.1K views 7 comments 0 points Most recent by Raanan Dagan September 2023
• 
  Does the cribl Stream leader do anything on port 3128?

  Answered Harry Gardner 5.3K views 5 comments 0 points Most recent by Brandon McCombs September 2023
• 
  Getting different results in Postman and Cribl Rest Collector for the Cribl API

  Answered Bharath Ram Ramanathan 15K views 19 comments 0 points Most recent by Mugdha Khandekar September 2023
• 
  Is it possible to ingest logs from Containerized Applications with Cribl?

  Answered nicktank 3.7K views 4 comments 0 points Most recent by Bradley Murphy September 2023
• 
  How do I map value field with appropriate name field for the following log sample?

  Answered tpeveler 8.6K views 10 comments 0 points Most recent by David Maislin September 2023
• 
  Anyone have a good set up for querying Azure AD via graph to access specific user object parameters?

  Answered Oliver Hoppe 1.6K views 1 comment 0 points Most recent by Tony Reinke September 2023
• 
  How to make a variable from one event and add that variable to all events in the pipeline?

  Answered Phoebe Chang 5.4K views 6 comments 0 points Most recent by Phoebe Chang September 2023
• 
  Proper URL for sending to Cribl via Webhook

  Answered LovetheBeach 15.7K views 22 comments 0 points Most recent by LovetheBeach September 2023