We have updated our Terms of Service, Code of Conduct, and Addendum.

General Discussions

Discuss general Cribl topics with your peers.

Can Cribl handle the Splunks functionality of assigning default fields dynamicaly?

Answered Philipp Gerke 3.9K views 4 comments 0 points Most recent by xpac xpac September 2023
Passing the message field in JSON to Splunk

Answered kpimentel 12.1K views 15 comments 0 points Most recent by kpimentel September 2023
How can I access the name of the Cribl Group in a pipeline?

Answered ✓ Quinn Stevenson 13K views 10 comments 0 points Most recent by dritan September 2023
What happens with retention setting in Splunk with timestamp from Replay?

Answered ✓ Paul Dott 6.6K views 5 comments 0 points Most recent by dritan September 2023
What happens during a restart and is the restart done in a rolling fashion?

Answered Kevin Morris 4.1K views 4 comments 0 points Most recent by Brendan Dalpe September 2023
How do you get the workers to send metrics (like CPU usage, etc.) to Splunk?

Answered Jon Rust 16.2K views 21 comments 0 points Most recent by Jon Rust September 2023
How can we get cribl to keep the time within the log?

Answered hgoolya 29.5K views 37 comments 0 points Most recent by hgoolya September 2023
Is there a way to add a field from a REST Collector’s `Discover` phase to the collection results?

Answered Kevin Morris 9.7K views 10 comments 0 points Most recent by Tomer Shvueli September 2023
Is Cribl Search functionality available for on prem Cribl deployment?

Answered nicktank 4.2K views 3 comments 0 points Most recent by Chell Mendiola September 2023
Trying to a SED like search and replace?

Answered Jaime Sanchez 14.4K views 17 comments 0 points Most recent by Jaime Sanchez September 2023
Deleting what is matched in REGEX

Answered LovetheBeach 4K views 5 comments 0 points Most recent by Jon Rust September 2023
Notifications are through on messages and not notifications

Answered Catlin Carter 3.9K views 4 comments 0 points Most recent by Catlin Carter September 2023
Passing data to another host with no extra meta data

Answered Steve Bridge 33.5K views 35 comments 0 points Most recent by Joshua Napier September 2023
Anyone every pulled in events from Box?

Answered Shawn Cannon 7.5K views 8 comments 0 points Most recent by Steve Litras September 2023
Way to recreate 30 pipelines for different business unit

Answered Cam Borgal 24.7K views 29 comments 0 points Most recent by xpac xpac September 2023
Wondering if it's at all possible to do a lookup with multiple match criteria?

Answered Louise Tang 5.8K views 6 comments 0 points Most recent by Louise Tang September 2023
Storing Windows Event Logs in XML with each event in a single file

Answered Andrew Duca 4.6K views 4 comments 0 points Most recent by Andrew Duca September 2023
Why is passthrough reducing events?

Answered saurabh.gupta 10K views 10 comments 0 points Most recent by saurabh.gupta September 2023
Using regex to extract fields

Answered Mike Dupuis 7K views 4 comments 0 points Most recent by Mike Dupuis September 2023
How to parse a JSON object?

Answered Eric Reusche 13.2K views 14 comments 0 points Most recent by Jon Rust September 2023
How are you handling token persistence?

Answered Paul Dott 25.8K views 30 comments 0 points Most recent by Raanan Dagan September 2023
Does anyone know how to create a Webhook endpoint on Cribl?

Answered Tomer Shvueli 3.3K views 2 comments 0 points Most recent by Tomer Shvueli September 2023
Looking for recommendations for a good services/processes config for a 1000+ edge node deployment?

Answered Nick Kwiecien Nick Kwiecien 1.8K views 2 comments 0 points Most recent by Brandon McCombs September 2023
Looking for insight on the *Time Range* selection when running against an Amazon S3 bucket

Answered Raanan Dagan 9.1K views 17 comments 0 points Most recent by Raanan Dagan September 2023
Looking to enrich my data by doing a reverse ip lookup and setting that as the source

Answered Jim Apger 13.6K views 18 comments 0 points Most recent by Shawn Cannon September 2023
What are the steps to backup an old Cribl instane?

Answered Anson VanDoren 1.6K views 1 comment 0 points Most recent by Andrew Duca September 2023
Can you use __hecToken as a filter condition for the breaker?

Answered Shawn Cannon 4.9K views 8 comments 0 points Most recent by SonOfBuzi September 2023
Is there any way we can get the logs in the timeperiod when the server is down?

Answered dduke 5.1K views 7 comments 0 points Most recent by David Maislin September 2023
Has anyone had to backpressure a destination via Persistent Queue?

Answered Kyle McCririe 3.2K views 4 comments 0 points Most recent by Clint Sharp September 2023
Does anyone have any instructions on how to update SSL certs using CLI?

Answered Christopher Owen 17.5K views 20 comments 0 points Most recent by Raanan Dagan September 2023

Categories

Popular Tags